Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa
File: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (raw, json)
Hash identifier: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=
Subject key identifier: 8A:51:BA:CB:65:AC:A3:79:8E:83:11:BC:E6:B6:B7:89:1D:9E:F0:29
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194ADE7F15ECAA6D2FE0B78E7E710D99C3F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa
Signing time: Tue 28 Jan 2025 17:14:06 +0000
ROA not before: Tue 28 Jan 2025 17:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 77.90.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:e7:f1:5e:ca:a6:d2:fe:0b:78:e7:e7:10:d9:9c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 28 17:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a51bacb65aca3798e8311bce6b6b7891d9ef029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:ee:44:49:40:02:9d:8f:c1:b0:5a:4c:ce:
16:c4:0b:1e:69:80:56:56:6e:ee:a4:14:f3:0a:a1:
51:fe:f5:91:19:9e:7d:85:bb:59:1a:71:e1:04:6f:
4a:d6:6e:94:22:ef:09:52:12:c6:fc:ff:30:27:52:
f4:79:80:bb:7c:6f:8d:c4:ef:e0:0b:c1:79:f7:cd:
66:2c:34:66:59:ef:d8:8c:19:12:84:37:0c:8b:1b:
c6:e1:49:45:0e:74:64:37:14:b3:6d:5e:d0:87:ee:
04:fe:70:e2:86:04:12:45:de:10:36:ec:85:76:24:
aa:68:d1:65:85:7c:c1:d9:7d:20:df:18:d7:98:bb:
11:98:20:2c:36:48:7b:8b:3b:1a:c1:d8:4f:f2:03:
25:80:83:25:c1:f7:c0:1f:f7:65:46:68:41:1b:80:
0d:85:32:a0:a2:fb:9b:55:99:85:58:5a:be:32:2b:
c1:c7:fe:b1:79:e3:af:3c:18:53:52:a9:dd:5b:0c:
79:ae:93:04:cc:c9:e3:4d:d5:2d:49:34:fc:c6:fe:
6c:10:84:30:34:6f:bd:0b:b5:c4:55:5f:c4:cc:91:
c1:ba:74:09:72:fe:55:66:b6:c0:05:d7:9b:ca:3e:
59:69:36:a8:c9:5d:64:ef:f2:0c:4d:01:49:cc:10:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:BA:CB:65:AC:A3:79:8E:83:11:BC:E6:B6:B7:89:1D:9E:F0:29
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:52:d4:85:63:68:13:47:b5:5f:0b:2a:27:51:8a:35:db:
73:89:cc:cc:fb:64:7c:a1:ef:0f:6b:9c:18:ad:02:8d:53:7a:
62:3a:72:3c:49:e2:b4:1b:ef:b3:6f:d9:02:8a:c8:8b:12:b7:
ae:90:c5:8f:d9:9d:f7:b5:58:32:62:a0:3d:09:a7:42:45:58:
5f:cd:b5:b7:c4:02:4c:c5:50:bd:19:db:b1:c2:90:21:b7:fd:
8e:96:41:82:bf:58:9d:44:cf:a0:f9:a6:af:31:59:13:8b:c5:
3a:67:11:8a:bd:ee:6d:25:86:18:11:47:3f:5e:8e:4b:94:27:
5f:aa:1a:df:6e:de:58:f1:ec:1f:56:a5:f9:ff:90:9a:76:72:
20:f4:43:28:83:e5:37:c3:a6:a2:73:2b:a2:c6:fd:a2:96:a4:
32:aa:3e:75:1b:f2:63:25:33:41:2a:cd:77:14:55:1b:ac:4f:
68:68:58:4e:ed:83:62:9a:10:a4:65:dc:e2:f5:ce:d2:ee:a6:
c0:0c:70:27:82:ec:c9:1e:02:76:14:02:e3:83:45:72:80:25:
9a:60:85:31:37:a6:00:be:c4:ab:9b:bd:41:ad:c4:3e:12:1b:
c5:6d:7a:d3:1c:a0:39:e1:61:60:9f:1b:0e:75:90:31:f5:72:
1d:11:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:18 2025 by rpki-client