Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/MyA3M15_To-9V4BMZjXa1rm2qtI.roa
File: MyA3M15_To-9V4BMZjXa1rm2qtI.roa (raw, json)
Hash identifier: NNhy0HQRD9n8zLIV4YFbohCpYD3YO50aTwh73DnXD7w=
Subject key identifier: 33:20:37:33:5E:7F:4E:8F:BD:57:80:4C:66:35:DA:D6:B9:B6:AA:D2
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 018CC26D24F35ECCA12F2AB3D67B3A322BB5
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/MyA3M15_To-9V4BMZjXa1rm2qtI.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207151
IP address blocks: 185.234.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:24:f3:5e:cc:a1:2f:2a:b3:d6:7b:3a:32:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=332037335e7f4e8fbd57804c6635dad6b9b6aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:9e:45:b8:b9:7a:2c:11:49:62:21:b3:ac:
ed:32:a4:52:0e:25:26:17:6d:72:21:37:bc:eb:71:
d4:6f:71:26:79:52:57:ab:f9:a5:db:13:3d:07:04:
b7:52:80:bc:e1:92:67:bf:f8:9a:1f:f0:ad:42:fb:
70:1b:2f:18:67:12:a5:79:2c:1f:05:51:8f:fb:ae:
10:9e:d1:78:4b:18:c4:f1:21:4b:63:16:3a:2e:db:
b7:6e:b9:5d:02:96:62:ff:51:f6:d0:39:71:e3:bb:
78:47:1b:fa:11:0e:b9:c8:a1:7d:99:4d:a6:20:b5:
a7:5d:92:9e:69:4d:a6:aa:e5:15:47:8e:aa:76:d5:
4e:96:73:bd:1b:5d:7b:4a:4d:c8:1d:98:43:71:15:
22:97:21:32:3f:67:6d:9c:0a:17:61:b2:46:2a:ae:
bd:6b:ba:b3:9d:c1:50:db:b0:5e:a8:7d:76:0e:7e:
ce:6e:04:7b:65:e5:71:f0:0d:76:c0:d9:bf:8f:2e:
87:2f:76:17:a8:40:99:31:8d:bb:17:a9:09:87:70:
cd:b2:93:bc:16:b7:dd:27:fb:a3:16:e6:5f:ad:33:
2d:6e:22:71:f4:1b:ab:90:c3:ca:b6:23:c2:04:31:
50:87:22:08:9d:2d:1a:14:e0:c8:cf:d7:15:bf:37:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:37:33:5E:7F:4E:8F:BD:57:80:4C:66:35:DA:D6:B9:B6:AA:D2
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/MyA3M15_To-9V4BMZjXa1rm2qtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.104.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d2:05:0b:3f:7c:08:97:17:b4:d6:e7:81:8c:fb:17:05:ee:
7a:85:f4:72:ba:33:3b:00:f4:d6:80:76:f9:c9:85:c5:a7:2a:
bd:85:0b:57:65:ec:1f:11:b0:c7:20:f0:e3:92:06:ff:3b:18:
3b:63:08:f8:17:82:6e:79:d3:10:b6:38:87:83:d8:1f:b2:d1:
4c:f2:6d:66:96:b2:27:a6:6b:5e:09:f9:74:c9:ec:30:a0:d9:
0e:74:cb:e4:8f:af:81:a7:cb:05:5e:85:b0:d7:b6:e0:d7:1f:
3d:ff:89:8f:04:68:a2:a0:0d:d8:65:48:a5:46:c9:69:59:57:
27:a1:97:ee:12:ab:f6:ee:15:d7:0f:e6:25:61:ee:e3:c7:91:
6a:bf:50:23:df:7e:a8:42:eb:cb:b5:33:80:c1:2c:23:b9:3d:
88:8b:03:54:53:7a:15:a4:8d:9a:bc:cd:3c:4a:05:fd:39:fe:
02:9b:ac:74:85:6b:86:f1:2e:0c:72:0f:24:e2:ac:7b:2f:fd:
18:9b:9e:4f:e5:3c:04:c8:b3:ee:a9:dc:92:91:b6:7b:ad:6d:
3e:ea:b8:61:16:db:29:48:62:b2:c9:e7:c6:e9:9f:eb:52:b3:
1c:d3:0c:0e:bf:86:8d:d8:16:3d:8e:43:a7:26:86:c7:e7:de:
f3:61:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 05:19:01 2024 by rpki-client on console-ams.rpki-client.org