Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/3BfMZcSxbwNoxBkT3bCL_BUGHQc.roa
File: 3BfMZcSxbwNoxBkT3bCL_BUGHQc.roa (raw, json)
Hash identifier: AtwUZ8NKvTrtCgEPOTeeSzLjQ8/9jEElaPQojanUxcM=
Subject key identifier: DC:17:CC:65:C4:B1:6F:03:68:C4:19:13:DD:B0:8B:FC:15:06:1D:07
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 018CC5006ED8EC97E00E71C1423A160F2120
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/3BfMZcSxbwNoxBkT3bCL_BUGHQc.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31172
IP address blocks: 87.239.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6e:d8:ec:97:e0:0e:71:c1:42:3a:16:0f:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc17cc65c4b16f0368c41913ddb08bfc15061d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:14:b0:d5:0a:8e:6b:ed:fe:81:d7:26:15:
f9:8e:6f:61:a0:d3:3a:67:c2:8f:ef:81:4e:ed:36:
83:70:34:73:3b:59:5c:4e:db:a4:1e:13:12:03:94:
e2:38:1f:6e:7f:83:af:e0:86:3c:17:7a:dc:0d:02:
70:d4:0b:dc:fd:ab:15:17:18:a9:80:a0:3d:e1:ac:
7e:77:90:0a:ee:35:e2:06:d4:3b:e2:6a:f0:90:86:
97:5f:36:49:ba:ae:5e:fc:6b:69:2f:8a:78:5c:b3:
3e:3b:78:13:a3:b6:ea:2b:d3:11:a4:69:5b:2a:bf:
0a:06:1f:c0:17:bc:80:7f:7d:76:0c:9e:15:e3:7f:
f9:5f:87:a1:97:95:56:79:86:8b:d4:8d:76:fa:a5:
6e:d8:ab:5d:05:2e:f0:86:61:75:72:dc:23:d6:06:
37:7b:cb:d0:d3:30:ed:e7:86:5b:d4:00:91:3a:a2:
f7:fe:ab:e0:1f:26:a0:b2:0c:51:fb:c7:e7:77:97:
a1:39:38:56:d1:70:c1:33:bd:4b:cd:50:2a:cc:95:
89:3e:6d:04:e9:6d:25:14:0f:24:4e:70:6c:68:14:
d3:81:15:8d:4a:16:65:b3:f4:8c:8b:61:f0:e8:fb:
9c:5d:b2:82:fa:41:8b:6f:46:4f:f2:49:ba:69:86:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:CC:65:C4:B1:6F:03:68:C4:19:13:DD:B0:8B:FC:15:06:1D:07
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/3BfMZcSxbwNoxBkT3bCL_BUGHQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.100.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f1:11:c3:1c:1b:5b:d2:e0:30:54:53:2a:d2:d6:97:6d:9d:
45:dc:bb:e2:90:ed:e0:6c:c0:ef:62:34:1b:2f:f1:77:2f:e7:
cf:1a:07:5e:3a:7e:ff:e0:4c:f9:dc:92:bd:49:8e:0b:f7:c1:
3f:8f:69:d9:af:97:5f:a5:bb:c9:54:44:3d:82:fd:f2:fd:16:
42:18:b0:11:6e:25:d0:f6:10:27:d7:aa:58:06:ae:8d:88:ed:
23:fb:c6:db:ce:68:a0:f9:5e:48:c7:f6:2c:d6:f2:71:7c:3b:
76:07:39:62:f3:c6:15:92:67:32:06:15:e3:54:51:e8:b4:23:
54:8c:be:fc:d7:7e:c1:92:db:66:c9:9d:c3:e5:21:2f:45:40:
d5:1e:6f:af:91:4b:3a:21:9b:c1:39:70:cc:ea:0f:e6:f6:86:
8f:a8:34:4e:1c:d3:e7:2b:52:12:a1:91:85:8c:8b:d6:fa:f3:
f0:2b:a1:24:2f:d5:8a:d9:16:50:9c:7d:8e:9c:89:62:88:b7:
fc:9c:98:23:a0:8f:4e:95:06:04:5e:e6:95:29:2a:58:90:92:
fc:b2:39:6f:33:3d:91:3f:82:fd:5e:e9:b7:2b:db:b4:d6:d3:
3e:46:75:78:98:40:b8:a1:ae:c5:d7:fb:20:be:95:0b:ca:a2:
54:ff:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:22:55 2024 by rpki-client on console-fra.rpki-client.org