Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3vo1XkY0myXx_N2uhAcZJ7qk41Q.roa
File: 3vo1XkY0myXx_N2uhAcZJ7qk41Q.roa (raw, json)
Hash identifier: B3tj6kyTCr423+juA+5mDR1IpbDGpwWzexy+f6gK6rE=
Subject key identifier: DE:FA:35:5E:46:34:9B:25:F1:FC:DD:AE:84:07:19:27:BA:A4:E3:54
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 018DC5CEC9F94B12F0A676FF66258BD22391
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3vo1XkY0myXx_N2uhAcZJ7qk41Q.roa
Signing time: Tue 20 Feb 2024 09:18:00 +0000
ROA not before: Tue 20 Feb 2024 09:18:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 5.252.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:ce:c9:f9:4b:12:f0:a6:76:ff:66:25:8b:d2:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Feb 20 09:18:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=defa355e46349b25f1fcddae84071927baa4e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:c7:a5:5d:c9:5d:7c:8b:fc:be:bc:fc:b5:
e1:ae:95:37:a8:c8:b1:44:de:b3:fa:e8:24:5b:3a:
db:29:66:ce:0b:b5:56:8c:ea:f7:4c:d2:0f:f4:6a:
83:c5:2e:10:27:b0:d3:14:71:c0:c0:61:18:83:3e:
ef:47:44:2f:6c:ac:db:68:9a:34:dd:39:c5:09:d0:
29:aa:b8:39:67:cd:19:97:88:c7:6e:1b:b0:a5:42:
31:22:69:97:86:ab:64:8c:8c:64:b0:c0:f6:f8:5e:
0a:db:b4:e5:e3:f9:54:79:74:77:b7:13:ee:40:c6:
bf:63:42:91:5a:49:43:92:3f:da:37:7e:c1:55:b6:
f7:41:f3:6c:d0:9e:7a:bb:d4:75:9b:f7:c6:6b:6b:
94:61:dc:fe:93:b8:97:8b:73:d1:52:3e:8a:21:86:
de:87:02:d7:cc:2d:61:94:b0:47:a1:db:b7:72:2a:
ff:6a:ce:5c:7f:12:71:97:9a:79:a5:54:1e:a4:77:
50:da:0a:05:48:e1:06:71:67:99:a7:c6:1b:2d:08:
6a:23:bc:0a:ed:ad:d4:39:65:cb:4e:0d:2a:07:98:
a8:11:d3:d5:fc:d2:78:5a:3d:09:ca:d9:72:56:06:
b7:c6:8c:e4:52:26:3d:b6:83:18:4f:97:ed:81:1c:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FA:35:5E:46:34:9B:25:F1:FC:DD:AE:84:07:19:27:BA:A4:E3:54
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/3vo1XkY0myXx_N2uhAcZJ7qk41Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6c:9b:bf:87:cd:89:5e:0e:7b:aa:9e:73:70:b3:4d:32:6b:
fd:08:6d:9c:b9:4d:44:c8:87:f4:3f:1c:74:f0:e5:65:24:0f:
4e:8e:19:c1:f4:fe:1a:ef:f0:a2:c2:9c:8f:ca:b5:c9:3d:9f:
cb:6e:86:e2:3a:6d:42:ab:ce:bd:6d:e3:bc:94:1d:b9:69:a3:
ba:b8:ac:fb:ce:43:77:5e:12:f5:73:96:09:4d:3a:44:48:ea:
b3:2a:3b:22:d5:3f:aa:1a:b7:a1:32:d5:de:14:8a:d7:ef:44:
55:d6:ac:a7:85:df:9e:bb:af:ed:33:31:9b:09:9c:f1:1d:f1:
b3:47:db:4f:8e:14:65:07:2e:c5:54:bc:57:63:b3:27:e8:ec:
0e:10:1a:a6:60:95:e3:e9:49:13:46:eb:11:d1:98:fe:d4:29:
b5:46:68:2f:44:eb:09:75:1b:92:68:3d:8e:a4:8b:5a:fb:28:
c1:5d:17:e5:ce:d2:4a:23:52:8c:eb:57:1d:d9:77:d9:a5:50:
d6:49:9b:37:a6:0a:95:0b:43:33:81:98:10:f5:ec:c7:db:62:
93:ba:33:fc:8f:f7:d3:22:17:70:13:f2:b2:5d:72:c6:80:3c:
03:bc:77:ad:78:32:8f:15:db:ec:11:ce:69:18:00:98:e7:e8:
00:1b:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:41:22 2024 by rpki-client on console-fra.rpki-client.org