Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/77S24runDlBqidNoa4BcDJZOp-g.roa
File: 77S24runDlBqidNoa4BcDJZOp-g.roa (raw, json)
Hash identifier: YEDFW1lDrniKz9rAO2iOV428V5iUG1mrLmp5yuKCkPc=
Subject key identifier: EF:B4:B6:E2:BB:A7:0E:50:6A:89:D3:68:6B:80:5C:0C:96:4E:A7:E8
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 018CC94D5565201EAD07E4A987B252593531
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/77S24runDlBqidNoa4BcDJZOp-g.roa
Signing time: Tue 02 Jan 2024 08:32:17 +0000
ROA not before: Tue 02 Jan 2024 08:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 45.90.105.0/24 maxlen: 24
45.90.104.0/22 maxlen: 22
45.90.104.0/24 maxlen: 24
45.90.107.0/24 maxlen: 24
45.90.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:55:65:20:1e:ad:07:e4:a9:87:b2:52:59:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Jan 2 08:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb4b6e2bba70e506a89d3686b805c0c964ea7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:03:dc:e6:de:02:d4:8c:d9:86:6d:7f:c0:
90:9e:99:52:25:e8:61:52:d8:05:4a:5b:91:a7:8b:
5a:34:46:ab:f1:c7:5a:b6:84:0a:15:4f:56:81:4a:
88:e2:d5:90:81:f4:d7:66:b0:ac:ae:c9:16:6e:20:
f0:5a:c3:40:d1:61:c8:48:df:cb:48:66:7c:83:12:
16:87:db:90:55:77:e1:2d:9b:5c:56:b6:b3:00:03:
8d:7f:5b:d7:63:eb:92:d4:f0:ea:e6:b9:a2:a3:1c:
b4:18:b0:5c:b5:8d:27:ae:b3:ba:27:d5:a6:65:2e:
5a:1e:b6:98:44:cf:63:ec:89:d7:16:2c:bf:26:b7:
21:ca:71:6b:91:d0:bd:86:8d:63:61:0e:42:f4:8a:
96:12:78:97:0b:ad:65:8e:61:ab:0a:69:e2:bf:63:
18:4d:b2:a7:4b:f0:fc:74:78:71:f3:a2:e0:ec:0d:
b5:c4:ee:f0:46:60:bb:bb:1d:e1:b5:5d:32:d5:d1:
2e:d2:07:5c:f1:dd:b5:e7:1c:b2:60:94:0e:5f:3d:
92:df:d1:d1:9f:1a:98:c0:bb:d3:0b:8f:83:68:90:
d7:9c:2d:62:0f:af:8e:48:50:97:23:59:f7:8c:ed:
ab:91:f5:d5:53:2a:78:a8:ce:41:62:f9:70:93:dd:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:B6:E2:BB:A7:0E:50:6A:89:D3:68:6B:80:5C:0C:96:4E:A7:E8
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/77S24runDlBqidNoa4BcDJZOp-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0e:00:e2:76:74:05:17:74:5e:35:cb:01:3d:fe:f3:3e:36:
f2:be:e2:cd:d5:55:1b:47:98:d1:ce:18:67:4a:04:0a:a0:1d:
59:c1:5c:e5:82:ae:d7:4a:0c:91:ff:f2:f1:c3:7e:83:f3:f4:
ad:a7:b2:cd:aa:bb:45:57:e6:b6:a0:e8:28:a3:76:78:2f:ef:
07:a5:ae:ee:e2:56:24:e4:bc:f7:72:d1:f9:86:fc:d8:17:ad:
43:86:e5:48:99:fa:d4:90:fb:98:ea:8c:54:3c:34:da:05:34:
15:c7:11:bf:74:7a:b7:dc:b2:6b:0a:12:ab:7a:86:85:ed:ee:
32:ed:2a:1b:e6:fb:54:b5:8b:40:d5:b2:44:f3:05:a9:5c:76:
98:2a:f3:7a:f3:fe:ea:b3:63:cc:94:e1:c6:37:36:57:a1:cc:
85:48:a7:02:50:50:58:79:92:e3:2c:32:93:47:c2:c9:60:31:
b1:89:35:f8:e6:f3:5a:e9:96:64:3f:2f:09:aa:9e:da:52:52:
d9:08:8b:9a:80:f5:13:56:31:ce:41:6e:e0:98:88:fc:1c:9d:
f3:1c:c3:68:d8:da:3a:d2:8c:b6:91:58:63:4a:7b:b5:fa:b8:
00:a7:a5:4a:7f:12:19:5c:58:65:58:48:2d:f6:69:cf:1d:dd:
5a:9d:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:21:51 2024 by rpki-client on console-ams.rpki-client.org