Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/K3v_sG4nVs50YLh_YWpV9QRcDAY.roa
File: K3v_sG4nVs50YLh_YWpV9QRcDAY.roa (raw, json)
Hash identifier: 1546/ud9atSavt6i3T+a6cTF/3OcICDsehZQCf7GzrI=
Subject key identifier: 2B:7B:FF:B0:6E:27:56:CE:74:60:B8:7F:61:6A:55:F5:04:5C:0C:06
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 018CC6B8880D0209F85A86BB4448ED431534
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/K3v_sG4nVs50YLh_YWpV9QRcDAY.roa
Signing time: Mon 01 Jan 2024 20:30:31 +0000
ROA not before: Mon 01 Jan 2024 20:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.102.76.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:88:0d:02:09:f8:5a:86:bb:44:48:ed:43:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 20:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b7bffb06e2756ce7460b87f616a55f5045c0c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:65:41:24:a3:25:b7:7f:5e:31:82:53:42:
83:6a:dc:73:3d:2a:6a:01:35:53:59:63:f3:01:ae:
29:cf:39:09:dd:4e:c6:09:b3:fb:c4:cc:72:e1:93:
78:e7:08:e9:76:96:f2:08:54:c8:bf:09:4a:79:3e:
e8:81:03:f0:2f:31:95:af:8f:6e:07:ec:f5:d6:d4:
40:75:44:93:9b:1d:42:de:70:6f:06:e1:d0:94:66:
df:fd:b5:d9:b8:68:22:09:1a:39:eb:98:1c:04:4f:
ce:e8:5a:6a:02:e9:11:25:2e:1d:75:1a:13:2c:ee:
42:1a:a2:09:eb:7d:b5:6b:04:65:ca:e5:9d:3b:07:
83:e0:a6:8b:06:fe:2a:49:59:42:7f:6a:5e:cf:01:
b9:de:df:8b:3e:28:35:d9:9e:3e:48:0f:0c:f1:0a:
16:af:f7:0c:ff:25:d1:b2:25:6e:ca:21:7b:96:1f:
c6:3d:af:83:1f:35:36:e7:60:d5:80:36:ad:16:d1:
0d:d1:d2:3b:b1:68:db:af:b1:f5:6f:93:83:00:d5:
a9:a7:88:32:db:cf:bc:27:a6:7a:ea:70:61:8a:c2:
65:4c:ef:21:c8:2f:d6:41:cd:3d:24:c5:1a:bb:5f:
fa:65:f5:92:22:61:af:96:80:65:fb:fa:a2:27:2b:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7B:FF:B0:6E:27:56:CE:74:60:B8:7F:61:6A:55:F5:04:5C:0C:06
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/K3v_sG4nVs50YLh_YWpV9QRcDAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d0:c1:b7:a3:50:3c:79:3f:7c:5a:58:9e:36:59:c2:88:79:
60:6a:76:6b:5d:a0:60:4c:4e:f0:0a:f1:03:96:cd:95:31:c5:
e1:aa:94:f0:87:aa:88:95:8c:34:d9:d8:97:93:0f:67:81:a9:
d6:98:9e:00:b6:1f:63:02:76:65:67:0d:0b:b7:f8:a2:97:7f:
c0:fa:d7:3c:d1:be:8f:34:bf:73:93:81:df:e2:58:b0:dc:0d:
0f:f3:ad:e1:b7:58:20:9f:d0:b2:44:12:29:ee:55:d8:29:fe:
50:91:d6:c9:5e:82:bd:76:ba:a5:39:3b:22:11:39:89:39:73:
85:2c:ff:8c:75:35:6f:59:c3:b5:b5:21:ca:2d:3a:7c:13:8f:
3b:53:70:10:96:7e:b1:83:63:25:21:66:40:37:ab:0e:ff:db:
a4:60:9e:13:b8:cd:8f:c1:d6:b8:52:75:17:21:c2:67:3c:39:
8f:6c:26:9c:31:dc:b4:71:b7:07:85:ad:5e:b1:33:16:57:95:
34:46:4c:c9:30:2a:6f:9a:a2:2f:6c:66:46:04:85:79:6a:59:
da:24:79:a6:44:53:11:50:25:c3:6a:b4:24:cd:48:e9:f4:9c:
55:58:05:70:d2:1e:a4:a4:19:a3:cd:b0:ca:78:6e:21:8e:7e:
07:ce:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:30:59 2024 by rpki-client on console-ams.rpki-client.org