Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yarXwJBF9XykWm5IC7omux8wnQM.roa
File: yarXwJBF9XykWm5IC7omux8wnQM.roa (raw, json)
Hash identifier: 2E5GWvkDHHIVuHRdR6z4zkhWKNuwWvJg02S2BMC1UR8=
Subject key identifier: C9:AA:D7:C0:90:45:F5:7C:A4:5A:6E:48:0B:BA:26:BB:1F:30:9D:03
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193AC6DE1CE5CDC4EF7AA762477166273CB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yarXwJBF9XykWm5IC7omux8wnQM.roa
Signing time: Mon 09 Dec 2024 17:18:22 +0000
ROA not before: Mon 09 Dec 2024 17:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:6d:e1:ce:5c:dc:4e:f7:aa:76:24:77:16:62:73:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 9 17:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9aad7c09045f57ca45a6e480bba26bb1f309d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:b7:c2:a4:3e:a5:d5:bc:7d:da:d0:a8:0b:
12:54:5d:11:0b:57:56:d4:82:6d:3f:a7:2b:0e:31:
46:76:50:b8:eb:5d:1a:1e:46:3a:41:a5:7a:39:b1:
31:16:e0:a0:2b:b5:37:92:13:6c:f5:9f:cd:25:97:
3a:4a:af:f5:98:a9:d6:1b:1c:23:75:a2:57:c5:9f:
71:1b:3b:30:14:f1:f5:39:51:73:35:12:8d:2c:da:
c5:10:26:23:f4:3a:21:d7:78:fc:08:eb:47:40:b5:
03:eb:3c:96:92:7e:35:3f:dc:04:fa:4a:18:f0:9f:
2a:83:1e:78:bf:f8:43:9d:d2:d7:58:75:a1:83:6e:
90:ba:a3:61:87:7e:ec:d8:bc:02:23:db:79:ce:98:
d3:89:9b:e8:36:22:7a:f6:76:e5:6f:ab:97:e8:7b:
07:73:fb:45:d1:bf:ce:99:2e:6c:d6:4e:e6:1d:ea:
54:ff:ec:e3:ae:22:26:51:fd:6e:24:7a:b5:60:b8:
5f:eb:27:8b:d2:04:18:d3:ec:ea:14:fc:e4:e5:b5:
83:b3:46:d8:62:cc:4f:96:40:65:6d:7c:a5:52:8f:
17:98:8f:a7:f5:be:91:d9:ac:ed:7e:a0:19:b9:9a:
b1:14:eb:28:48:1a:a7:8b:8e:73:3d:6d:a4:95:f5:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:D7:C0:90:45:F5:7C:A4:5A:6E:48:0B:BA:26:BB:1F:30:9D:03
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yarXwJBF9XykWm5IC7omux8wnQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f5:cc:56:3b:29:eb:1d:44:b8:3f:f0:0f:c0:e9:cf:3a:dc:
a5:20:43:a2:f3:0a:c4:10:19:61:eb:9d:25:4d:22:23:dd:f8:
80:09:29:16:51:4e:31:d6:8b:cc:98:01:aa:1a:3b:ed:03:38:
b1:2f:a8:f1:f6:13:b3:85:26:ed:0a:d2:f4:1d:a4:bf:af:6d:
ef:40:93:bf:9f:d9:ca:d9:fd:d1:a3:6d:83:90:c0:45:01:22:
8b:d8:8a:19:06:09:5c:3b:95:f3:a0:85:e0:9c:77:63:db:e7:
e1:08:c7:fd:38:1d:25:1d:58:64:a2:5f:fb:20:0a:4d:a4:f1:
87:30:d8:34:51:1a:cc:07:4b:b2:3d:16:cf:2e:9d:32:86:fd:
0f:5e:90:74:88:3f:7f:a8:e2:c2:a2:1e:d2:7b:8c:dc:1a:64:
1f:03:06:50:1a:43:86:7a:8e:0b:d5:5a:92:b4:78:b0:8c:ad:
6f:d6:46:3e:69:c4:75:ef:cc:64:19:1a:e2:52:30:50:1b:34:
14:9d:21:1f:6f:bb:0b:6c:99:ab:83:30:ac:54:c8:ee:d7:d4:
26:73:b8:b8:5d:e8:3d:7e:b8:f0:aa:d6:9a:bd:30:a3:7c:51:
fa:48:49:ab:96:d3:c6:16:f4:e3:02:99:33:51:39:5c:05:ac:
ed:3e:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:20:41 2024 by rpki-client on console-fra.rpki-client.org