Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_3hR0R3ZzlD_0dOlYZaHKXi7Jkw.roa
File: _3hR0R3ZzlD_0dOlYZaHKXi7Jkw.roa (raw, json)
Hash identifier: ep2C7nDTpoGkNAuaT2Tu8Y3Cbeo7ZzSQ1TfBbZprVdc=
Subject key identifier: FF:78:51:D1:1D:D9:CE:50:FF:D1:D3:A5:61:96:87:29:78:BB:26:4C
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018F72AF28ACA09B43084BDD5F3D28F2ABF2
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_3hR0R3ZzlD_0dOlYZaHKXi7Jkw.roa
Signing time: Mon 13 May 2024 16:00:32 +0000
ROA not before: Mon 13 May 2024 16:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216361
IP address blocks: 185.217.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:af:28:ac:a0:9b:43:08:4b:dd:5f:3d:28:f2:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: May 13 16:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7851d11dd9ce50ffd1d3a56196872978bb264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:c2:b1:f0:aa:ca:47:23:3f:2c:e8:d4:f6:
5c:9e:88:f8:76:a9:ba:a0:62:c4:bd:52:21:10:ca:
c2:72:23:4c:c0:f2:c3:3c:2d:64:39:ba:fd:f2:ce:
35:57:24:31:eb:95:45:de:46:c9:ca:24:03:75:58:
23:33:66:68:e6:6e:50:ea:7a:cb:85:15:53:b6:6d:
3d:44:29:72:b9:fd:34:16:cc:ec:74:97:6e:1e:f0:
dd:c1:87:e6:1c:06:67:45:8c:92:e7:8d:52:c3:e1:
01:fb:7b:4a:cc:8a:b8:80:f3:86:3b:7a:8f:e6:1e:
89:db:ee:5c:ad:73:8d:ad:23:62:cd:03:bc:6c:56:
47:73:10:94:63:73:39:78:a7:7c:75:71:91:34:6a:
eb:50:f6:5a:03:38:fa:cc:a6:f4:7f:da:0f:fd:89:
2e:5e:d9:ce:13:15:b8:56:2d:c7:c8:54:7e:9b:6a:
39:ed:45:84:a9:36:78:e8:59:9a:de:93:a8:6d:30:
77:26:c5:c4:83:1c:6a:f5:18:71:c2:e5:8c:a2:a3:
d3:47:31:2d:2d:a1:10:9b:51:50:4a:bb:ac:1e:42:
45:09:43:b3:6e:09:26:65:2c:af:15:e5:ae:da:b4:
61:02:2a:36:ff:b3:b9:77:60:8c:0f:3c:99:4b:49:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:51:D1:1D:D9:CE:50:FF:D1:D3:A5:61:96:87:29:78:BB:26:4C
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_3hR0R3ZzlD_0dOlYZaHKXi7Jkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:23:b0:9d:e9:ee:23:f3:1e:f7:a3:30:08:0c:30:5b:88:5c:
fc:30:95:5f:04:8e:0f:e6:54:f5:da:4a:1e:7f:d9:de:43:7a:
96:02:f0:9f:03:77:75:3e:e0:19:7e:8e:bc:60:1f:c2:81:60:
74:34:3c:a7:0d:ce:a2:fa:cd:2a:ab:e3:30:8f:61:16:81:b1:
0c:49:43:e3:ee:67:aa:12:72:70:8c:9c:7e:d2:bb:5d:1d:2b:
70:60:9c:4d:66:a4:27:3b:92:b1:b1:62:c5:bd:12:03:19:63:
bd:31:ba:d0:32:a8:8f:b2:34:34:ff:96:cd:6f:fc:32:74:a5:
22:85:47:ab:57:6f:d9:5c:a7:a5:3e:91:33:f7:29:ea:01:76:
0a:29:29:05:6a:8a:89:61:33:09:e0:84:79:3e:cc:95:2a:10:
25:c2:92:f1:29:a8:20:80:c6:08:fc:45:96:02:9d:cd:ad:9c:
44:8a:e6:b0:02:dc:5d:2c:a1:3c:3a:a0:d3:3e:8c:6c:2e:3b:
8d:16:ed:b4:39:c1:d5:30:d7:c1:86:96:b4:4f:02:5a:e5:5a:
ad:63:1b:1d:79:22:bf:d0:47:3b:ed:fb:91:00:b8:d1:79:79:
98:34:16:56:07:58:da:71:90:e2:78:b3:ea:f2:01:a1:0a:79:
92:57:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:19:01 2024 by rpki-client on console-fra.rpki-client.org