Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/C3I30IS5tZduuGCfHfvZWcmJk3M.roa
File: C3I30IS5tZduuGCfHfvZWcmJk3M.roa (raw, json)
Hash identifier: zkl/ScbsUUInXiLhHE2iQowgWJp8QjueLrs20IUuNUc=
Subject key identifier: 0B:72:37:D0:84:B9:B5:97:6E:B8:60:9F:1D:FB:D9:59:C9:89:93:73
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64AD3BFD6455A0589219EC92C54417D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/C3I30IS5tZduuGCfHfvZWcmJk3M.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29390
IP address blocks: 91.198.133.0/24 maxlen: 24
94.131.0.0/23 maxlen: 24
2a01:d0:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d3:bf:d6:45:5a:05:89:21:9e:c9:2c:54:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b7237d084b9b5976eb8609f1dfbd959c9899373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:8f:3a:bd:56:28:e8:47:e5:09:75:57:6a:
ca:ff:c5:b2:59:07:59:9d:c1:24:be:5c:ad:96:e5:
2d:bb:61:46:9b:fd:aa:a9:b8:f6:a1:8c:58:f6:db:
ed:30:fd:41:8e:68:46:7d:1b:30:a1:3e:c7:82:3d:
fd:1d:12:c6:fa:3c:bd:f2:0d:3a:d0:af:56:88:af:
14:6a:44:f2:4f:be:5d:ab:f9:9d:49:af:04:de:45:
c3:ce:9d:4a:97:32:99:f1:e3:1f:b8:35:5b:36:53:
4a:97:11:31:00:9f:52:1a:e8:a7:06:56:a1:a0:8f:
ee:d3:df:82:cd:73:c1:ed:a9:bc:2c:41:ee:51:ca:
b2:2d:81:a3:c6:d4:9f:81:ff:51:49:37:aa:3e:12:
36:65:b5:e6:dd:b6:1d:5b:c0:6a:78:fd:66:c8:fc:
a7:49:11:4e:6a:76:f8:58:b2:6e:83:9a:ce:4c:24:
ad:71:83:1b:36:7d:2b:b2:b7:20:54:17:c6:5d:46:
1d:6a:4e:67:80:14:e1:66:94:52:c4:39:47:b6:6a:
92:e4:cb:ba:34:8b:7b:7e:d9:9e:96:fd:aa:24:da:
05:a6:d6:d3:02:b0:0b:7d:89:c2:80:34:ee:72:67:
d2:2c:da:8d:a8:06:d7:3d:cc:12:73:ae:08:93:05:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:37:D0:84:B9:B5:97:6E:B8:60:9F:1D:FB:D9:59:C9:89:93:73
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/C3I30IS5tZduuGCfHfvZWcmJk3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.133.0/24
94.131.0.0/23
IPv6:
2a01:d0:3a::/48
Signature Algorithm: sha256WithRSAEncryption
32:5d:0a:d7:88:a4:ef:ed:46:5b:5f:02:d2:86:86:cc:aa:53:
06:3d:15:a8:9c:a8:cf:be:9f:5c:4e:a6:e8:ee:28:6f:9d:de:
5c:9f:07:4f:30:cf:1d:2b:e6:9b:22:33:5e:25:ee:f3:41:05:
70:f1:c5:17:66:ec:6c:34:fd:00:fc:6d:8d:0e:b9:9f:83:78:
f1:70:9e:2c:41:c2:7c:23:92:8a:3d:4a:7d:cc:56:16:37:6d:
3b:fb:f2:f2:a9:76:4c:3d:29:91:09:75:60:ea:0c:83:fe:75:
5c:45:9f:1d:48:23:70:c4:44:77:7b:44:f7:f1:b2:35:7d:d0:
84:30:60:00:d9:7e:2b:9b:cd:d4:b3:f7:25:f6:0f:ed:37:64:
31:bd:5f:46:dc:74:e2:26:a7:55:5b:7d:01:14:58:42:85:a8:
40:4b:b9:41:1c:e0:a9:26:47:27:21:41:dd:c7:d6:e7:67:61:
3e:9e:b2:4d:97:14:75:17:09:00:8f:ec:0a:d8:b1:4b:0d:a8:
9f:88:ea:11:38:4a:94:2c:2a:10:47:d7:ef:93:d5:4b:08:7f:
64:dc:d4:d2:21:c3:3b:f0:ef:fb:e2:2c:f5:61:da:5f:36:28:
25:65:24:2d:36:a1:c3:8c:1d:d2:e7:20:d4:17:0c:46:cf:1d:
7d:3a:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:46 2024 by rpki-client on console-fra.rpki-client.org