Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/3amFIw8dITdeiL7bsBGTSc9LFuI.roa
File: 3amFIw8dITdeiL7bsBGTSc9LFuI.roa (raw, json)
Hash identifier: mGJEwDMJx3SRLRhDBOlBu5bwt3Y736jM4D+oHkHCSYE=
Subject key identifier: DD:A9:85:23:0F:1D:21:37:5E:88:BE:DB:B0:11:93:49:CF:4B:16:E2
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 018CC9BCB9104B20CFA776950EF9BA4D6B8B
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/3amFIw8dITdeiL7bsBGTSc9LFuI.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50114
IP address blocks: 185.110.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b9:10:4b:20:cf:a7:76:95:0e:f9:ba:4d:6b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dda985230f1d21375e88bedbb0119349cf4b16e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:8b:e5:36:ee:37:0a:6c:41:34:f2:ae:d2:
ad:c9:4d:f7:9b:35:a7:10:0e:b9:68:90:a9:05:93:
39:71:db:3a:6f:88:ce:68:50:c4:cf:49:87:31:1b:
6c:cc:6e:f6:5e:ec:93:dc:2c:cc:8e:b2:25:51:72:
d8:6b:42:65:d6:51:4c:ca:05:7f:e3:b1:de:44:ca:
f6:2b:37:51:53:27:42:34:1e:5f:bf:c8:35:c3:a9:
5b:fd:25:e8:e4:dc:51:20:0d:2d:ec:83:9e:30:ea:
da:a9:98:bc:88:7d:aa:0e:91:a0:0b:7e:15:1b:3a:
8f:44:ce:dc:02:ad:99:18:93:25:92:ad:cf:5b:d0:
26:73:69:17:84:21:c2:4a:34:38:4c:d5:90:bd:dc:
c7:71:14:2f:58:71:74:e9:e6:91:d8:09:a0:19:34:
f8:2a:16:5f:50:0f:06:88:77:b0:59:52:25:05:76:
fa:58:0b:8d:15:97:18:0f:04:bf:62:c4:92:48:1a:
17:67:7d:40:19:ee:a9:02:51:9b:cf:7d:ca:2b:c7:
cb:06:4a:02:74:e6:80:e6:d5:e1:f5:1c:99:21:86:
ab:c4:d0:21:50:ca:70:d3:34:b7:40:d5:80:05:f6:
bd:31:92:15:9b:58:75:49:5c:a9:40:7b:d1:45:65:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:85:23:0F:1D:21:37:5E:88:BE:DB:B0:11:93:49:CF:4B:16:E2
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/3amFIw8dITdeiL7bsBGTSc9LFuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.237.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5d:0a:d4:49:24:d6:44:90:fe:d7:2f:ae:49:cf:12:2c:d4:
ee:59:51:12:78:c1:c7:ad:eb:c5:1f:46:64:ec:a3:f9:61:20:
6f:62:85:a1:22:c6:4c:03:f8:d1:2c:39:82:72:e9:4b:56:b2:
9b:ec:09:32:63:9a:67:1a:51:c5:08:90:c9:c9:80:e2:86:8d:
3f:a7:15:d4:ff:1a:f4:56:b7:b9:b0:ae:64:64:ff:33:44:cd:
66:da:47:92:30:a1:0f:cd:fc:bd:66:8e:88:7d:b1:81:25:8a:
96:ae:d4:b4:12:4c:3b:bc:1b:1b:63:da:57:fb:cb:e6:ce:1c:
f0:44:bb:55:36:cb:76:a5:6c:17:a7:c8:09:34:d7:ff:2b:9b:
38:6e:a0:88:5e:be:6e:41:c2:05:df:ee:bb:73:99:ba:4e:19:
97:7c:ae:bb:81:db:5d:6e:3f:a3:43:98:05:3e:fd:8c:10:46:
f6:09:90:4b:73:e9:d6:24:42:3a:04:12:f6:a2:46:af:26:2a:
e1:40:ef:43:2e:9a:65:a5:13:73:d9:b6:3d:27:63:aa:22:66:
78:04:ca:48:e2:5f:05:8c:31:14:48:b2:76:39:fb:ae:8b:d4:
1a:79:1f:be:41:a5:8f:35:c4:d6:3c:dc:83:6c:a5:99:38:6b:
f3:e5:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:02 2024 by rpki-client on console-fra.rpki-client.org