Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3K8V4RnROQDvb0oJzRgL42gjReQ.roa
File: 3K8V4RnROQDvb0oJzRgL42gjReQ.roa (raw, json)
Hash identifier: bxlEnSb0ACU/+sVI1OXCR6P4GOrXPTpEgF8fnNCCxnE=
Subject key identifier: DC:AF:15:E1:19:D1:39:00:EF:6F:4A:09:CD:18:0B:E3:68:23:45:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018E3263CCE4EB07F7D8E7FF98323839B67E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3K8V4RnROQDvb0oJzRgL42gjReQ.roa
Signing time: Tue 12 Mar 2024 11:19:45 +0000
ROA not before: Tue 12 Mar 2024 11:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5606
IP address blocks: 85.120.16.0/24 maxlen: 24
85.120.17.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
193.226.68.0/24 maxlen: 24
193.226.69.0/24 maxlen: 24
193.226.70.0/24 maxlen: 24
193.226.71.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
217.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:63:cc:e4:eb:07:f7:d8:e7:ff:98:32:38:39:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 12 11:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcaf15e119d13900ef6f4a09cd180be3682345e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:d3:60:4c:1a:c6:10:b8:bf:56:4d:33:3f:
07:67:38:e6:4e:5d:a1:a2:e0:b4:c2:9c:10:89:f1:
59:b0:d1:09:cb:33:30:22:24:1d:d8:f1:f0:2f:a2:
46:79:c1:5d:44:c3:7f:9b:7d:3c:11:c0:eb:01:74:
5f:f2:8e:45:7f:60:a2:57:4d:b8:19:0b:7b:72:76:
57:36:7f:2c:8b:a4:6c:07:2c:b5:90:3a:fd:45:10:
51:7d:93:d3:22:cf:89:2d:e8:cc:5c:70:b8:8c:53:
c0:c5:c5:e0:4f:b9:7c:d5:05:e6:7e:24:a5:13:00:
4b:2b:94:e5:ef:b1:d2:ae:16:7b:60:c6:fd:0b:15:
2d:c8:a3:68:2d:cf:c2:a9:9a:b3:35:43:b9:72:a0:
c4:2d:b4:fb:ac:62:0b:d1:27:55:59:27:c1:a8:e5:
55:0e:74:1c:f0:ff:b0:d6:78:f1:3b:01:ab:3f:f4:
16:9a:db:10:a0:36:60:44:16:e5:03:16:4a:45:b0:
16:ff:da:88:8f:61:6e:8e:11:47:2a:44:5f:67:83:
71:70:dc:6a:7f:3b:ab:9e:85:09:13:52:c2:87:4e:
78:36:62:bb:b1:f5:8d:a1:2a:f0:dd:06:3a:cf:a1:
8b:96:1b:f7:5f:26:16:34:03:1c:f7:6f:fe:58:ec:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:15:E1:19:D1:39:00:EF:6F:4A:09:CD:18:0B:E3:68:23:45:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3K8V4RnROQDvb0oJzRgL42gjReQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.16.0/22
193.226.68.0/22
217.156.46.0/23
217.156.86.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9a:e9:9f:3d:c9:b0:0d:af:96:d0:08:75:d3:b2:c4:c4:86:
f0:1d:fc:d7:16:53:bc:a4:3f:6d:f0:21:b2:2c:6e:80:eb:38:
05:da:65:5c:79:a5:a1:89:6e:7b:0f:34:d4:81:6c:4f:65:8c:
2e:b2:fa:c9:31:82:06:d7:11:c8:74:e2:c3:6e:25:c6:5d:59:
9a:3b:7b:0f:79:1d:01:40:30:d4:f8:e6:a1:b2:95:c1:9b:75:
ca:64:f5:7e:ea:22:10:15:f3:f3:73:ee:49:d2:66:5b:64:80:
71:20:00:6d:9c:21:10:39:a7:c9:36:64:c6:46:5f:00:88:37:
a5:b5:06:ac:95:a4:fc:41:02:a7:ba:64:6f:f6:30:25:4b:68:
ff:e6:4e:98:94:c0:53:6d:81:ec:18:b9:d3:8d:0f:80:0b:4c:
b2:4f:ec:8d:1e:af:82:74:e8:37:40:ab:08:bf:2b:21:b0:15:
6f:54:60:9f:c7:ba:02:13:2b:00:4e:d9:1d:55:d4:b7:73:f4:
d3:c6:56:b1:86:22:71:41:ff:4e:a5:81:08:67:c8:ff:c6:62:
69:38:c2:a3:ea:11:d8:e5:9d:1a:79:f2:71:67:5b:f2:e8:42:
17:9c:55:74:7e:5f:df:15:c9:f2:88:e9:d6:14:72:d9:4a:dc:
d1:51:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:58:59 2024 by rpki-client on console-fra.rpki-client.org