Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/3IlLdMuIjLxtF1-3rjFwqfngFZw.roa
File: 3IlLdMuIjLxtF1-3rjFwqfngFZw.roa (raw, json)
Hash identifier: OldK8e2JnQqUhZ3wARQlb/16L2C5hffhlqvk6sAgnlU=
Subject key identifier: DC:89:4B:74:CB:88:8C:BC:6D:17:5F:B7:AE:31:70:A9:F9:E0:15:9C
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 018CC8DED00589BDBD7B9E192362136EFB26
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/3IlLdMuIjLxtF1-3rjFwqfngFZw.roa
Signing time: Tue 02 Jan 2024 06:31:34 +0000
ROA not before: Tue 02 Jan 2024 06:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12414
IP address blocks: 91.235.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d0:05:89:bd:bd:7b:9e:19:23:62:13:6e:fb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Jan 2 06:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc894b74cb888cbc6d175fb7ae3170a9f9e0159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:de:fd:f7:ab:9a:e6:b3:3c:21:99:04:fd:
87:1b:35:77:be:f3:73:f2:79:38:b1:f6:ee:a6:06:
86:c9:61:98:2c:86:5d:9b:fd:32:8b:73:fe:c8:e9:
21:3b:7c:33:0e:86:7e:1c:bb:26:5c:45:93:bf:97:
0e:9d:46:d1:dc:8c:8f:44:73:bb:4f:bc:c6:de:d8:
d5:29:e8:5d:58:f0:ad:7c:d5:e5:c4:6f:46:30:0c:
a1:ac:e8:60:89:c0:f3:bb:24:8d:0d:36:0a:c5:27:
92:08:31:a6:33:86:9f:0d:f7:cb:18:be:2a:04:6f:
65:40:da:9f:84:14:31:75:78:ed:df:ee:53:30:26:
fe:d2:7b:1a:a0:47:90:f8:a0:3d:43:fb:f4:16:87:
cf:7a:01:1f:b0:1b:9b:06:fc:27:91:88:b2:29:b3:
53:60:7d:30:c7:9e:d0:2a:65:b9:e4:74:a2:42:30:
b2:f8:d7:60:bf:d8:6f:c2:91:51:8f:65:e0:07:b6:
1d:6a:77:c4:02:e5:28:9d:10:25:8b:09:e8:38:6b:
b7:54:9e:5a:47:fd:44:08:56:8e:7b:47:a6:e0:8b:
de:f4:62:36:2f:d9:72:f6:43:46:53:9b:17:af:4f:
70:e4:3d:17:26:93:40:4d:eb:2d:f9:a5:fd:72:f9:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:4B:74:CB:88:8C:BC:6D:17:5F:B7:AE:31:70:A9:F9:E0:15:9C
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/3IlLdMuIjLxtF1-3rjFwqfngFZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.237.0/24
Signature Algorithm: sha256WithRSAEncryption
82:78:25:cc:a1:cb:36:60:4a:08:52:35:14:12:75:64:cc:a5:
1a:d5:4c:50:71:01:89:a0:0a:11:86:2e:76:57:02:c7:ad:0e:
7e:7a:67:d6:b3:eb:fb:11:9b:57:e5:26:62:11:0c:0e:b8:8c:
24:1d:ba:2b:6a:52:46:2b:eb:5a:e0:70:5d:24:23:3e:6a:6e:
d2:8d:c0:d8:00:e0:b7:0e:52:25:c6:70:6d:0d:66:e9:91:c2:
19:23:27:52:5c:05:a6:e7:53:54:46:80:d4:53:4b:8d:30:9e:
bd:f9:25:26:b8:24:16:8a:37:ba:91:37:2d:49:3e:07:bf:37:
9b:b8:1d:40:f0:b4:0d:d7:87:8c:92:d8:6e:c7:e2:1c:1c:fb:
b6:e4:c8:27:5d:6a:fa:e8:33:5f:3c:d4:7a:05:18:ed:ea:02:
79:a8:a1:75:e1:ca:8f:71:09:08:f6:55:34:f3:47:64:1f:96:
96:3f:7d:54:fb:14:7b:ce:a6:0a:cf:8b:ee:16:6b:b3:19:c9:
5e:a8:df:17:43:4b:ae:c9:62:7c:c9:1b:59:91:eb:73:82:01:
68:5b:50:dc:d6:a8:41:5e:02:41:2b:f1:9c:37:66:de:58:4c:
08:c3:43:f8:a9:cd:d9:9c:63:2b:b9:f7:7b:b2:c3:69:c3:6e:
99:dc:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:48:07 2024 by rpki-client on console-fra.rpki-client.org