Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p9G-O4Ee7z74-QvM0rjStpXq1X4.roa
File: p9G-O4Ee7z74-QvM0rjStpXq1X4.roa (raw, json)
Hash identifier: /C1aOmeGZahI+bd9lBDBLVviXtszVzBwWsKYLoRSL4E=
Subject key identifier: A7:D1:BE:3B:81:1E:EF:3E:F8:F9:0B:CC:D2:B8:D2:B6:95:EA:D5:7E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CC8DF38367E58FE983703F07A93412B33
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p9G-O4Ee7z74-QvM0rjStpXq1X4.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12695
IP address blocks: 77.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:38:36:7e:58:fe:98:37:03:f0:7a:93:41:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7d1be3b811eef3ef8f90bccd2b8d2b695ead57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:31:a9:bc:19:73:4f:ce:8c:1c:8a:4e:5e:
8d:5a:11:3f:9d:f3:ca:4c:68:a8:d1:d6:48:54:c1:
e8:7d:d7:cd:67:09:ea:e7:a7:a5:76:fd:93:2d:ed:
ed:99:02:1a:a5:a3:de:be:bc:ea:76:63:90:bd:19:
e8:64:58:51:7c:a0:fa:13:39:62:af:b7:71:c5:8d:
ef:17:50:a4:7b:c6:9a:55:5f:9f:4e:8f:f3:b0:e4:
57:95:8d:01:b2:ea:2d:2c:b5:9b:16:11:c3:6c:77:
76:ab:4f:98:62:e2:6d:d8:45:8f:ce:d7:0d:b1:72:
f0:2c:00:25:b5:5b:56:a9:f6:41:4c:f3:32:50:fd:
7e:b6:0c:82:f6:71:78:56:f0:ab:3c:9f:f4:13:9b:
c9:b5:de:e0:df:84:b9:7b:43:8a:07:73:ae:8e:a2:
b5:cf:35:0e:55:6e:96:8c:31:10:81:1e:24:ea:68:
6d:f9:3b:36:cc:e9:17:07:9b:46:2d:2f:b4:4e:f3:
37:bd:97:1b:c0:f6:26:4b:28:89:76:7d:3d:6b:07:
14:98:a3:f9:96:f7:db:30:40:ae:2c:94:16:2c:11:
26:f6:df:1a:48:ce:4a:44:75:4e:fc:bf:43:09:f9:
d9:6f:45:3d:d2:53:d7:1d:15:a5:3d:08:5c:e5:bf:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:BE:3B:81:1E:EF:3E:F8:F9:0B:CC:D2:B8:D2:B6:95:EA:D5:7E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p9G-O4Ee7z74-QvM0rjStpXq1X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
96:91:d8:e7:19:b7:4d:0d:f6:ef:c2:b7:1d:24:4f:0b:06:04:
44:0a:fc:8d:68:6c:0f:ce:1b:12:e9:f1:23:f7:e1:8e:8f:aa:
39:59:c2:13:c5:d9:2a:cd:0f:f3:11:fe:43:09:9f:94:90:ac:
3a:00:96:7f:7d:0c:3c:b9:c9:55:2b:e3:73:8e:7e:d9:95:52:
a1:41:d1:2b:f4:b1:3d:28:1b:11:d9:2d:9c:16:c4:67:23:31:
ab:c9:4e:37:8d:b2:48:c6:09:fe:87:59:6b:e9:97:67:0a:d9:
5e:74:1f:1d:e3:33:c1:ac:a3:ff:1b:bf:e8:a1:fb:a0:26:ae:
75:2b:fb:0a:02:66:d2:03:74:ef:83:b2:69:d1:6c:f7:14:84:
11:c3:9f:b1:54:a4:cd:6a:7f:0b:c5:1b:b6:71:cc:bf:e7:68:
e1:1f:54:74:82:19:7f:50:ae:3c:fa:a5:b5:ec:ea:08:b0:b6:
fa:df:7f:6d:bc:95:d6:46:4a:66:9e:ff:c9:ec:81:41:9a:e3:
3b:68:8d:a5:97:90:c7:1f:c9:a1:80:cb:61:b9:3a:8a:ac:28:
61:53:ed:51:34:17:c9:3b:78:d6:a4:3c:44:d7:31:65:e8:e4:
2d:ea:f9:00:c7:35:a0:01:fd:fd:28:43:84:f8:a3:86:37:4a:
35:fe:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:11:00 2024 by rpki-client on console-fra.rpki-client.org