Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/36VP13x6vJkiMbyHn9Arxu1yDB8.roa
File: 36VP13x6vJkiMbyHn9Arxu1yDB8.roa (raw, json)
Hash identifier: 1CnddCWaBFNEvVpG6zUx8Mcr0+znpUMkG4FpRn3FaYA=
Subject key identifier: DF:A5:4F:D7:7C:7A:BC:99:22:31:BC:87:9F:D0:2B:C6:ED:72:0C:1F
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018CC726EA690163AF8A219D5910D45521BF
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/36VP13x6vJkiMbyHn9Arxu1yDB8.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207464
IP address blocks: 84.214.116.0/22 maxlen: 22
84.214.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ea:69:01:63:af:8a:21:9d:59:10:d4:55:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfa54fd77c7abc992231bc879fd02bc6ed720c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:1d:42:b2:4d:7c:a0:89:a9:9d:7f:1e:56:
37:00:08:0b:93:36:1f:2c:b5:f5:a8:34:14:fc:65:
1d:59:19:e2:5d:34:a2:34:72:c1:4a:8c:f1:bd:1e:
c6:d5:c5:a7:a3:9f:3a:6c:37:e2:78:50:6d:f3:8c:
9f:f0:1b:80:2c:fe:f5:41:a9:7e:65:0b:08:60:c4:
54:97:eb:ee:d5:85:d3:c8:f4:80:c0:60:6d:9b:ba:
0b:dd:ac:d5:17:16:10:5a:8a:bf:1f:6e:5b:f3:03:
0b:b4:00:90:d5:e4:00:6b:c8:95:1e:73:ac:57:76:
70:fe:1f:41:53:58:3b:29:98:04:f3:ae:aa:f7:11:
52:ef:94:24:fb:a6:44:90:b4:2d:9e:64:38:0d:9b:
0b:a6:48:f3:b7:fb:2d:16:da:d7:e2:ed:b5:ad:5a:
a9:b4:7e:80:d8:d6:e3:d9:69:84:75:62:0c:83:da:
19:96:c6:31:a8:e4:02:09:13:8d:df:12:91:1f:21:
58:08:75:1b:7a:fb:3a:2c:0a:bf:f0:8d:45:e2:48:
b3:bf:e4:c8:a8:d0:c1:ce:98:51:56:1d:df:21:79:
70:a4:d3:41:2d:5c:3e:0d:1e:70:1d:04:2d:8a:d9:
42:81:fa:51:0e:08:c5:a2:5d:a4:12:4c:3c:40:5f:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:4F:D7:7C:7A:BC:99:22:31:BC:87:9F:D0:2B:C6:ED:72:0C:1F
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/36VP13x6vJkiMbyHn9Arxu1yDB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.214.116.0/22
84.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3d:7b:44:f4:44:c5:61:4b:2b:6d:fa:a0:54:bc:e3:7e:07:
3d:79:13:98:92:02:07:8e:19:2d:8b:48:59:1e:be:a9:62:11:
13:7d:dd:ac:8f:75:8d:73:89:18:d6:85:c9:06:1e:c8:25:c2:
59:a8:ac:7c:06:a8:2b:49:96:64:86:88:0a:e6:4b:87:5d:66:
49:bf:55:03:a6:fb:58:24:d9:39:35:df:be:07:a1:47:33:72:
de:fd:85:43:1b:b3:9b:ab:be:44:c3:c9:e5:2b:4f:6a:2c:8c:
28:56:20:1c:be:d2:50:5e:94:e3:bb:ee:c4:68:43:0b:09:73:
43:cb:1e:59:ca:3e:62:31:a5:88:22:69:fb:1e:de:fb:9e:9f:
c7:d5:e6:c6:a8:02:c6:55:4b:da:e2:66:29:f8:ec:ce:b3:ee:
d2:cd:d0:7c:65:d2:a5:2e:5e:d1:e6:79:85:f7:f0:03:3b:a1:
4e:4b:31:5b:49:9d:33:19:b2:6d:83:14:02:c2:88:62:d3:de:
44:37:76:43:63:b5:82:d2:f9:b8:95:ad:7b:3b:2d:42:c6:50:
58:61:77:e1:3a:3b:94:d8:1f:36:57:bd:4d:86:53:16:9f:8d:
df:ef:0b:87:81:ad:66:e3:d6:06:ac:d8:2d:65:01:55:5b:37:
81:d0:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:28:47 2024 by rpki-client on console-ams.rpki-client.org