Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/AfPSc18Zc5_8zJ35KgVqcALr1dA.roa
File: AfPSc18Zc5_8zJ35KgVqcALr1dA.roa (raw, json)
Hash identifier: 1CUl9F4VwkfeknjsBkuKdXNnfplXgLo375ZobDA6VCs=
Subject key identifier: 01:F3:D2:73:5F:19:73:9F:FC:CC:9D:F9:2A:05:6A:70:02:EB:D5:D0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CC8DF3FDAFDFFCD8342DC17E1FDD88CA6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/AfPSc18Zc5_8zJ35KgVqcALr1dA.roa
Signing time: Tue 02 Jan 2024 06:32:03 +0000
ROA not before: Tue 02 Jan 2024 06:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 77.90.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3f:da:fd:ff:cd:83:42:dc:17:e1:fd:d8:8c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f3d2735f19739ffccc9df92a056a7002ebd5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:9b:d0:93:c3:3b:a2:38:c7:c0:8f:e0:85:
cd:0f:8c:4b:54:a0:7b:49:b7:ae:31:e9:de:b8:72:
0a:41:fc:8a:ee:1e:e1:02:79:60:d8:5d:2c:06:c1:
67:2b:c1:8b:58:fc:d5:8d:ab:64:db:95:90:2a:b7:
ff:49:82:96:23:b0:84:be:51:17:49:b2:21:c9:07:
7f:49:f3:e0:9d:78:23:0c:8c:6b:91:1a:ba:78:17:
86:23:c9:8b:15:23:c3:b9:6f:8b:51:39:cb:95:a2:
c5:89:ee:09:76:3c:62:cc:ef:d9:fd:2f:c6:df:6a:
00:5e:7d:8c:43:03:f7:13:71:c3:96:ab:6b:b8:ea:
78:d4:9a:04:06:13:e9:b3:a3:8e:22:c1:4c:c0:1e:
eb:12:91:15:cc:bf:27:0a:40:0c:c2:a7:5a:1b:87:
c1:a9:ed:a5:9d:54:86:24:c1:47:82:11:e8:a7:5b:
91:01:24:30:ff:7a:c4:02:1c:b3:f4:ab:14:51:f4:
b7:77:89:62:a3:3f:d7:4a:cc:8c:96:a6:4f:dd:60:
35:b0:3e:62:06:fc:58:b7:6a:ae:83:39:50:cc:88:
a2:a6:f9:8a:f3:c3:b7:91:3f:1a:c1:b4:1e:35:73:
68:e3:67:5e:59:f2:aa:1e:69:4d:9b:37:91:09:68:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F3:D2:73:5F:19:73:9F:FC:CC:9D:F9:2A:05:6A:70:02:EB:D5:D0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/AfPSc18Zc5_8zJ35KgVqcALr1dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:28:12:d6:8b:87:33:8d:1a:b8:3c:bf:c8:f8:ad:ce:56:c3:
2f:26:5c:24:a9:1a:85:4f:31:01:0a:35:f0:25:fb:65:a3:d8:
08:6c:2f:68:0a:8c:b7:dc:62:65:86:fb:04:7a:5a:ff:c7:56:
73:57:f3:b7:04:47:00:21:52:83:d9:dc:9e:63:5a:52:23:ec:
17:46:ea:4a:fe:19:bc:63:34:b0:ab:98:77:c3:01:10:42:20:
e3:09:56:05:fd:bb:3c:f3:2f:c3:62:87:15:94:49:54:bb:80:
25:9e:08:ef:78:80:d2:4a:07:78:76:96:dd:90:ab:fc:f7:84:
f3:76:90:18:47:9b:32:bd:39:ab:d7:fc:2d:d4:a7:2a:b4:a0:
36:5c:0f:bc:34:97:11:57:40:c2:6b:2e:7b:35:84:93:20:33:
a8:56:a4:bd:2f:46:9f:92:59:98:3d:58:aa:9c:e6:c3:84:c8:
05:5e:f4:4c:d4:79:11:18:9a:10:4e:71:0e:da:a5:ca:bf:18:
12:c9:7c:20:6b:5d:5e:68:b3:ab:15:41:14:12:5d:70:ad:9d:
32:b0:ca:8c:aa:59:a7:3d:dc:7d:d8:35:5a:f9:0a:e7:90:81:
cd:b1:23:94:5b:b7:76:5c:0e:43:8f:63:12:66:ba:8e:35:ff:
58:b1:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:18:57 2024 by rpki-client on console-ams.rpki-client.org