Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/3NgpQxADw7YPbSj03cvzQJtb5vY.roa
File: 3NgpQxADw7YPbSj03cvzQJtb5vY.roa (raw, json)
Hash identifier: tvSTsqQ2PBM0W4YWStwz9lT8EPHRSa6WQ74IoQsDIbk=
Subject key identifier: DC:D8:29:43:10:03:C3:B6:0F:6D:28:F4:DD:CB:F3:40:9B:5B:E6:F6
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 018CC94CAD4633E01BCCF7EDCA5CF6511A0E
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/3NgpQxADw7YPbSj03cvzQJtb5vY.roa
Signing time: Tue 02 Jan 2024 08:31:34 +0000
ROA not before: Tue 02 Jan 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60902
IP address blocks: 185.24.17.0/24 maxlen: 24
185.24.16.0/24 maxlen: 24
185.24.19.0/24 maxlen: 24
185.24.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ad:46:33:e0:1b:cc:f7:ed:ca:5c:f6:51:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jan 2 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd829431003c3b60f6d28f4ddcbf3409b5be6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:7e:28:b4:ce:80:e0:13:39:d4:fd:e4:10:
65:4a:98:0b:cd:c8:54:37:8b:61:a7:15:04:74:52:
a0:e6:f7:22:68:1a:d6:38:7f:3d:3e:4c:4a:53:64:
e9:80:b5:65:ef:2f:94:dc:0c:bb:b8:18:ae:56:44:
bb:5d:76:8f:2d:8f:63:43:49:97:b1:b8:38:66:5a:
78:96:b8:6e:e8:37:4f:65:e9:1d:ef:07:f5:d2:c3:
48:a4:35:a4:a6:59:88:b4:be:65:ec:f7:01:e8:bc:
e6:f3:e2:14:de:0a:57:dc:81:a9:c6:56:94:05:a7:
97:07:44:2b:83:6f:89:29:ed:54:35:96:1e:21:e8:
fc:0a:7d:62:46:0e:c0:d0:a2:9b:2c:a3:20:78:79:
72:09:13:0f:fa:d6:a6:0f:8c:e0:10:6a:7f:fc:cf:
10:97:c4:4a:fb:ad:09:ca:cc:8a:2d:2d:e4:fd:dc:
11:be:a0:52:f9:cb:1b:a7:9d:2c:d1:8c:66:ea:dd:
78:8f:58:89:90:6e:b0:3a:a9:49:1d:25:b0:24:cd:
a5:26:92:e5:16:00:25:7c:0c:68:03:e3:f7:6c:53:
34:b8:7e:3d:6d:f0:13:20:90:2b:c5:be:ab:6e:ad:
93:28:73:20:f0:c2:79:b2:a9:b1:4b:29:6d:ca:86:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D8:29:43:10:03:C3:B6:0F:6D:28:F4:DD:CB:F3:40:9B:5B:E6:F6
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/3NgpQxADw7YPbSj03cvzQJtb5vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.16.0/22
Signature Algorithm: sha256WithRSAEncryption
19:bd:88:c5:9b:ef:47:ab:4d:60:10:4e:1a:79:f0:4e:9c:96:
b7:dc:64:7f:ed:3c:4b:fa:aa:b3:c7:5c:f1:21:ea:26:e5:ff:
26:01:d9:75:95:62:2d:41:fc:e9:9b:07:25:26:cd:d4:ae:75:
6e:b7:d7:da:c7:29:3e:93:fb:bb:dd:1f:73:ae:51:92:53:b2:
e2:75:0f:76:61:03:94:3e:f4:96:d9:26:c1:97:35:46:b9:e9:
56:64:36:cb:bc:da:9c:44:af:46:a0:4a:69:5e:d3:59:bf:f7:
6e:29:18:8a:63:6c:28:98:b9:80:d7:75:fc:b7:74:91:6e:a6:
98:37:0f:94:b5:80:12:23:0a:cb:8a:22:50:cd:32:24:c3:11:
44:98:66:5b:9f:cf:63:d6:ce:6e:4e:16:50:e3:b9:81:93:c0:
d2:c1:58:ff:8d:26:08:3d:ef:0b:b1:f5:ef:29:68:d8:95:6f:
a2:67:c0:d9:6a:74:5d:71:92:c7:47:28:7e:a3:20:08:a4:d8:
f9:d3:24:46:f4:08:67:d2:7d:00:69:d0:c4:17:8b:c0:09:74:
dd:42:6c:ef:9c:1a:97:8c:a7:42:bb:5f:9a:ac:ee:b2:d7:8a:
47:47:3e:da:a0:5a:c1:26:8f:90:ed:0e:de:f8:ce:b6:77:46:
06:97:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:31:14 2024 by rpki-client on console-fra.rpki-client.org