Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9MhQVq4NMKPuo7cxR-Rt2e93aB4.roa
File: 9MhQVq4NMKPuo7cxR-Rt2e93aB4.roa (raw, json)
Hash identifier: YSlA09Te8z/wm4DLG2+zH9XmSRuNbKU2orwGxii3FyM=
Subject key identifier: F4:C8:50:56:AE:0D:30:A3:EE:A3:B7:31:47:E4:6D:D9:EF:77:68:1E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01908D3C032CCFDD071AA2FEABB3F89F60A7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9MhQVq4NMKPuo7cxR-Rt2e93aB4.roa
Signing time: Sun 07 Jul 2024 12:47:18 +0000
ROA not before: Sun 07 Jul 2024 12:47:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.138.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:3c:03:2c:cf:dd:07:1a:a2:fe:ab:b3:f8:9f:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 7 12:47:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c85056ae0d30a3eea3b73147e46dd9ef77681e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:46:93:c7:77:cc:aa:06:7e:7e:04:2e:c3:
ca:80:da:94:db:a6:71:66:9d:c9:28:0b:37:ab:99:
8c:f2:32:e1:03:0b:34:8c:cd:f1:9f:08:f3:7d:18:
d0:b0:be:53:12:89:58:8b:79:25:16:c4:2c:8d:2d:
e4:d1:01:c1:b9:fa:09:37:ba:95:0a:48:9d:85:47:
49:17:5a:fc:7c:6b:b2:09:57:4e:da:0c:17:5c:5f:
9f:da:68:f9:f1:01:ef:bd:89:79:b4:45:f9:6a:43:
33:78:df:d0:0c:0f:ab:ff:5b:24:2f:6d:26:83:b0:
d5:ef:4e:8f:e3:f7:5e:47:0e:db:40:b2:70:b6:f3:
bc:28:fa:af:80:05:20:47:54:7a:89:d2:1c:d1:2f:
d6:15:2e:8b:af:a7:19:10:06:b5:6e:0c:7a:0f:10:
26:f1:b3:44:08:7e:ee:c6:a1:97:44:f7:d4:fa:c1:
7c:97:cb:78:e6:16:bf:60:58:33:db:35:43:37:4b:
fc:af:2f:b8:5c:53:24:1b:f2:2f:bc:d7:89:22:da:
34:bb:db:4d:42:31:5f:84:b3:a9:85:59:a0:30:4c:
e7:40:42:10:33:54:5f:8a:5f:25:33:bc:51:05:dc:
d3:20:91:56:07:78:1c:4c:3b:b8:a9:bc:24:38:37:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:50:56:AE:0D:30:A3:EE:A3:B7:31:47:E4:6D:D9:EF:77:68:1E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9MhQVq4NMKPuo7cxR-Rt2e93aB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
af:da:12:3b:e4:c5:ca:a7:e9:4d:f6:6a:62:05:d2:bd:f6:84:
9b:9c:08:11:b3:9b:f8:c3:1c:02:84:f1:f3:bc:d4:98:23:00:
51:aa:f4:3a:37:05:34:26:5c:5d:aa:c6:64:d7:43:aa:b4:30:
c9:a5:80:16:31:f0:2f:fb:cb:21:f6:d7:39:f9:a1:77:69:83:
7b:63:38:e9:34:d9:00:4e:74:f9:cf:af:ad:f2:d2:33:44:ec:
a5:9b:4f:b0:e8:9b:82:a4:b5:10:bb:54:3b:54:10:e0:e4:39:
f9:dc:dc:29:ec:3f:42:c3:64:49:41:09:6f:b2:ae:41:88:19:
31:80:52:5c:cc:c7:d1:d0:25:e4:35:cc:7a:07:11:8f:be:0f:
10:09:5a:ae:10:7e:6b:26:17:68:d1:7e:08:cd:37:04:00:c8:
b8:a3:eb:91:02:ce:9f:ea:54:49:6b:6d:be:10:35:50:1c:8e:
70:ff:5b:04:1c:43:4d:6b:e0:e4:21:13:be:59:b4:6d:f2:24:
85:91:42:4e:74:3f:b8:26:0d:93:c0:81:cf:90:3b:39:e3:92:
49:d9:d1:c0:ee:a2:64:0a:86:9a:34:33:00:dd:8a:5a:68:9d:
9a:bd:8e:30:3a:c6:ea:f6:de:a5:b2:3e:b3:97:2e:1b:db:50:
e0:f5:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:21:24 2024 by rpki-client on console-fra.rpki-client.org