Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/3niyDoVUcN2H0-S0fh6Do4KdXTo.roa
File: 3niyDoVUcN2H0-S0fh6Do4KdXTo.roa (raw, json)
Hash identifier: wtYKdhoLyYpzFkvpyk933XzaCB57MxSrdGmPIaCogLc=
Subject key identifier: DE:78:B2:0E:85:54:70:DD:87:D3:E4:B4:7E:1E:83:A3:82:9D:5D:3A
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 018CC424AE9419EAC95FEEE17FA209C51972
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/3niyDoVUcN2H0-S0fh6Do4KdXTo.roa
Signing time: Mon 01 Jan 2024 08:29:47 +0000
ROA not before: Mon 01 Jan 2024 08:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8544
IP address blocks: 66.205.95.0/24 maxlen: 24
185.42.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ae:94:19:ea:c9:5f:ee:e1:7f:a2:09:c5:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 1 08:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de78b20e855470dd87d3e4b47e1e83a3829d5d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:ee:6e:b0:c4:42:40:39:87:59:ff:3d:2c:
84:99:3d:d2:fb:7d:3e:a8:25:15:6c:3c:2d:d9:d0:
9e:e1:6d:35:8e:58:34:c9:a1:30:73:85:4d:98:08:
52:6b:43:4c:c3:10:7e:51:22:8b:ee:a9:b0:18:03:
b0:54:94:42:c1:be:3c:63:8b:6e:ff:b6:97:3c:40:
2c:fb:bd:7e:29:ba:18:63:9f:d4:83:1a:2e:8d:9b:
84:cb:c9:7a:6a:f6:d0:bf:4d:d3:08:69:3f:3d:6e:
4e:d1:1c:46:23:87:15:45:1c:4c:bf:8b:29:29:3e:
b1:5d:a3:c0:4b:17:f0:fe:f3:ec:c0:fe:62:38:d7:
af:1a:fb:f7:89:f1:eb:98:b7:4b:69:ac:f7:45:51:
99:0b:bd:d0:ba:28:bf:39:e1:6b:a7:7f:04:31:a2:
bd:d4:57:55:36:77:01:d5:46:83:eb:7e:fe:5b:77:
a6:d3:17:87:67:84:9a:ad:67:b3:e5:4c:d2:80:b0:
0d:ab:77:83:e6:cb:8f:ae:3c:57:15:e4:39:c1:c4:
59:a1:68:72:f3:46:9b:c2:ad:72:d4:c6:f0:08:ea:
5a:7f:58:a3:01:22:1f:86:12:f7:c8:b4:ba:4b:1b:
a6:d7:87:6a:9b:4e:0a:60:3d:28:01:61:1d:43:8e:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:B2:0E:85:54:70:DD:87:D3:E4:B4:7E:1E:83:A3:82:9D:5D:3A
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/3niyDoVUcN2H0-S0fh6Do4KdXTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.205.95.0/24
185.42.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:58:4b:2d:11:03:a3:c5:18:90:19:df:29:e9:96:fd:b8:8b:
0c:da:4b:34:d6:a9:9e:d2:6b:19:1d:6e:f2:cd:67:35:3a:8b:
8d:cd:4a:8b:d8:69:72:5e:b3:14:be:fa:a4:48:f6:de:15:20:
8e:da:a4:92:f9:a0:55:d3:b4:28:21:81:2e:14:a3:d3:8c:1e:
8d:a6:9b:0d:07:7c:c4:30:0d:c4:74:20:ae:f6:93:a6:10:a7:
83:d9:51:3b:5a:6c:37:0a:ab:f3:8b:c7:3e:02:2f:25:48:d2:
0d:83:ad:12:00:bd:a3:cc:5f:5b:b5:fa:9c:58:d5:bb:5a:16:
c0:85:3f:fb:58:bb:75:9f:92:96:ae:b5:17:dc:26:a1:82:39:
ae:7a:9c:f7:49:e9:e1:6d:25:c5:e8:b8:3d:46:58:8a:cb:ee:
b8:16:c5:c1:a1:bc:61:36:c8:80:7d:7e:fa:07:17:46:c3:68:
19:b8:eb:c3:02:f0:59:2f:69:94:41:5f:26:4b:a3:3a:33:b1:
f3:cf:68:73:7d:89:c7:16:a9:0e:38:dc:95:9f:75:4d:00:9e:
83:8f:2f:37:b7:52:3c:ed:bf:a0:c3:7e:87:cb:0a:1d:aa:ae:
2e:21:4d:ac:da:3b:2a:8a:87:f3:3a:37:a4:33:d1:28:4a:f4:
76:c2:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:09 2024 by rpki-client on console-fra.rpki-client.org