Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3mCXfxsZ0pNS1ivEzufK299RynU.roa
File: 3mCXfxsZ0pNS1ivEzufK299RynU.roa (raw, json)
Hash identifier: qfYWUYBxUv0GXQXQx7spPf9s0/XRZTrfjvmBv7f40wU=
Subject key identifier: DE:60:97:7F:1B:19:D2:93:52:D6:2B:C4:CE:E7:CA:DB:DF:51:CA:75
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01931884442EB04C1B4DCC7244A52B3C7DDB
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3mCXfxsZ0pNS1ivEzufK299RynU.roa
Signing time: Sun 10 Nov 2024 23:59:01 +0000
ROA not before: Sun 10 Nov 2024 23:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 185.177.78.0/23 maxlen: 24
194.104.4.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:18:84:44:2e:b0:4c:1b:4d:cc:72:44:a5:2b:3c:7d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Nov 10 23:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de60977f1b19d29352d62bc4cee7cadbdf51ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:d4:21:22:9e:d3:99:2a:c6:b3:7f:16:dd:
50:cc:46:36:cd:2f:09:8f:d1:00:fd:81:b1:11:b7:
21:64:7e:0f:53:f4:dc:07:2c:9e:de:0c:90:ce:a3:
45:18:82:12:7d:ed:f8:e3:c2:59:1f:03:01:86:ba:
af:df:63:87:c9:d0:24:e3:d8:d9:c5:e1:c8:eb:13:
2d:16:d6:16:f0:ff:8c:9f:23:dd:89:1d:00:02:4b:
b0:be:ac:22:c4:aa:ae:2d:26:de:fb:64:33:14:e0:
4b:81:6b:10:84:d7:cb:74:34:a3:f3:cb:ca:a0:7c:
2f:7b:55:18:58:04:c9:3f:69:93:e3:c1:a0:d2:91:
4d:05:fb:31:33:0d:6b:90:13:9a:bd:98:74:42:4d:
bc:e1:02:6d:cf:71:e5:cf:7c:15:bf:57:f9:94:a7:
21:96:0a:e8:c4:90:65:0b:e5:80:60:43:a1:20:73:
ea:1c:d7:64:89:3b:8f:53:d9:4d:1e:56:d3:67:11:
ac:b8:1e:f1:7e:b5:4c:44:66:4c:15:71:12:33:fa:
39:3d:00:4b:fa:09:09:4b:6b:6a:95:ab:0c:33:0c:
73:e9:17:2b:51:55:1a:21:a6:ae:87:76:c3:07:70:
3c:d3:09:f3:37:55:6f:11:b4:d9:1a:04:7e:01:3b:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:97:7F:1B:19:D2:93:52:D6:2B:C4:CE:E7:CA:DB:DF:51:CA:75
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3mCXfxsZ0pNS1ivEzufK299RynU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
194.104.4.0/24
212.69.133.0/24
Signature Algorithm: sha256WithRSAEncryption
15:26:14:da:a9:6b:ec:c8:ab:63:43:0d:b4:4c:23:fe:89:44:
32:e2:04:23:d8:2c:21:e2:d8:9a:1f:8e:23:4f:da:2e:21:82:
53:57:53:d7:95:c1:27:64:87:19:0a:1b:28:3f:74:bf:89:e2:
62:2b:76:ef:3a:85:09:ff:8e:47:eb:f4:9b:02:7c:2a:fe:86:
40:8c:c1:18:68:79:42:0a:f8:63:1c:69:56:50:b1:43:9c:c1:
92:53:15:25:88:25:db:47:22:27:9b:5f:56:0f:86:27:d4:ca:
ac:21:58:75:ab:3a:e8:d3:8a:21:9b:f2:57:34:9b:a5:cb:22:
4c:8b:aa:98:77:cf:5a:54:25:d5:12:a1:c4:cd:2d:96:c4:34:
81:24:0d:38:b1:fa:48:98:9f:de:30:de:7d:6b:f1:27:24:5e:
99:a1:92:e6:b1:74:a8:a7:68:8b:15:f1:f5:bf:07:71:3a:1b:
29:f6:3a:72:fa:74:8d:e7:8b:61:4a:f6:c1:7a:96:16:5d:39:
3a:fa:cd:e6:c3:8a:c4:8e:8d:1a:9c:84:12:29:9c:2a:12:80:
ed:9d:64:f4:6c:18:ce:af:f5:44:f1:2a:86:c7:e3:8b:7a:62:
12:c8:32:d2:b4:15:9b:41:60:1a:69:28:85:ce:20:03:30:68:
fa:44:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:17 2024 by rpki-client on console-fra.rpki-client.org