Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Nqlxmx73Hv0ua6_mQhs9in6nrZY.roa
File: Nqlxmx73Hv0ua6_mQhs9in6nrZY.roa (raw, json)
Hash identifier: foCMIGXSww64rGOxZx3u64LEhxj9Gg1B8MiDX9D36l4=
Subject key identifier: 36:A9:71:9B:1E:F7:1E:FD:2E:6B:AF:E6:42:1B:3D:8A:7E:A7:AD:96
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01932534B01C7B95CB5FE228F97718E8239D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Nqlxmx73Hv0ua6_mQhs9in6nrZY.roa
Signing time: Wed 13 Nov 2024 11:07:10 +0000
ROA not before: Wed 13 Nov 2024 11:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:34:b0:1c:7b:95:cb:5f:e2:28:f9:77:18:e8:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 13 11:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a9719b1ef71efd2e6bafe6421b3d8a7ea7ad96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:82:0c:61:8b:47:49:c4:35:f4:55:fa:49:
a8:a0:62:e0:17:79:2d:a3:87:a4:46:b2:47:2d:6e:
65:d0:15:3c:38:2c:97:44:fa:d4:de:d4:6c:bc:5b:
ba:03:43:84:5c:d5:ea:4f:3c:2e:78:13:72:33:cd:
0f:94:d1:40:32:b3:7f:cb:9c:e5:a1:22:4b:79:52:
56:f6:9c:98:a7:59:c1:ee:11:c1:22:29:2a:32:8e:
7f:64:29:a2:2f:64:c5:16:5e:d0:dd:e3:82:b0:9a:
71:a4:5b:a6:1f:25:50:dd:89:dc:1d:53:d8:6b:8f:
2d:1a:fc:28:46:1b:36:9f:17:54:80:b8:b8:3c:48:
81:c3:43:57:66:21:96:15:ba:60:bd:8c:3c:2d:9a:
b4:e4:63:3f:ec:0e:40:8b:c1:ee:ea:20:a0:ce:eb:
83:b4:06:2d:2a:cb:d9:b8:ae:ff:d3:4a:50:d1:7f:
e3:9f:94:6c:70:f2:d1:09:3a:83:86:4f:1f:d3:5b:
97:ae:b8:97:ac:24:1c:bf:4d:ac:e2:b0:6c:66:7a:
b2:02:22:d3:37:7e:ed:05:c1:26:73:50:3a:8f:19:
c8:f9:a8:bb:87:a3:b7:20:b2:ca:36:5e:ab:4d:d3:
f8:5e:1c:f0:e7:46:02:a0:77:e8:0b:b9:5c:f9:8e:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:71:9B:1E:F7:1E:FD:2E:6B:AF:E6:42:1B:3D:8A:7E:A7:AD:96
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Nqlxmx73Hv0ua6_mQhs9in6nrZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:67:e0:74:78:36:46:2f:95:02:5f:b1:c0:1d:6a:a6:b0:b3:
6d:82:14:d6:0a:84:40:fc:08:37:83:a3:0b:f6:18:fa:ef:d0:
d7:9f:38:cf:53:95:4c:dd:31:0e:d1:1c:17:18:33:f2:44:d1:
fe:59:38:9b:6f:fb:eb:4c:11:76:04:21:0f:17:27:1c:6a:be:
8d:a4:e3:79:e7:70:01:c5:a6:af:31:1e:a1:24:b7:26:90:63:
62:bb:a2:34:9d:88:18:8e:06:3f:da:29:45:00:e2:e2:b0:28:
47:f2:ef:23:a1:a4:b1:07:76:4d:c8:60:1c:cc:b7:2c:52:1a:
d2:9b:3b:83:7c:e7:85:86:c9:4f:de:0f:b4:54:6e:b6:e8:49:
9d:ac:4c:13:ce:6c:c3:07:30:02:86:da:a6:04:7e:be:22:aa:
8a:18:ed:1b:09:f9:26:4e:35:c3:bb:b6:14:4c:42:09:c5:f1:
2a:09:15:34:c6:00:9b:b3:6f:9a:66:33:fe:4a:88:aa:e8:b3:
ee:7a:3b:d7:df:00:5e:f4:c1:c7:48:6c:bb:ca:e0:58:b3:16:
cb:c7:25:b6:e6:b0:6d:9b:32:64:53:9e:fe:bf:c5:79:ae:1a:
57:81:be:7e:0f:2b:b5:22:8d:82:96:be:0c:12:60:d4:86:88:
91:60:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:42 2024 by rpki-client on console-ams.rpki-client.org