Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qncNurvg3z56LUyM4pS7GrN7QPw.roa
File: qncNurvg3z56LUyM4pS7GrN7QPw.roa (raw, json)
Hash identifier: AuhiBfIH9MDskUT2sv1eQ8/0an9OP3+S9Cs7K98Jlkg=
Subject key identifier: AA:77:0D:BA:BB:E0:DF:3E:7A:2D:4C:8C:E2:94:BB:1A:B3:7B:40:FC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018DA35918FD81A7D39C7DBA42BD9FAC3911
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qncNurvg3z56LUyM4pS7GrN7QPw.roa
Signing time: Tue 13 Feb 2024 16:42:21 +0000
ROA not before: Tue 13 Feb 2024 16:42:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:59:18:fd:81:a7:d3:9c:7d:ba:42:bd:9f:ac:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 13 16:42:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa770dbabbe0df3e7a2d4c8ce294bb1ab37b40fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:57:7b:5a:fc:8f:11:66:ed:c9:ee:27:b9:
8c:1d:da:b4:6c:6d:fe:5d:8e:6c:5f:52:c8:e9:ef:
55:2b:0f:54:3c:32:12:95:e4:c3:30:12:e7:a0:1d:
52:55:55:bf:96:c3:95:2a:07:9f:7d:1b:96:c2:c5:
c1:a2:ac:f9:bb:66:18:9a:70:17:dc:69:3d:14:82:
31:59:da:22:82:a7:60:57:f1:a8:74:28:a7:f9:29:
8e:26:8c:5e:b9:71:24:d5:28:3a:49:dd:4b:31:6e:
aa:b9:a8:1b:99:16:81:77:18:a9:36:9c:46:2b:31:
51:45:07:81:e6:ab:05:86:d9:83:a7:28:aa:83:51:
65:7a:2e:6b:e2:f5:3b:e5:a2:0a:1f:8c:61:2c:7a:
e6:93:69:61:f3:90:d8:e5:0f:4c:f9:4e:f3:1a:be:
0b:63:7b:a6:54:51:98:91:e2:0d:ce:dd:06:9a:af:
f1:31:8d:86:63:bc:75:f2:22:16:5d:df:26:b7:c2:
ad:ab:0b:0b:83:dc:6c:42:06:41:34:d1:31:78:9f:
43:c2:e7:c4:af:2d:4e:4e:6a:ae:b4:1a:c1:a4:78:
70:f6:87:d5:e5:e2:b1:91:cc:ca:39:0e:10:a9:76:
2b:86:7a:81:21:de:3b:24:87:6b:25:4d:71:d7:9b:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:77:0D:BA:BB:E0:DF:3E:7A:2D:4C:8C:E2:94:BB:1A:B3:7B:40:FC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qncNurvg3z56LUyM4pS7GrN7QPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0c:bd:e1:f3:aa:b7:d0:ef:01:59:bb:93:16:a6:67:56:0e:
94:7d:b0:67:64:ab:58:2e:b9:20:a8:c2:11:29:2e:f1:a5:bb:
fa:ee:f2:14:31:0b:a8:53:23:a5:4b:68:46:82:1f:2a:60:c7:
c2:1e:ac:38:10:6a:c0:76:43:5e:53:76:b2:27:b5:56:e1:60:
54:b8:f4:72:28:f2:22:c3:82:40:5c:bf:2a:ea:3e:b2:5a:b7:
d5:8b:76:58:95:90:ae:59:28:70:52:ab:b1:42:22:3c:c1:74:
61:f7:5a:0d:75:22:8f:67:92:e5:75:82:36:86:0f:8e:b4:03:
fd:48:04:fc:fc:c9:bc:34:fc:11:ee:a4:61:de:7c:ad:47:41:
ad:88:61:b8:79:d2:da:f2:b4:c0:ea:12:65:9d:2e:03:60:33:
f5:66:ac:aa:9b:08:a6:ef:1b:54:1c:8f:12:f5:fa:fe:16:8b:
10:f0:bc:94:26:f4:f6:07:41:c5:d2:8a:4c:45:80:73:ce:7d:
13:31:14:93:9f:46:20:44:b0:c7:64:93:98:bb:1e:d1:4e:12:
99:fa:b1:5a:4a:98:f7:39:8f:47:69:ab:70:ef:8a:12:2f:56:
34:c6:e8:c7:ee:d0:60:14:62:c8:b3:41:39:77:c7:0d:e2:7b:
b5:e4:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:17:12 2024 by rpki-client on console-ams.rpki-client.org