Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/3zCEN7_j2kZyvUfeS1kFF5hoFIA.roa
File: 3zCEN7_j2kZyvUfeS1kFF5hoFIA.roa (raw, json)
Hash identifier: DQyDh12NgroWUTeMHLYHX/ZFZCdiPt8b7B6dXtxEq+0=
Subject key identifier: DF:30:84:37:BF:E3:DA:46:72:BD:47:DE:4B:59:05:17:98:68:14:80
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0191F75A307D5D4D53BB918AA411D3436D37
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/3zCEN7_j2kZyvUfeS1kFF5hoFIA.roa
Signing time: Sun 15 Sep 2024 20:22:48 +0000
ROA not before: Sun 15 Sep 2024 20:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f7:5a:30:7d:5d:4d:53:bb:91:8a:a4:11:d3:43:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Sep 15 20:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df308437bfe3da4672bd47de4b59051798681480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:6f:b6:16:a5:86:ad:53:54:d7:42:aa:05:
01:63:cb:3a:45:b6:2a:85:ce:1f:6f:1c:60:a4:35:
75:b6:7b:94:bd:9b:ae:56:5d:a9:ef:61:c1:10:69:
22:96:08:4a:60:ac:63:ba:b3:40:55:2c:bc:df:86:
44:c7:85:99:62:60:d4:f2:e9:2c:72:d1:d6:60:cd:
cd:7e:37:5b:63:33:99:ba:1e:d1:b2:b8:d0:0b:5f:
68:c0:5e:77:fb:49:7a:1a:35:4d:64:80:8b:69:97:
bf:dd:f2:89:f7:31:73:b7:f0:f1:5b:22:cb:39:de:
11:fd:9a:f7:f3:7c:4d:f1:6e:ee:02:9b:30:e6:34:
b3:b0:9c:69:dc:2a:95:2e:a2:ec:57:99:c3:02:39:
72:5e:89:40:dd:ff:53:65:4a:bf:82:50:54:aa:c3:
80:84:89:66:3d:54:75:cd:24:43:2c:c0:5b:56:bd:
05:63:d3:e3:ed:1d:e2:0c:6c:3e:6b:87:90:df:b4:
df:05:a7:b3:73:32:73:63:78:16:f3:8f:3d:b9:9e:
7d:fa:e9:97:c5:9f:09:7b:b3:80:ca:50:02:0a:71:
11:f7:88:a4:e9:a2:5b:b7:a1:be:45:91:68:41:a0:
51:a7:90:a6:6d:fb:55:e8:ab:a9:72:46:1f:c2:8f:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:84:37:BF:E3:DA:46:72:BD:47:DE:4B:59:05:17:98:68:14:80
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/3zCEN7_j2kZyvUfeS1kFF5hoFIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:4c:18:4e:7f:6e:96:55:dc:06:40:15:c7:42:02:f0:e4:
e4:c3:f7:d0:96:ae:ea:6d:c0:37:08:f8:fe:74:90:cb:78:9c:
db:7a:21:c4:46:a1:af:06:7f:c6:32:12:a9:4d:a9:81:e5:78:
35:4e:5c:f1:e3:a5:b8:9d:7a:07:65:e3:b4:71:c2:05:43:52:
47:72:95:ec:1b:7d:64:96:01:3a:6f:b7:62:14:1f:2f:6b:93:
e9:13:1c:a4:77:93:d4:ec:e0:2a:20:f1:f0:27:48:96:6c:96:
79:91:49:bb:a0:7f:d8:c4:d0:86:80:f7:49:ad:77:39:ee:77:
48:8a:e7:78:82:bf:72:2a:2e:a3:b4:7c:57:67:fe:5c:2b:33:
dd:3c:ac:a4:6d:02:4b:96:b6:a5:b9:f1:a1:4e:16:46:27:10:
e1:e6:ba:f0:9b:13:11:c6:24:ae:b5:ef:97:ea:0d:11:c6:5d:
60:a2:2c:27:79:2a:a5:69:1a:fa:d5:54:47:49:f0:91:40:38:
4d:ad:0d:4c:20:4b:9c:16:ad:71:c3:b5:f6:3c:c7:dd:99:08:
92:bf:d3:44:cb:fa:11:84:c9:6a:28:b3:63:17:ee:44:5d:fc:
44:78:98:2f:18:4c:c5:45:13:e7:5b:15:9d:b5:99:07:64:73:
ef:fd:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:10:30 2024 by rpki-client on console-fra.rpki-client.org