Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WhfdVTh5PjqFORUTqjDYBglWpjk.roa
File: WhfdVTh5PjqFORUTqjDYBglWpjk.roa (raw, json)
Hash identifier: A1len0VyOUI9t4YqNg0hFc3YWudOt1w+kWol09NMxf0=
Subject key identifier: 5A:17:DD:55:38:79:3E:3A:85:39:15:13:AA:30:D8:06:09:56:A6:39
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019265DCE71DE21D23D4B198749398F8F54C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WhfdVTh5PjqFORUTqjDYBglWpjk.roa
Signing time: Mon 07 Oct 2024 07:23:48 +0000
ROA not before: Mon 07 Oct 2024 07:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 77.90.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:dc:e7:1d:e2:1d:23:d4:b1:98:74:93:98:f8:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 7 07:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a17dd5538793e3a85391513aa30d8060956a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:15:db:21:86:65:60:d6:2e:07:0c:1d:19:
f1:09:3a:a7:58:c3:40:56:54:5e:4e:59:cf:9e:3d:
8d:e9:7f:47:77:3d:7e:7c:96:c5:79:8f:e3:fd:d7:
26:c9:3c:b8:97:60:53:91:93:70:d7:c6:63:90:e8:
46:6d:8f:49:77:ff:43:f8:de:40:3e:ba:a1:05:b9:
61:83:86:9b:c9:a2:2b:da:76:43:d7:a7:35:5f:28:
81:a0:60:be:6d:a2:6e:d9:b7:49:db:e6:1a:78:3e:
c2:8d:c0:43:ed:b1:eb:6e:77:5d:9b:49:ea:57:6f:
69:d7:a8:81:26:ea:a7:41:22:fc:2b:9c:9a:2f:ea:
61:a7:5a:d0:e3:7a:29:d6:b6:42:6f:80:93:88:9e:
fb:8d:36:69:6c:56:03:29:a1:e1:71:69:27:95:85:
59:b5:df:2d:ce:f7:a5:19:30:92:46:b5:4a:a5:a5:
b8:b4:ad:fa:af:ec:d2:53:65:7b:20:ed:34:83:4a:
0c:b4:12:6d:e0:df:b9:4b:a7:bf:f3:af:c4:0a:89:
a7:dc:bb:38:0b:92:cc:9a:ea:84:c0:89:2f:90:3d:
e6:1d:ae:00:46:67:04:98:d0:1f:5e:1a:ab:4b:3e:
d5:5b:ea:1e:d9:e8:ac:38:e4:f2:97:cb:65:d0:72:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:17:DD:55:38:79:3E:3A:85:39:15:13:AA:30:D8:06:09:56:A6:39
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WhfdVTh5PjqFORUTqjDYBglWpjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:61:f0:ba:00:49:28:6d:ec:80:0c:43:93:09:99:9a:52:95:
25:41:7b:a2:79:f5:28:2b:42:03:ff:21:b8:b5:e0:83:e7:f0:
51:2e:64:a0:44:16:a3:5d:32:14:83:ce:ba:5b:ca:a9:ae:6c:
12:d8:79:b4:5e:fb:28:03:a2:4b:03:61:f0:df:86:d9:f1:9f:
15:44:20:af:3c:b6:a8:bb:ba:a1:be:ce:3e:68:5a:7f:ea:4d:
05:ea:e5:f3:e1:67:4f:6b:a4:98:85:05:5f:4e:11:51:d2:32:
2c:d7:e7:47:96:c5:12:6f:db:09:c8:1e:ff:63:cd:82:cf:ec:
75:67:45:6a:be:d7:27:8f:ef:eb:37:34:2a:f6:54:5d:fb:0b:
08:a8:2b:cc:5e:06:b2:af:d4:21:23:8f:13:f4:63:71:c3:f8:
a5:21:af:ab:9f:d1:d4:9f:d8:26:43:a5:a0:87:7b:3c:e1:d1:
99:0c:dd:95:d9:be:a9:11:d9:e4:20:5c:fd:0c:d2:65:3a:f5:
5c:14:c0:88:7b:8c:de:7e:d5:5c:82:48:c2:0c:4f:ac:82:e2:
17:ca:79:96:02:a1:26:cd:b9:ea:c9:1a:32:a8:1e:6f:77:8a:
b6:e4:93:6c:6a:9e:a2:04:66:3c:00:a6:70:a5:2c:a7:6a:5b:
5c:54:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:54 2024 by rpki-client on console-fra.rpki-client.org