Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/3hed-oMTFsuGaf7kUupK92m_BRQ.roa
File: 3hed-oMTFsuGaf7kUupK92m_BRQ.roa (raw, json)
Hash identifier: fsMWfEJFl0XlJhlUnIK7I4PIcfwNS3SjivWF8d8ZF84=
Subject key identifier: DE:17:9D:FA:83:13:16:CB:86:69:FE:E4:52:EA:4A:F7:69:BF:05:14
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 018CC8715114BEA0952888FA617A9368642F
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/3hed-oMTFsuGaf7kUupK92m_BRQ.roa
Signing time: Tue 02 Jan 2024 04:31:58 +0000
ROA not before: Tue 02 Jan 2024 04:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56395
IP address blocks: 185.215.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:51:14:be:a0:95:28:88:fa:61:7a:93:68:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Jan 2 04:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de179dfa831316cb8669fee452ea4af769bf0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:6f:df:91:02:6a:6a:9d:e1:d3:5c:96:5d:
71:6b:d2:d0:7e:cb:92:de:90:ba:0e:bf:23:a3:0c:
a2:c8:c6:34:dc:f0:6e:02:ba:5a:ac:1a:80:14:bc:
a7:80:00:43:68:73:59:cb:e9:fb:63:22:9b:fa:d0:
26:b0:f5:1a:5d:75:f2:d8:1a:23:cf:d1:77:bd:44:
71:26:37:f8:b1:62:10:7e:18:02:d3:85:93:7f:ef:
ec:7c:dc:50:12:fd:89:48:6d:f9:05:f6:b6:78:44:
90:e7:01:a2:1e:26:30:25:eb:ef:14:b7:01:df:15:
c6:c6:50:66:9b:97:f4:cc:75:81:82:29:d5:f9:a6:
53:7e:08:fc:21:fd:58:cd:02:73:35:ff:c1:47:7a:
b7:96:46:a2:5c:f8:01:df:d6:79:cf:d6:3a:bf:d5:
ec:7b:af:4b:46:f1:07:ca:da:66:19:da:46:39:c8:
d9:84:40:ca:53:b8:c1:4f:09:7d:68:c8:40:66:4c:
54:b2:98:d8:fe:1f:34:8e:cd:fb:54:33:3c:32:25:
20:bb:ff:34:1e:79:9b:78:16:a0:33:80:b5:a9:c3:
96:e5:d6:b3:02:94:28:f4:1b:a0:0f:50:51:fc:23:
94:1d:e4:e6:ae:b3:c7:f0:0e:bb:08:aa:22:7b:a1:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:9D:FA:83:13:16:CB:86:69:FE:E4:52:EA:4A:F7:69:BF:05:14
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/3hed-oMTFsuGaf7kUupK92m_BRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:ba:fc:fa:82:31:bf:ae:8e:de:f6:e2:20:20:58:62:c6:6d:
10:dd:30:cc:1a:3d:73:ff:b0:d8:37:f1:c7:00:e2:a1:cc:a1:
fb:51:6a:bb:1d:85:5b:1f:67:57:51:47:29:f6:ed:09:a8:ce:
40:63:d2:68:8f:90:ba:ad:09:e8:78:0b:ff:c3:45:28:45:5c:
df:0d:4e:43:68:7b:40:7b:53:60:ca:e6:90:ff:5a:4c:31:a6:
d2:f9:60:a7:d9:3f:17:d4:31:a0:b1:4a:b7:1a:b5:a5:41:ca:
43:a6:03:21:cb:80:62:a6:9e:f8:46:2b:3a:06:c9:6c:99:1b:
a0:92:79:b1:b0:bf:7c:40:0a:42:48:e0:46:87:1b:af:79:68:
58:44:a6:0f:ec:11:5f:a5:ae:f4:67:92:c0:7a:b4:68:ca:18:
04:bf:08:79:75:25:62:12:fc:cf:3d:25:c8:dd:57:ac:e5:b2:
79:c3:39:a2:d2:4f:db:93:3f:b1:6e:a7:43:8b:0f:0f:45:41:
62:eb:1a:23:82:23:18:42:6e:28:43:24:5e:d7:63:33:3a:d9:
8f:ac:49:29:4c:9a:9c:f7:dc:40:c3:2d:61:3c:5e:43:89:80:
9c:6b:c0:41:73:ee:7f:06:2e:2c:90:54:51:32:55:d4:ad:cc:
be:24:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:13:40 2024 by rpki-client on console-fra.rpki-client.org