Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3b91Nhq3uWFwYHWMEHl4z4lO400.roa
File: 3b91Nhq3uWFwYHWMEHl4z4lO400.roa (raw, json)
Hash identifier: GBFq0FXbUzhLYs1pYEv/CNZ8TTSTM6syMcWIJwKRKAc=
Subject key identifier: DD:BF:75:36:1A:B7:B9:61:70:60:75:8C:10:79:78:CF:89:4E:E3:4D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D5BE0713D27A65623A63ACEB36FB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3b91Nhq3uWFwYHWMEHl4z4lO400.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1221
IP address blocks: 192.71.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d5:be:07:13:d2:7a:65:62:3a:63:ac:eb:36:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddbf75361ab7b9617060758c107978cf894ee34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:b4:c1:13:3e:90:84:b4:e7:9d:39:c0:4d:
fa:54:28:5a:6e:c4:d4:b6:e5:6c:53:68:fd:d1:2a:
ee:29:e1:81:35:e7:ef:9f:6a:53:44:d8:1b:6c:3e:
11:15:84:e1:8c:ec:b7:a0:ab:3f:8b:72:41:0c:d1:
da:57:18:f0:d6:c1:6a:46:05:50:88:fd:11:d3:0c:
ff:de:57:ee:8b:55:57:81:0a:da:63:9e:80:8a:e3:
c0:3e:a7:ac:f7:6c:55:cf:f1:41:83:44:95:dc:22:
19:88:e3:22:d9:bc:06:ed:88:11:52:08:1d:58:9c:
43:f2:e6:7c:32:d2:c2:0e:2d:97:50:29:46:3c:fc:
0a:bd:7a:d9:4e:6b:7a:b3:82:15:61:b9:18:05:dd:
e3:f3:72:ed:35:2e:d1:29:8a:d9:d0:10:a2:f1:c5:
99:8b:d4:50:20:76:37:67:61:fe:dd:86:89:85:d0:
31:11:e8:cb:85:1c:f3:9b:e3:db:44:fa:b8:ba:78:
46:cd:fd:4d:ec:53:70:a1:16:c9:66:9f:d5:d9:4a:
a3:bb:92:52:a9:b6:02:c0:63:b7:05:8e:3d:9f:de:
bf:1e:42:63:5e:1c:6f:f8:4e:93:d1:0f:71:fa:52:
92:19:d0:c3:64:0a:81:4a:77:07:8e:83:ba:87:13:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:75:36:1A:B7:B9:61:70:60:75:8C:10:79:78:CF:89:4E:E3:4D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3b91Nhq3uWFwYHWMEHl4z4lO400.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ef:33:0c:a0:44:84:61:64:e9:1d:3c:8b:33:ba:a3:85:21:
b9:44:41:8c:d1:72:43:d4:53:9a:02:46:01:50:e0:83:b0:fc:
04:73:1f:44:82:9c:a0:60:5a:c1:d2:7c:6a:a7:dc:ca:67:18:
07:95:06:5b:08:71:9f:90:4b:8d:19:d9:43:7c:18:7f:56:ea:
a2:18:bb:15:36:70:9a:80:c5:93:6e:c1:79:06:38:a1:79:68:
f5:78:b0:25:d5:43:08:e1:44:dd:4a:d0:b7:23:cb:40:8a:e8:
80:44:04:01:c1:77:a9:0a:47:28:5e:32:2d:0e:e5:fe:c1:e9:
24:8c:8d:0e:32:1f:8b:75:33:ad:39:df:72:68:59:a8:91:16:
e2:75:b9:6b:8b:77:e6:7f:65:c5:8b:f8:78:aa:17:f7:16:10:
b5:64:7f:28:a6:73:b4:1a:67:67:d3:5d:0d:b6:08:30:85:7e:
db:1d:78:1b:14:8d:11:08:dc:04:7e:78:df:4e:e6:a2:f2:93:
30:8d:f4:69:8c:5d:db:c6:4f:ed:ca:bf:0f:b4:52:b3:25:a8:
c2:58:be:eb:fb:01:9c:a9:4c:e2:a5:65:86:d6:6c:94:cc:15:
0b:af:10:ab:14:35:d3:79:15:57:73:78:56:30:10:7a:a8:5b:
a3:e6:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:16:38 2024 by rpki-client on console-ams.rpki-client.org