Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3XFwJVxHj_DJMuHV7dD5dVHrTLk.roa
File: 3XFwJVxHj_DJMuHV7dD5dVHrTLk.roa (raw, json)
Hash identifier: 51VQaSG/L9OkMXzMIkZwlmy9tkij+aVU79Lbu+vRFLI=
Subject key identifier: DD:71:70:25:5C:47:8F:F0:C9:32:E1:D5:ED:D0:F9:75:51:EB:4C:B9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0191C633B3ABEB8B7895A5D48B6E3A2D6678
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3XFwJVxHj_DJMuHV7dD5dVHrTLk.roa
Signing time: Fri 06 Sep 2024 07:19:22 +0000
ROA not before: Fri 06 Sep 2024 07:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152586
IP address blocks: 2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.11.230.0/23 maxlen: 23
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:33:b3:ab:eb:8b:78:95:a5:d4:8b:6e:3a:2d:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 6 07:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd7170255c478ff0c932e1d5edd0f97551eb4cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:c2:3a:14:82:c5:be:ed:f9:6c:a0:07:9f:
42:74:df:11:ab:1e:bb:63:21:0d:f7:6a:25:1c:d4:
46:94:a5:3d:8f:d9:23:42:0b:20:db:47:bc:39:89:
35:42:35:68:74:57:3a:22:ef:8f:4d:88:e7:7b:90:
42:ec:e0:3d:5f:5a:a3:dc:01:9d:d7:24:8a:3e:5d:
aa:94:a2:0c:86:f7:25:1c:82:8f:dd:00:bf:d2:f4:
b4:68:34:f3:02:81:fd:e2:b3:67:d1:51:71:2f:35:
74:49:25:3d:1c:2d:0d:01:1c:ca:fd:f0:1d:23:02:
51:72:84:78:91:3f:8e:be:8d:0b:c6:72:63:dc:bf:
0a:51:b9:f7:a7:e8:8b:6d:55:95:80:6c:0e:93:4f:
f4:6b:f7:8f:0c:c6:2d:ce:6d:d6:f8:b2:63:3a:82:
22:ac:95:33:2d:81:83:46:49:67:3e:7b:ec:4c:4b:
3a:e5:f2:3c:e3:8e:e9:17:36:06:8e:75:ed:69:78:
6f:8d:fa:be:bf:ee:42:e6:0d:8a:76:a1:2a:ac:09:
35:68:7e:94:30:e8:0f:53:f9:44:3d:d8:95:6a:34:
cf:99:f2:0d:3b:0e:a2:28:8b:0a:c8:e7:ad:f3:b2:
6d:a8:56:06:f0:2b:1b:2c:16:51:de:b4:36:a9:68:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:70:25:5C:47:8F:F0:C9:32:E1:D5:ED:D0:F9:75:51:EB:4C:B9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3XFwJVxHj_DJMuHV7dD5dVHrTLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0-2.58.202.255
45.11.230.0/23
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a4:16:a2:e5:db:6e:cf:de:02:02:e0:88:77:54:09:b9:dd:
3a:ef:bc:ed:e0:52:e6:b8:80:a3:54:56:e6:3d:c3:fb:73:3f:
27:3d:09:11:42:ee:a8:a0:1e:82:ee:6b:47:98:c6:50:5b:42:
d8:58:fb:19:11:de:be:c6:f6:c7:09:c9:4c:48:6a:93:a3:fa:
0b:b7:72:98:51:40:ce:7c:0b:a2:39:63:17:1a:38:31:21:9e:
f6:c8:41:8e:ea:a1:75:1d:3a:1b:fe:e2:da:2d:3e:4d:e3:d5:
c8:f5:61:82:76:b0:f4:7d:46:5e:a4:8b:13:a8:5e:1b:23:16:
90:02:c3:0e:d8:46:80:30:82:5c:1d:f9:1c:ad:43:c3:0f:0b:
50:37:40:ac:d6:e1:2f:35:e9:7e:e3:2a:8e:f0:1d:3e:f9:b3:
a1:1d:ac:fe:da:60:07:d8:8f:20:ba:a1:b9:3e:f6:fb:bb:2d:
36:9b:91:6a:64:09:66:3c:82:b9:4b:2a:5e:be:01:70:5e:68:
14:76:50:ac:8e:df:31:8f:68:71:e9:6c:59:d6:b3:b9:59:c0:
2b:af:03:ee:1c:9c:14:c1:50:a8:10:21:ba:c5:1f:e4:af:21:
19:21:47:6e:ee:f1:58:f3:6f:d0:5b:2c:86:3e:37:67:5b:2d:
a7:68:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:01:45 2024 by rpki-client on console-ams.rpki-client.org