Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3Ie9vumGOoxKlOcFwIw_m8my3Zo.roa
File: 3Ie9vumGOoxKlOcFwIw_m8my3Zo.roa (raw, json)
Hash identifier: Q6tEBsZi9oFdahg2X8A5P+UjTprMZFCiNAjvo+v3xuM=
Subject key identifier: DC:87:BD:BE:E9:86:3A:8C:4A:94:E7:05:C0:8C:3F:9B:C9:B2:DD:9A
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018E9B61DACF86538172A955F82EB6973070
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3Ie9vumGOoxKlOcFwIw_m8my3Zo.roa
Signing time: Mon 01 Apr 2024 20:37:45 +0000
ROA not before: Mon 01 Apr 2024 20:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47690
IP address blocks: 45.10.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:61:da:cf:86:53:81:72:a9:55:f8:2e:b6:97:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Apr 1 20:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc87bdbee9863a8c4a94e705c08c3f9bc9b2dd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:3d:cc:fe:47:01:40:19:73:8a:fb:83:b1:
f5:14:09:82:fc:91:f2:cd:fa:f1:af:fe:d1:c2:34:
a1:6b:0d:21:ab:94:86:64:7e:a3:9c:d6:3c:2f:5d:
48:f1:f0:85:57:5b:d4:98:0c:1b:cb:82:7d:d2:ba:
f7:51:24:f5:8e:e9:99:d5:8d:8e:31:c1:0a:8b:b3:
99:e6:d5:ea:b8:b0:66:3f:b0:ad:4f:18:9d:43:a1:
42:1b:0d:71:db:5a:71:98:23:bb:3a:42:ec:7b:ea:
e5:62:62:79:c9:c1:3e:ef:a9:69:6c:cc:b9:0f:33:
a0:c6:4e:d7:be:43:d7:c8:f2:0f:ea:8a:04:64:1d:
9e:34:12:61:fd:8b:95:3e:68:1d:5b:b4:52:f1:1e:
48:fd:2b:cc:6a:0a:3e:e5:6e:9a:18:4a:ff:4d:57:
c4:42:ff:1f:9e:a9:9c:05:32:9f:99:c7:59:60:b4:
8a:2b:16:63:07:1f:a5:de:04:6f:46:43:ed:5d:a6:
40:e6:fe:d7:b3:c5:1e:1b:02:de:04:f6:e5:e1:25:
ef:ea:3f:95:27:29:8f:be:37:cd:32:a4:a8:90:35:
c8:98:26:bf:a4:a7:1b:26:47:65:a6:f1:4a:e0:cf:
c2:0f:e8:a5:a5:c1:25:fa:04:28:6f:6f:f7:3a:eb:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:BD:BE:E9:86:3A:8C:4A:94:E7:05:C0:8C:3F:9B:C9:B2:DD:9A
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/3Ie9vumGOoxKlOcFwIw_m8my3Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.19.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5b:8e:24:3c:96:41:95:8f:fe:9c:e3:e7:49:f2:f0:62:80:
e2:2d:21:89:ef:51:fe:c3:ce:8e:c2:f9:dd:1e:ab:9f:5f:10:
0a:18:c1:96:e5:db:be:7f:12:64:29:a4:94:a1:ce:bd:e7:cc:
9a:19:f0:68:9e:78:5a:8e:57:da:18:81:2a:fb:e7:e4:c4:30:
ce:e8:4b:bc:2e:aa:c8:bf:35:6a:11:cf:a5:59:cb:f7:e8:50:
36:e5:b8:63:1e:bd:54:14:67:a0:5a:5f:7d:13:13:fb:b1:95:
29:85:e5:ae:a1:14:a4:3d:03:d2:99:6d:cb:50:bb:8b:e6:9d:
4e:3f:9e:03:c0:fd:29:a1:d6:cd:25:52:78:08:fc:6e:a6:e0:
21:c1:8c:fd:b0:ef:fd:18:5b:aa:bc:e8:9d:dc:02:9e:e0:66:
78:2d:43:fa:70:93:f4:4c:17:7a:0f:20:62:f3:ec:2d:22:53:
d2:b8:94:e4:78:c1:78:6c:55:34:bf:d2:0d:d1:cd:5c:96:33:
4e:f4:ec:3e:85:43:fd:7b:b4:09:a6:57:97:a2:f0:e2:a0:5f:
ff:dd:ab:84:72:5a:cd:b8:6d:28:0a:97:67:09:11:b1:fb:a0:
3f:ab:0b:bd:1a:01:47:d8:02:a3:b7:7d:65:d0:ce:a1:2a:f2:
92:5b:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:56:42 2024 by rpki-client on console-fra.rpki-client.org