Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/3-36QfNumz87WGmjBK8xmVLenUA.roa
File: 3-36QfNumz87WGmjBK8xmVLenUA.roa (raw, json)
Hash identifier: HuripX5JaanLD1DdOuo9ZBkOuUA4Sel/8Ly/9L5e8z8=
Subject key identifier: DF:ED:FA:41:F3:6E:9B:3F:3B:58:69:A3:04:AF:31:99:52:DE:9D:40
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 018CC793DA4C11B83CC7C1E4E0012889122D
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/3-36QfNumz87WGmjBK8xmVLenUA.roa
Signing time: Tue 02 Jan 2024 00:30:04 +0000
ROA not before: Tue 02 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 185.166.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:da:4c:11:b8:3c:c7:c1:e4:e0:01:28:89:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jan 2 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfedfa41f36e9b3f3b5869a304af319952de9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:79:9f:85:e9:5d:bd:15:92:5b:5a:c9:4d:
1e:e6:22:27:3a:ca:cc:5f:b4:f3:03:b4:c0:72:2b:
94:75:0f:4c:84:da:a2:5e:3d:13:4c:aa:00:ce:f8:
3d:94:6b:76:f2:0c:36:7c:52:db:ba:77:97:cf:f0:
35:de:86:d3:b8:f1:5a:a4:37:d3:e0:47:20:9e:fb:
c4:2c:18:72:8c:0c:b0:e1:8d:90:c6:7c:73:50:26:
4a:f7:b4:c4:49:90:e0:2e:87:ad:02:0d:c4:37:ed:
de:92:7f:df:17:4e:68:0f:a9:6a:af:a4:71:62:69:
35:63:a9:2b:bc:56:4e:26:73:2b:d5:f0:13:a5:31:
e8:f2:38:37:57:3a:d8:ba:68:75:17:8b:b0:b3:ec:
0c:c7:5f:a0:3d:5b:0a:ac:27:74:ec:ab:72:81:4a:
d8:65:bc:5f:46:22:16:be:f1:22:00:0f:1a:18:35:
82:05:3c:75:20:0a:80:8d:31:96:7e:0c:8d:87:bf:
fc:45:e8:45:8d:30:b8:53:a9:ed:6f:9c:e3:d5:89:
7f:14:47:b6:5a:0a:80:f6:be:3b:25:e9:7d:ef:ba:
86:fd:27:ff:68:e8:cd:ed:ce:00:51:fc:60:fa:ce:
88:27:2c:cb:aa:55:ec:b9:ee:43:b2:61:a6:3d:4b:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:FA:41:F3:6E:9B:3F:3B:58:69:A3:04:AF:31:99:52:DE:9D:40
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/3-36QfNumz87WGmjBK8xmVLenUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.115.0/24
Signature Algorithm: sha256WithRSAEncryption
81:42:d3:b6:e3:45:cc:ea:6d:b1:07:b5:bf:44:b3:d6:10:9f:
80:69:38:05:ff:60:68:98:23:a0:f4:41:c5:83:12:8c:b8:1d:
3c:6f:f6:7b:79:e9:9d:49:bd:99:08:c6:8c:88:3b:8e:33:65:
ca:a5:63:54:9d:a5:fd:2e:29:dc:6d:1d:fb:dc:16:4c:d9:68:
4c:9a:a9:cc:1c:dc:23:20:be:e8:54:a5:35:1e:a0:11:b7:64:
20:92:f8:15:94:2d:b6:79:6b:4b:4f:f2:ec:2b:e9:4f:61:d7:
d9:12:15:3c:98:9a:43:a0:62:f6:10:ca:15:25:c8:93:7a:c8:
87:e6:f1:b1:86:1e:23:fd:0b:83:08:b4:55:36:bb:6b:7b:03:
7b:52:b8:99:e4:60:ff:ba:45:c2:fe:ef:a2:31:91:b8:87:75:
f9:ba:3a:0e:ad:ae:d1:44:5c:3c:57:20:d3:66:ba:39:bd:87:
6b:b9:12:dc:80:6e:10:f3:c7:6e:31:4d:4d:b3:92:0c:9b:a5:
c0:ce:1a:28:d2:82:28:08:59:eb:6a:a6:3c:21:25:31:41:e1:
5a:3d:39:ba:9f:32:7d:49:74:36:19:92:c3:54:de:25:88:3f:
b4:8d:bb:0a:8f:74:a6:07:92:12:a5:ed:4a:90:2c:4b:62:58:
b8:1f:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:34:14 2024 by rpki-client on console-ams.rpki-client.org