Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3hOs0-QwMiw5ynOk61nnUQvpX10.roa
File: 3hOs0-QwMiw5ynOk61nnUQvpX10.roa (raw, json)
Hash identifier: wsioRG4ma3SYC/JKml4rdy+HO8PHsGeBd5Ls93WV/cM=
Subject key identifier: DE:13:AC:D3:E4:30:32:2C:39:CA:73:A4:EB:59:E7:51:0B:E9:5F:5D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A848DECB1CDDE434A84AEE93F56E9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3hOs0-QwMiw5ynOk61nnUQvpX10.roa
Signing time: Mon 01 Jan 2024 18:30:21 +0000
ROA not before: Mon 01 Jan 2024 18:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204112
IP address blocks: 37.230.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:84:8d:ec:b1:cd:de:43:4a:84:ae:e9:3f:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de13acd3e430322c39ca73a4eb59e7510be95f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:a4:7a:b2:ba:11:b5:1f:84:f6:66:d2:dc:
d2:6e:4f:00:dc:3a:ae:d7:1d:56:24:48:8a:e4:aa:
e7:2c:15:ff:7c:d8:40:dc:f4:c5:d8:44:e3:89:69:
c1:b2:7b:11:c4:50:71:bb:8f:d9:38:60:ee:d2:0e:
09:70:6c:fc:ff:ae:a4:48:85:86:6c:c5:b7:d4:25:
ad:e0:35:83:f3:f8:0b:ee:84:5b:86:db:b0:94:07:
55:c1:14:0f:e5:e9:32:85:5a:f7:47:0a:a6:88:f6:
c5:74:50:f6:b9:62:15:da:3f:27:aa:55:03:14:2e:
33:96:88:f6:a9:54:8c:58:2f:19:3d:83:0e:bf:4c:
17:c5:b3:fc:81:ea:2f:8e:1f:af:0e:50:79:20:9b:
da:e1:21:4f:7f:e1:2c:57:5c:db:87:1b:c6:7e:c5:
6d:32:19:d8:c5:8e:55:77:e7:55:95:76:5c:ba:83:
46:ed:f3:34:3b:d3:39:cc:f0:08:e2:70:a1:e5:d2:
99:65:3b:04:01:35:4d:a8:e8:32:85:32:ef:a5:46:
98:60:0a:5c:cd:87:f5:0f:95:37:93:3d:87:dc:60:
16:8a:f5:de:86:8a:32:16:50:27:27:c2:9a:33:62:
b2:ff:97:53:24:d5:4d:1f:d3:b8:8b:57:8f:01:c8:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:AC:D3:E4:30:32:2C:39:CA:73:A4:EB:59:E7:51:0B:E9:5F:5D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3hOs0-QwMiw5ynOk61nnUQvpX10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:e6:db:25:90:7d:f0:a9:1e:87:e4:f0:ed:1d:32:32:da:
b5:0a:f9:9e:dc:7c:8b:3a:31:b9:3b:2d:8b:5b:03:c4:28:71:
df:2c:fa:6d:1b:e3:68:59:09:b2:3e:2e:cb:c1:59:80:0a:3e:
4f:e0:d8:fb:fe:d2:37:18:04:f4:fe:59:39:14:4e:6c:82:fa:
4e:ed:f1:a5:e7:d3:a3:d4:96:81:99:ac:6c:aa:36:4e:7b:a0:
a8:a6:88:e0:27:71:ab:fe:34:de:75:4f:3e:7e:76:61:a1:33:
9a:d9:ad:12:e2:67:ad:03:93:63:96:fb:be:73:e6:15:2d:ea:
a0:4b:88:75:8e:6c:5e:b1:a6:eb:50:5e:0f:70:fb:61:c3:a6:
22:a3:21:c6:a7:ca:90:ab:88:3d:75:c1:0b:c0:ca:d6:7d:28:
ba:da:f9:85:36:51:cc:cf:6e:95:e5:02:4a:e8:ae:95:6b:a0:
e0:ad:73:bd:19:95:57:b0:ec:77:08:44:cb:64:9e:56:76:6d:
b2:5d:21:1e:41:56:9e:1d:04:72:ab:0d:8c:02:6a:07:ee:8c:
5f:f5:62:5c:5a:1d:41:b4:19:cc:b4:d6:06:a5:b0:38:94:9b:
21:5a:ba:8f:b0:74:45:0e:12:7a:f8:fc:00:17:a5:f8:cc:7e:
82:cc:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:34:53 2024 by rpki-client on console-fra.rpki-client.org