Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/77Gy3y2FQthq77jG07e0AAavBew.roa
File: 77Gy3y2FQthq77jG07e0AAavBew.roa (raw, json)
Hash identifier: hcrG/tiZox3xsnBkKXNwzSDwn9vpN2IvLjXbWqGLVKg=
Subject key identifier: EF:B1:B2:DF:2D:85:42:D8:6A:EF:B8:C6:D3:B7:B4:00:06:AF:05:EC
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 0190158E20EEE7763591983331800C02D805
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/77Gy3y2FQthq77jG07e0AAavBew.roa
Signing time: Fri 14 Jun 2024 07:02:34 +0000
ROA not before: Fri 14 Jun 2024 07:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215015
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:8e:20:ee:e7:76:35:91:98:33:31:80:0c:02:d8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jun 14 07:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb1b2df2d8542d86aefb8c6d3b7b40006af05ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:ab:2f:15:6d:69:05:ea:1a:33:d2:f8:84:
66:f0:8d:8a:bf:a1:55:6e:2b:6d:ca:7a:0d:b2:47:
51:3e:ab:68:18:1e:30:a8:24:5d:eb:c4:37:e1:d0:
a6:a3:75:b5:74:cc:5a:8b:8a:73:83:63:47:56:7b:
45:b0:ac:55:68:73:d2:5f:5b:21:59:ea:b8:87:52:
ca:12:41:7b:4d:09:e5:55:c5:a7:0e:c8:42:d9:d7:
e2:e9:bc:50:a3:7d:af:47:ea:bd:aa:c4:e8:d5:f4:
f8:73:4b:fb:9e:17:b1:1d:b1:0c:b4:04:fc:24:62:
8e:98:13:7c:eb:9b:02:4b:20:a4:4b:2c:89:a3:8a:
66:17:61:8f:58:51:1a:d3:d7:09:43:99:12:b5:4d:
5a:75:2d:70:60:5e:c2:8e:f3:be:0d:85:96:25:ae:
ca:48:98:80:82:81:ff:cc:22:37:ff:9e:8b:31:1c:
79:31:13:66:65:5d:d4:2f:01:e4:ac:63:04:83:7d:
6a:e5:8b:c1:52:35:8a:a1:d0:7f:e6:01:63:26:08:
34:9d:e3:f8:d1:76:fd:fc:73:3e:e2:38:03:28:a3:
3c:13:90:80:a3:c7:aa:7f:8c:a2:19:92:b5:a0:c7:
97:9a:c8:bf:51:2c:0b:cf:08:07:4d:4e:17:af:25:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:B2:DF:2D:85:42:D8:6A:EF:B8:C6:D3:B7:B4:00:06:AF:05:EC
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/77Gy3y2FQthq77jG07e0AAavBew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
80:07:99:b5:fe:86:93:06:de:94:98:76:25:04:94:85:0f:9d:
c4:84:27:cb:a6:0b:5f:7f:bd:54:a9:28:9e:6a:60:84:0d:0c:
43:ce:8b:b0:c4:6b:80:0e:78:ca:0f:ae:87:3c:ba:de:f1:ff:
9c:69:02:9a:c4:00:37:e5:e4:cf:70:8c:2e:b1:2f:e7:5a:6c:
9d:ad:76:92:8c:df:33:50:2d:29:23:42:e2:c1:c1:71:bd:49:
9b:6a:28:ed:41:73:06:ae:ae:d2:c2:b7:6b:e3:3f:2e:a7:91:
b4:c5:f6:ee:e0:ef:11:da:2c:71:06:01:a5:dc:28:13:73:d3:
b3:c8:62:d5:f0:e7:26:b6:c8:9c:11:1c:3b:38:be:5e:d3:04:
ce:13:fd:c9:d6:e0:5d:e5:09:41:3c:0c:5b:63:2a:ce:1c:ec:
0c:2c:d4:d6:38:cb:b6:38:a2:ea:aa:d6:ba:24:16:37:8b:bd:
4d:56:e5:d0:53:1a:f8:fe:b3:23:83:99:01:af:13:bd:b2:10:
10:8c:33:9c:dc:70:bd:51:6e:6c:c9:73:b4:a9:2d:53:07:60:
94:b0:33:d4:fe:18:75:7d:15:f3:11:81:7d:b7:f3:e9:18:ae:
2f:63:bc:76:5c:71:26:f5:12:eb:fa:54:a5:37:bf:44:37:6d:
13:bf:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:32 2024 by rpki-client on console-ams.rpki-client.org