Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa
File: 3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa (raw, json)
Hash identifier: fUnRJYM60g6PJtrxp49q//chlXDwdAfwaPVarO33TPk=
Subject key identifier: DD:71:80:5D:42:9D:C3:A2:90:36:54:07:98:28:C0:42:38:45:A6:E1
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CC8DF3A36F424D606C5E904E84D8753C9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 213.209.130.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3a:36:f4:24:d6:06:c5:e9:04:e8:4d:87:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd71805d429dc3a2903654079828c0423845a6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:1e:f4:c8:be:4b:70:6c:89:1b:13:1c:bf:
ae:a3:f3:55:8d:ca:98:48:fa:c5:25:00:c7:4e:0a:
37:56:ba:5b:bd:13:33:c7:3e:81:db:62:8e:98:b0:
68:ad:58:9b:89:a3:c7:6f:28:14:d7:3a:78:be:e1:
c2:60:e0:04:fe:c8:30:05:3d:7c:5c:82:2a:f4:45:
1a:a7:69:6f:8f:f8:69:01:9c:6e:5a:72:46:86:21:
59:43:25:c6:51:d8:18:c4:92:49:68:1b:07:bc:96:
d8:3d:fa:16:4a:96:71:b3:bb:8a:70:d5:90:06:45:
f8:dc:a5:cf:fe:74:89:3e:a1:e9:c1:9a:9c:92:a8:
14:0f:a8:e6:51:09:17:3a:38:6b:6a:ec:d8:51:f2:
8d:da:d3:16:25:17:4e:17:a0:a1:2d:a8:be:f4:09:
83:4f:a0:42:20:73:f7:aa:35:7e:8d:b0:f5:7b:7d:
57:a6:a5:e8:40:da:92:8a:72:f3:14:0e:e3:ef:1f:
ae:35:9b:d1:ac:41:d7:fd:47:d0:05:b8:34:da:d0:
41:0b:76:5b:50:dd:c8:34:49:4b:30:f9:d6:ce:6f:
61:e9:64:05:c5:8f:2f:54:ce:46:4f:fa:0b:47:bb:
02:4d:2c:1a:17:db:c7:0e:79:f9:ec:e6:0d:4c:fc:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:80:5D:42:9D:C3:A2:90:36:54:07:98:28:C0:42:38:45:A6:E1
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
213.209.130.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ac:c0:e4:72:83:71:ba:a1:51:c2:9f:81:f8:9d:84:a0:37:
0f:d4:3c:8b:84:fc:87:ce:4d:39:70:50:47:fa:03:07:71:00:
21:a7:95:8e:69:cf:02:f5:36:70:9f:1b:25:46:60:38:78:1a:
f7:88:d9:f9:c8:c0:4e:6a:c3:09:a8:cc:57:d5:e9:d4:c1:aa:
c3:c7:b7:b1:97:14:01:bf:1d:dc:4e:d1:3d:8d:4b:ae:96:2a:
a8:c4:7e:a4:c2:da:c9:36:a2:9f:ba:61:a5:dd:c2:07:07:27:
66:dd:62:60:5b:9c:53:e6:7c:69:92:29:4b:0a:7b:79:4c:40:
c1:3c:21:60:d3:a5:b6:c5:c0:d6:92:54:af:91:a9:5e:10:63:
38:89:dd:da:d4:01:9a:a3:35:b5:8c:54:7d:6a:f8:06:f6:61:
a4:92:99:5e:78:4e:d6:75:31:e8:8d:d9:63:46:75:3c:9e:c8:
8d:09:6a:88:52:9f:2b:e3:06:12:2d:d2:55:49:e4:0f:58:03:
9b:ac:b9:d4:86:f8:82:40:5b:a6:37:43:74:03:a1:d7:07:d5:
28:59:22:76:3b:37:7c:10:1f:62:51:3b:a8:a0:e5:00:f7:d0:
da:1f:41:8e:e8:21:2c:81:81:27:ab:0c:11:f6:83:c8:a4:60:
9a:06:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:30:51 2024 by rpki-client on console-fra.rpki-client.org