Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/PyB3br87ysturNkEL11dufKxCkc.roa
File: PyB3br87ysturNkEL11dufKxCkc.roa (raw, json)
Hash identifier: 9CLfN9RVpA1OhLpOXnt+CiBIueknyeznNNkai/fPQ9s=
Subject key identifier: 3F:20:77:6E:BF:3B:CA:CB:6E:AC:D9:04:2F:5D:5D:B9:F2:B1:0A:47
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 018CC26D53BAB487E9D55048D403607BF608
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/PyB3br87ysturNkEL11dufKxCkc.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200962
IP address blocks: 185.90.72.0/22 maxlen: 22
185.90.73.0/24 maxlen: 24
185.90.74.0/24 maxlen: 24
185.90.75.0/24 maxlen: 24
185.90.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:53:ba:b4:87:e9:d5:50:48:d4:03:60:7b:f6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f20776ebf3bcacb6eacd9042f5d5db9f2b10a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:c6:42:21:f1:8e:70:6f:11:9c:38:be:31:
50:d8:ca:9a:52:48:9f:9e:17:88:ea:73:55:40:c9:
d5:1c:0f:ee:e8:11:19:ca:cf:46:3f:b0:de:de:6d:
fa:02:f6:90:74:ab:c2:f4:b0:0d:cb:e8:5d:d3:e6:
4a:f7:e1:4c:d7:d7:0c:2a:31:1d:3b:9c:77:8c:8b:
0d:d9:b6:82:32:16:d5:de:ed:8d:76:36:07:9b:bc:
86:7a:51:3e:af:67:18:a8:e1:fb:10:e1:4b:4b:ba:
5b:73:cb:b6:b1:ea:40:d4:1f:31:82:d0:c1:57:24:
fc:f5:02:ef:a7:0a:13:0d:a6:19:e9:15:9f:82:0d:
55:3c:5d:0c:5c:ce:4e:8d:53:15:52:ee:eb:57:cf:
cd:6f:d0:51:b2:ec:8f:4b:cc:91:52:2c:a9:81:03:
c9:22:ab:b9:c0:03:9a:19:8a:b7:ed:28:6c:46:e4:
9e:d7:8b:ac:b8:1c:c3:b1:6e:7c:33:2e:90:b1:d7:
0a:29:37:da:ce:29:99:f5:b6:4f:94:0a:ab:f4:ed:
ef:c0:9f:5c:bb:8f:4c:82:f5:0f:b4:c2:2c:61:92:
e3:b4:9d:be:27:a7:e6:da:fc:94:37:df:2c:9e:26:
95:53:40:57:55:ce:34:ae:36:01:51:26:0e:d8:f2:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:77:6E:BF:3B:CA:CB:6E:AC:D9:04:2F:5D:5D:B9:F2:B1:0A:47
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/PyB3br87ysturNkEL11dufKxCkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6c:7f:3d:19:2f:63:67:33:96:7c:7e:e4:a6:51:8f:a9:e2:
5f:2f:f8:0b:57:57:f1:4d:63:53:61:e7:c0:77:0b:c1:d4:fb:
08:b8:e2:8e:85:77:00:8d:d8:05:6c:c3:8b:a3:98:0b:83:dd:
98:36:0f:2f:7d:f9:35:62:14:b9:0e:b6:2e:1d:bb:7f:69:6f:
9d:65:a1:03:17:06:b4:cf:98:f3:d0:30:12:30:ac:22:24:a6:
11:90:85:85:b5:91:e6:d2:51:4a:fa:b7:ce:1a:ea:1e:f2:cd:
54:2e:cb:b5:b9:a0:06:fc:25:e5:b9:d4:d5:ec:89:a1:8d:45:
23:99:69:3a:a9:35:f8:be:57:87:87:07:b5:23:e2:06:29:a4:
cb:72:17:d6:9b:13:31:cd:38:3f:f3:5a:53:31:84:25:8d:97:
4f:07:d0:9f:9b:53:3f:7a:da:06:7f:56:dc:60:10:b4:0e:a2:
42:a2:4a:df:57:1b:e8:05:f9:bf:d0:a9:4b:ea:8a:92:d3:ac:
b4:69:d7:0f:48:08:d0:81:d1:63:6e:46:42:e0:54:c0:04:f8:
0b:d6:7f:64:67:7b:ff:52:b2:66:6e:6a:98:42:b4:b5:a1:18:
51:a8:2b:6a:e2:d5:59:73:5a:81:08:70:ed:9a:be:aa:b8:aa:
43:b0:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:33 2024 by rpki-client on console-ams.rpki-client.org