Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9961OFJ6t3GuvmiBEna6xfuJtVI.roa
File: 9961OFJ6t3GuvmiBEna6xfuJtVI.roa (raw, json)
Hash identifier: 4jgdwoVDMcM5qiXlw9krjtDGiXtFuphWwufGYExHYWM=
Subject key identifier: F7:DE:B5:38:52:7A:B7:71:AE:BE:68:81:12:76:BA:C5:FB:89:B5:52
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CC8DF3CEDC63162D1452691039025B136
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9961OFJ6t3GuvmiBEna6xfuJtVI.roa
Signing time: Tue 02 Jan 2024 06:32:02 +0000
ROA not before: Tue 02 Jan 2024 06:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 77.90.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3c:ed:c6:31:62:d1:45:26:91:03:90:25:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 06:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7deb538527ab771aebe68811276bac5fb89b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:9b:c4:4e:7e:e6:3a:a9:50:b7:39:50:90:
56:35:d6:79:1d:6b:fa:9b:69:80:e1:4d:88:3b:f8:
1c:a6:61:fc:9d:e2:1f:60:c7:36:4f:e6:4a:26:37:
b0:bb:20:ac:30:b2:20:88:c6:70:c2:b0:01:c3:90:
f5:99:d5:b9:50:f9:59:8b:83:ce:0d:eb:bc:66:a7:
9c:b3:0b:e0:12:62:85:1f:bc:33:a7:b3:46:1a:13:
ab:13:2f:27:f6:6a:e5:8a:9b:b3:22:c8:fc:c2:35:
64:4f:b3:47:2d:c3:57:75:b8:0a:bb:68:a2:e5:e8:
a7:59:ef:1f:58:e9:eb:7a:62:fc:b8:b2:33:2b:92:
a7:a0:85:6d:eb:80:85:dc:0d:64:aa:98:2c:a9:f1:
cf:3a:33:4c:2d:77:f4:1b:71:c3:34:9d:a3:d2:48:
8c:ed:81:54:ae:d2:1c:b6:72:5e:da:77:53:f4:ac:
8e:bc:67:46:69:b0:9d:72:93:56:f5:26:4b:1d:27:
57:7d:96:8a:d0:0b:66:91:8b:8b:4e:a9:40:36:21:
f0:77:d7:3f:20:3a:0e:4e:9e:bf:96:da:39:2d:58:
9e:04:d7:83:24:97:72:5e:e4:3f:75:83:19:e1:8f:
e8:09:56:57:ae:27:51:68:a0:c2:44:34:28:8f:76:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:B5:38:52:7A:B7:71:AE:BE:68:81:12:76:BA:C5:FB:89:B5:52
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9961OFJ6t3GuvmiBEna6xfuJtVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0d:ac:37:17:62:16:ba:75:00:36:3b:02:c1:00:51:5d:cb:
15:83:e9:bc:01:92:a5:bf:b8:92:37:f1:c4:51:c6:f5:a0:f3:
86:6c:f4:cc:17:e8:a2:c3:9c:db:58:57:75:e8:d5:bb:e6:ce:
30:a9:ef:7b:49:8d:20:78:0d:32:e5:c9:c4:39:0a:65:d8:8f:
59:9d:cb:3d:d7:ff:b1:c9:e1:b0:c6:32:63:44:66:7e:e9:3d:
75:6c:75:d0:62:23:24:34:25:e3:6c:24:2b:6e:1e:f5:1c:de:
31:19:74:c8:9e:b9:29:94:85:a1:96:a1:45:33:89:24:76:0e:
ae:2f:80:8f:6a:cd:9f:3b:fc:4e:10:6e:5f:73:c3:c2:4a:80:
cb:31:a8:32:4a:68:d5:c6:bc:8f:25:c0:aa:32:62:fb:f5:7d:
1a:e0:90:c1:b9:b9:e0:38:44:b5:de:bd:3d:8c:6a:ce:c4:a7:
bc:a1:64:00:c4:66:69:bb:cb:86:2a:88:f7:55:6a:96:e0:34:
3b:de:7e:0e:d2:b6:50:f9:79:c4:d0:8f:b9:e7:5f:fc:97:5b:
a3:bc:2a:99:37:81:d0:77:6c:4c:92:9c:17:36:49:84:a7:ce:
60:0e:e6:55:46:d5:88:0f:c6:72:03:70:45:85:24:9a:30:3d:
8b:c6:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:18:57 2024 by rpki-client on console-ams.rpki-client.org