Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ggJNvST0jqZM1-f7GVtHwRs3iAQ.roa
File: ggJNvST0jqZM1-f7GVtHwRs3iAQ.roa (raw, json)
Hash identifier: 774vELi1G8sM6M2oj+7VfO/usoqG8lUnHUSJXl6VlZg=
Subject key identifier: 82:02:4D:BD:24:F4:8E:A6:4C:D7:E7:FB:19:5B:47:C1:1B:37:88:04
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01932534AFA85DA43BEADC4D8646E7F2A187
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ggJNvST0jqZM1-f7GVtHwRs3iAQ.roa
Signing time: Wed 13 Nov 2024 11:07:10 +0000
ROA not before: Wed 13 Nov 2024 11:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 77.90.131.0/24 maxlen: 24
77.90.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:34:af:a8:5d:a4:3b:ea:dc:4d:86:46:e7:f2:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 13 11:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82024dbd24f48ea64cd7e7fb195b47c11b378804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:e9:be:98:99:dc:70:00:a2:ff:91:42:2b:
03:73:b3:86:33:13:7d:4e:25:16:63:ed:54:50:12:
5b:04:a8:32:e8:8b:6b:d1:9d:61:00:1e:b6:ec:b1:
1c:bf:29:43:6d:ad:ef:8e:b5:ee:2f:31:2c:ba:70:
42:3c:34:07:5f:e2:a4:09:f6:fd:f7:89:77:52:3b:
38:60:ea:9a:46:20:0a:92:d0:64:d1:08:5c:03:6f:
0d:d6:b7:82:6f:09:1c:e5:9e:a1:49:00:86:74:26:
74:91:c1:c4:8a:be:0f:a2:cd:29:e5:1b:e4:c7:bc:
0a:02:34:8f:cd:71:40:5c:9f:a6:3e:60:16:09:42:
67:cf:61:09:82:6a:35:d8:b3:a1:c6:cb:07:ff:b5:
8e:53:0a:8f:8e:f9:bb:fb:8a:ba:59:53:cb:84:62:
90:1a:97:3f:5e:36:23:8e:79:e6:e3:61:bd:b7:86:
d6:ef:39:5e:e3:53:4e:1a:87:55:a5:07:f2:4c:5a:
5b:79:fe:63:a7:66:aa:eb:09:00:21:2a:ca:bc:64:
67:55:a3:6e:7b:d2:7f:3e:d2:ba:bf:7f:19:ab:48:
40:db:30:10:5e:5b:19:14:6f:62:f4:fb:f2:5e:f2:
ee:9b:92:67:49:0e:43:e5:62:55:40:07:e9:ac:c4:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:4D:BD:24:F4:8E:A6:4C:D7:E7:FB:19:5B:47:C1:1B:37:88:04
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ggJNvST0jqZM1-f7GVtHwRs3iAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.131.0/24
77.90.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ad:e5:29:1a:43:57:f8:f1:72:97:b9:00:8e:e1:1b:dd:95:
de:ca:a6:b9:16:b2:09:0d:d7:c1:76:19:89:b5:c0:c4:6b:4f:
80:b7:4e:5d:4e:08:a0:3d:fa:03:25:99:3b:65:b9:d8:ae:21:
b1:c9:f5:d3:09:8c:bb:2b:16:7e:65:0c:95:39:fb:eb:f6:0d:
34:ae:83:04:e2:ff:0c:a4:e1:33:a6:d5:21:ae:2f:78:a9:30:
e1:32:8d:c9:a1:2f:44:06:02:82:11:16:aa:8a:44:3b:11:31:
19:61:0b:79:a1:f9:d9:dd:c1:a8:b6:56:1d:06:ad:dd:0c:c8:
ce:8e:c0:aa:e0:45:ac:e1:af:9d:13:f5:25:d9:e9:a4:59:c8:
1a:04:c7:2e:fb:55:d7:2a:c8:b8:c5:13:8c:fe:39:93:8a:ac:
78:b6:88:bc:73:86:e8:ac:35:fb:83:dc:07:f1:30:fe:49:5d:
60:56:c5:78:05:bb:1d:e5:9e:27:87:da:e8:b5:b2:dd:4a:5b:
34:f1:75:74:22:8a:ab:f4:b6:d2:63:99:c5:0a:30:6a:40:c5:
dc:22:6c:32:f6:79:01:a1:5f:19:65:2f:ce:40:0c:34:e4:51:
ca:99:9c:d5:e0:77:33:5b:44:aa:80:28:44:45:ef:db:b2:8a:
77:df:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:27:22 2024 by rpki-client on console-ams.rpki-client.org