Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/kHMNDTeuy1HKXnNQGKLmfNQH-3M.roa
File: kHMNDTeuy1HKXnNQGKLmfNQH-3M.roa (raw, json)
Hash identifier: 7vf/DyXIXLjBLwyKotqv3fXV78zBjDKwQYKNIm9oN/I=
Subject key identifier: 90:73:0D:0D:37:AE:CB:51:CA:5E:73:50:18:A2:E6:7C:D4:07:FB:73
Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial: 018CC8017DC2B6AEF50167BCE4078B83B252
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/kHMNDTeuy1HKXnNQGKLmfNQH-3M.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 86.36.48.0/24 maxlen: 24
86.36.49.0/24 maxlen: 24
86.36.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7d:c2:b6:ae:f5:01:67:bc:e4:07:8b:83:b2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90730d0d37aecb51ca5e735018a2e67cd407fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:94:de:ee:59:4b:0e:1c:5f:84:24:1a:7a:
a2:73:d5:18:f7:1a:9c:8c:54:43:54:ca:fd:5f:1b:
49:af:58:d1:d6:fa:e9:80:cf:bc:67:c1:7f:2d:71:
c7:d1:42:b5:48:7e:79:71:99:20:f0:6d:94:17:ad:
e0:19:8a:26:5a:50:01:c9:5d:ab:81:1a:f5:99:55:
4a:98:f7:10:6a:2e:46:9c:dd:07:4e:bc:31:29:e4:
65:62:92:f7:de:87:6a:35:a5:4f:bd:e5:e7:89:d2:
4f:06:ff:26:53:8b:7b:b7:41:cd:a7:4c:37:7e:6d:
aa:f4:d7:ca:48:26:3a:67:f8:fe:8b:54:21:2a:f7:
14:a0:dd:72:fd:eb:1a:0b:b4:5c:ac:12:e7:32:7b:
8f:d9:89:86:2b:37:4b:dd:fa:71:f2:a2:49:29:c4:
41:11:2c:e4:62:e1:a8:03:3f:13:54:49:48:98:22:
0e:45:3e:97:64:67:7d:50:ae:bc:f8:6c:27:b5:74:
b5:5b:0c:66:b0:7f:c3:d9:55:6f:43:b0:f2:0c:16:
34:ee:fb:3e:7b:b5:b5:9d:28:71:b0:06:62:c8:78:
4f:c0:e6:b5:9a:1e:63:89:74:f8:d1:43:3e:b9:6b:
14:3e:7c:9b:56:22:57:39:c9:8a:dd:73:43:01:2c:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:0D:0D:37:AE:CB:51:CA:5E:73:50:18:A2:E6:7C:D4:07:FB:73
X509v3 Authority Key Identifier:
keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/kHMNDTeuy1HKXnNQGKLmfNQH-3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.48.0/23
86.36.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f7:39:f6:05:de:fb:33:30:b0:f5:47:54:ad:c3:d6:62:74:
f1:f5:25:0d:8c:c2:f9:dd:81:1e:06:f3:0b:eb:52:22:3c:76:
02:80:13:c5:47:ca:b4:4c:11:28:c1:df:4f:5a:5c:c9:cc:24:
f0:59:19:d7:e8:d0:1c:a2:bb:dc:4e:19:25:70:91:45:6d:7e:
06:98:2a:14:a9:79:97:50:6c:69:d0:2f:6e:3c:48:0e:12:e1:
ab:9d:95:62:f8:12:21:8f:7c:96:ad:fb:22:b9:51:0d:08:a0:
d1:c6:44:05:74:84:af:53:19:7c:45:41:93:dd:12:dc:18:64:
44:af:fa:3e:57:91:e1:a1:1e:cf:2f:eb:73:1b:46:2a:95:6d:
3d:9c:53:67:f1:7e:eb:f3:82:91:82:58:85:a3:89:a7:1b:c3:
c3:4c:3a:92:f7:d1:02:66:34:83:43:64:03:2d:77:7f:ec:45:
d4:a9:fc:58:91:58:d7:6b:58:65:71:e6:1d:09:59:cc:72:07:
45:9a:e7:73:b5:89:d1:c3:1b:63:45:ba:08:72:2e:f5:65:e7:
bc:3e:64:eb:b0:b5:98:b9:81:99:20:31:67:30:cb:3b:63:0f:
e7:cc:a8:9e:0f:66:64:88:86:94:be:08:9a:40:b6:87:00:87:
21:d2:f0:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAX3Ctq71AWe85AeLg7JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1
ZDJkZGYwHhcNMjQwMTAyMDIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDczMGQwZDM3YWVjYjUxY2E1ZTczNTAxOGEyZTY3Y2Q0MDdmYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6aU3u5ZSw4cX4QkGnqic9UY9xqc
jFRDVMr9XxtJr1jR1vrpgM+8Z8F/LXHH0UK1SH55cZkg8G2UF63gGYomWlAByV2r
gRr1mVVKmPcQai5GnN0HTrwxKeRlYpL33odqNaVPveXnidJPBv8mU4t7t0HNp0w3
fm2q9NfKSCY6Z/j+i1QhKvcUoN1y/esaC7RcrBLnMnuP2YmGKzdL3fpx8qJJKcRB
ESzkYuGoAz8TVElImCIORT6XZGd9UK68+GwntXS1WwxmsH/D2VVvQ7DyDBY07vs+
e7W1nShxsAZiyHhPwOa1mh5jiXT40UM+uWsUPnybViJXOcmK3XNDASxs0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJBzDQ03rstRyl5zUBii5nzUB/tzMB8GA1UdIwQY
MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt
YjE4NGUzZjRiNTBlLzEva0hNTkRUZXV5MUhLWG5OUUdLTG1mTlFILTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl
LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBViQwAwQA
ViRoMA0GCSqGSIb3DQEBCwUAA4IBAQCg9zn2Bd77MzCw9UdUrcPWYnTx9SUNjML5
3YEeBvML61IiPHYCgBPFR8q0TBEowd9PWlzJzCTwWRnX6NAcorvcThklcJFFbX4G
mCoUqXmXUGxp0C9uPEgOEuGrnZVi+BIhj3yWrfsiuVENCKDRxkQFdISvUxl8RUGT
3RLcGGREr/o+V5HhoR7PL+tzG0YqlW09nFNn8X7r84KRgliFo4mnG8PDTDqS99EC
ZjSDQ2QDLXd/7EXUqfxYkVjXa1hlceYdCVnMcgdFmudztYnRwxtjRboIci71Zee8
PmTrsLWYuYGZIDFnMMs7Yw/nzKieD2ZkiIaUvgiaQLaHAIch0vA7
-----END CERTIFICATE-----
Generated at Fri May 3 01:11:14 2024 by rpki-client on console-ams.rpki-client.org