Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r3h2w0E_CLcOBL0xIegylZoFgXk.roa
File: r3h2w0E_CLcOBL0xIegylZoFgXk.roa (raw, json)
Hash identifier: wPVKLpHdy/zlIBkDas9r20klW6dQix1O/poVBsF1j4U=
Subject key identifier: AF:78:76:C3:41:3F:08:B7:0E:04:BD:31:21:E8:32:95:9A:05:81:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E230C92096DEC8E4A0BD2810673037899
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r3h2w0E_CLcOBL0xIegylZoFgXk.roa
Signing time: Sat 09 Mar 2024 11:50:10 +0000
ROA not before: Sat 09 Mar 2024 11:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215738
IP address blocks: 77.90.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:0c:92:09:6d:ec:8e:4a:0b:d2:81:06:73:03:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 9 11:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af7876c3413f08b70e04bd3121e832959a058179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:91:d8:07:08:26:14:ae:75:a2:ac:5c:cd:
ec:06:ef:39:b2:bf:26:ac:92:c8:05:04:b0:f1:e7:
27:f3:c3:99:60:ee:5e:ee:a6:22:da:fb:d7:2a:6f:
ad:c5:01:43:66:26:34:b6:bb:f5:e5:71:6b:b7:3b:
cf:c6:8e:1a:73:ca:98:f3:21:69:9d:8d:cd:7c:f3:
0c:4a:c2:cf:5e:dc:d0:6a:a4:84:47:ae:94:d1:e7:
5b:64:49:09:af:02:48:97:48:33:05:86:d3:74:4f:
be:31:57:c0:42:03:47:a8:59:93:d3:e7:5c:65:ed:
b8:ae:39:98:49:9a:ae:4d:88:19:f7:75:1e:10:f1:
d6:6e:de:89:28:4d:50:28:0e:2c:21:65:dd:e2:c0:
cc:63:fd:96:c0:42:3c:51:e6:68:73:42:1c:15:78:
41:87:c2:df:48:58:5f:e0:56:50:29:5f:3a:25:2a:
62:5c:37:65:f6:5f:e8:23:86:c1:40:5d:f2:14:93:
3f:04:17:80:be:5e:72:ac:aa:45:ce:2e:bf:f9:16:
a3:a0:5b:af:76:32:1e:8f:66:ff:a0:09:78:f2:2c:
a5:e7:b3:a2:b6:30:ae:da:7e:cd:ba:54:5b:11:8c:
88:57:00:81:b0:7b:6d:9a:80:f5:4e:d1:5a:9a:09:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:76:C3:41:3F:08:B7:0E:04:BD:31:21:E8:32:95:9A:05:81:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r3h2w0E_CLcOBL0xIegylZoFgXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.12.0/24
Signature Algorithm: sha256WithRSAEncryption
50:39:08:8d:1d:84:79:44:0c:77:50:93:84:5c:55:d4:8b:7b:
1c:90:ae:89:a1:e1:20:15:4a:07:9d:42:84:70:56:54:2c:b8:
fa:b7:87:45:09:2d:cd:27:9b:95:90:42:62:7d:df:da:d3:81:
2c:97:d6:2d:b3:b4:7b:91:0e:06:43:fe:74:6f:35:44:4f:79:
61:2b:88:ff:6b:2c:d4:50:40:bb:6e:59:97:8e:7e:62:af:7f:
ae:cf:07:12:aa:16:09:41:56:00:ad:e1:f2:2a:a1:1c:a2:d6:
4b:c7:7a:a3:f9:1f:1a:d3:59:19:60:02:54:87:62:96:22:40:
f7:1d:9b:81:c6:e0:85:84:30:80:1b:cd:06:f7:7a:ec:10:05:
77:05:0a:41:fe:82:86:b5:e5:a0:ea:ce:a7:f7:28:3a:ef:89:
de:61:d2:e0:f5:61:5d:b3:48:b0:72:54:af:75:35:c4:d0:4f:
0c:61:a3:2f:9e:07:83:8b:95:c8:1e:63:4d:16:15:ef:f6:48:
58:f8:7e:92:52:82:d9:14:ec:89:8d:5b:f9:db:20:1f:f0:c7:
a5:80:a1:95:f8:15:e8:c6:c5:cb:3f:11:d4:bd:a2:06:95:bb:
51:8d:29:2a:56:37:ce:25:4e:16:78:91:41:ab:9e:0d:1b:e1:
38:df:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 15:55:00 2024 by rpki-client on console-ams.rpki-client.org