Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/3PeNvJr0ob3MPEtjKCXb_FhZVCQ.roa
File: 3PeNvJr0ob3MPEtjKCXb_FhZVCQ.roa (raw, json)
Hash identifier: WwuP46Ayjn7d4nTflr3qs4kdCs/sSUPlYhD8+5lcwjU=
Subject key identifier: DC:F7:8D:BC:9A:F4:A1:BD:CC:3C:4B:63:28:25:DB:FC:58:59:54:24
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018E32107D966C0B3F782E161349259BDA0C
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/3PeNvJr0ob3MPEtjKCXb_FhZVCQ.roa
Signing time: Tue 12 Mar 2024 09:48:45 +0000
ROA not before: Tue 12 Mar 2024 09:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.148.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:10:7d:96:6c:0b:3f:78:2e:16:13:49:25:9b:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Mar 12 09:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcf78dbc9af4a1bdcc3c4b632825dbfc58595424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:8b:bf:d1:dd:34:e3:00:34:d6:58:6c:07:
b5:29:3b:36:a8:1a:7b:40:07:df:54:4b:ea:4b:33:
93:16:b9:9c:eb:2c:72:c8:19:8e:24:33:07:c4:be:
2d:75:41:99:3e:c7:04:72:d2:30:99:57:19:64:44:
b9:50:ab:fa:19:5e:cc:52:e7:88:a8:30:b9:65:fd:
a9:00:16:12:b6:7b:d5:4d:5d:72:32:85:7f:19:be:
60:10:48:48:55:d5:ca:49:89:a3:8e:a5:b2:bd:32:
98:d4:69:e7:b3:68:a7:cc:7c:b2:ca:28:c6:d4:ea:
fe:be:41:66:61:06:ac:cf:3e:26:a8:14:21:c9:6d:
17:c0:4d:18:6b:ae:64:57:b7:1b:52:88:56:ac:3c:
09:6e:aa:c0:7c:7b:1c:79:93:ac:51:4e:3b:a1:17:
1f:4d:29:96:1b:9a:e0:8e:3b:40:a9:6a:de:40:2a:
b4:30:9a:bd:21:96:f6:e2:d9:c5:2b:f9:d3:5b:d9:
16:66:1e:b3:25:bb:93:28:d8:b6:10:35:da:ff:8d:
f8:e8:32:1b:45:53:b6:99:03:f9:77:0b:b9:b7:c5:
b1:78:b1:90:46:a6:86:54:17:73:f4:cc:3e:5b:c6:
e2:43:3f:1f:6c:e8:c6:c7:e4:b8:7b:d2:3c:11:f1:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:8D:BC:9A:F4:A1:BD:CC:3C:4B:63:28:25:DB:FC:58:59:54:24
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/3PeNvJr0ob3MPEtjKCXb_FhZVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dc:3b:57:56:83:74:07:d1:f5:9b:f1:23:e6:f4:1b:f4:25:
10:e9:33:28:81:33:0f:e5:53:64:17:b5:09:a5:94:91:e6:3d:
be:37:23:c3:8c:04:7a:ba:c3:0c:5a:97:26:a3:4c:8d:a3:54:
cd:29:81:bf:c7:2d:b2:b0:04:95:61:c9:b1:64:93:72:ae:78:
d6:24:38:0c:30:a3:24:4d:e2:18:d6:f2:a0:1d:ff:18:53:24:
0d:cb:d8:89:4b:1a:11:35:ab:0c:e3:d4:27:30:ff:54:8b:58:
bc:af:c2:5c:28:c3:9e:de:97:54:3e:0a:c2:7b:f9:70:c3:79:
42:47:2f:e4:c9:5c:26:67:a0:de:cb:a2:a8:68:a5:62:aa:f8:
0c:ab:41:fc:51:49:05:51:a9:8a:86:81:11:52:4d:e0:6f:6a:
12:ec:72:d2:c4:51:6f:8a:ea:7a:e3:c3:0b:be:58:e7:c7:e7:
7b:30:1f:ec:53:ab:0d:9a:aa:a1:27:ca:f9:be:74:01:09:52:
64:5d:64:f9:26:e2:75:bd:c6:2b:dd:e4:a0:a1:cd:fa:fa:71:
68:fe:d6:48:77:54:96:61:3e:65:15:f7:f6:5e:57:07:b2:4e:
a8:be:6f:b7:fc:77:d1:e2:2d:91:4b:b2:05:94:6f:0d:69:9d:
70:09:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:50:34 2024 by rpki-client on console-fra.rpki-client.org