Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa
File: 3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa (raw, json)
Hash identifier: bJbnsUbFRgJxDXmo7l12k8k1D+ks0bDIFTzJ2GzmqPI=
Subject key identifier: DC:53:C0:61:65:F1:D7:1F:A6:FE:A2:90:27:26:F5:23:53:B1:57:60
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 018E8AAD6BECEB624C9CAED44D0DFA2A89CE
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa
Signing time: Fri 29 Mar 2024 14:46:44 +0000
ROA not before: Fri 29 Mar 2024 14:46:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204229
IP address blocks: 185.191.60.0/23 maxlen: 23
185.191.62.0/23 maxlen: 23
185.241.116.0/23 maxlen: 23
185.241.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:ad:6b:ec:eb:62:4c:9c:ae:d4:4d:0d:fa:2a:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 29 14:46:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc53c06165f1d71fa6fea2902726f52353b15760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:28:9c:b5:59:81:7d:2e:84:7a:0a:79:c8:
df:97:95:c0:81:63:26:c2:b6:50:24:55:46:2c:e6:
3f:e7:2e:44:30:bc:8d:fb:6b:85:ce:75:96:a9:b6:
17:91:64:2c:06:c7:ec:a6:be:22:92:97:74:94:ca:
4d:63:e8:52:56:7f:dd:99:3c:26:45:3b:1b:59:85:
c6:c2:3b:47:27:31:b8:df:a8:e1:e4:ee:83:09:99:
85:f9:4d:44:59:0a:f4:2a:bd:f1:c5:ef:75:ae:4d:
58:96:f8:e6:b5:9c:10:0e:f6:0f:ed:fb:ff:23:89:
a6:10:14:32:22:03:5d:70:9c:5a:ee:d8:d5:73:e6:
a0:6a:7d:d6:6e:93:e1:de:72:9c:96:bd:9c:13:97:
30:3f:92:d8:99:69:6a:e5:da:eb:a6:a6:81:4d:3f:
23:f8:2b:91:ad:75:c6:54:1f:5e:ab:c8:90:49:81:
6a:db:15:bc:95:13:a1:19:fc:d0:76:2e:b6:d0:db:
03:99:2f:f7:72:3f:39:87:86:dc:ac:67:b3:75:9f:
67:5d:20:e7:1b:10:ce:af:06:6c:b0:d7:a8:fc:4b:
0b:c8:b9:23:59:16:a9:a4:f6:d0:2e:e1:f6:f3:0e:
7a:16:fe:86:61:19:7d:e5:9a:20:cb:bb:32:11:bc:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:C0:61:65:F1:D7:1F:A6:FE:A2:90:27:26:F5:23:53:B1:57:60
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.60.0/22
185.241.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:1b:4a:15:de:49:b3:9d:b5:69:ad:2b:01:b5:3a:a3:69:06:
16:b6:74:f9:00:7b:ec:aa:5d:a0:70:64:10:c3:84:f9:21:ac:
a1:34:3c:ba:26:0d:d3:e8:c8:d7:9a:fe:af:6c:b0:8e:1a:10:
a7:29:0a:8f:d1:e5:23:ca:32:1f:80:5e:50:a0:4e:44:eb:1e:
07:63:e3:61:b1:2f:33:fa:16:28:a6:7e:2a:28:93:6b:2a:54:
4a:85:4c:52:f0:fb:1d:73:c9:6c:f4:e3:2a:08:e3:96:bf:0d:
cb:f1:f2:14:c7:26:ad:c8:81:c1:fa:43:86:ec:97:6b:44:b0:
78:e4:3e:4c:f2:1a:24:2b:22:ae:c7:0f:79:63:07:b4:ad:a8:
02:60:44:f0:48:2d:22:1a:02:58:89:4f:9b:f4:24:86:bc:ab:
dc:4d:e2:d1:9c:79:12:60:ea:79:25:2e:26:60:23:ad:6f:15:
bf:ee:72:a1:5e:bb:36:fd:57:38:0d:d1:82:86:f9:fd:72:c3:
c4:cf:8a:6a:ab:ae:c0:74:8f:2d:f1:d4:4d:29:ee:86:8e:db:
13:f9:ba:74:10:67:4e:f2:f0:94:23:c4:3a:64:59:16:56:e4:
77:f8:6e:26:d3:04:cf:d4:0f:73:e2:0f:bd:57:c8:7a:d1:55:
a0:d0:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:08:19 2024 by rpki-client on console-ams.rpki-client.org