Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3pN7Etbq0T53rYa8Mi0TfBSRTv8.roa
File: 3pN7Etbq0T53rYa8Mi0TfBSRTv8.roa (raw, json)
Hash identifier: 9plyo06dG1fmcKEIuvGQ6wqN1apTVhDbXmFB2EKKr7s=
Subject key identifier: DE:93:7B:12:D6:EA:D1:3E:77:AD:86:BC:32:2D:13:7C:14:91:4E:FF
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0192A078FF8D320DBCAB4EBF764488132DD9
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3pN7Etbq0T53rYa8Mi0TfBSRTv8.roa
Signing time: Fri 18 Oct 2024 16:32:17 +0000
ROA not before: Fri 18 Oct 2024 16:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19844
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a0:78:ff:8d:32:0d:bc:ab:4e:bf:76:44:88:13:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 18 16:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de937b12d6ead13e77ad86bc322d137c14914eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:7b:7a:64:7c:0d:c2:fa:79:2c:00:c5:f4:
d7:10:c5:74:19:28:3b:1e:9a:b6:3d:be:b8:55:eb:
3b:1f:83:0e:e3:72:95:8a:97:5b:06:7a:0a:8e:cf:
b9:e9:e9:7a:7c:1e:d6:ca:6a:43:06:8a:83:1b:e2:
66:13:19:09:72:5f:2e:08:1e:15:b1:79:9e:87:2e:
96:ce:7e:05:40:e2:7a:01:56:c7:4b:de:8a:be:9c:
27:76:e6:86:f6:18:ed:af:7b:62:6a:52:83:07:a3:
37:bc:96:31:d1:1d:40:31:f2:96:e8:2e:b1:85:4b:
7a:6b:4f:db:25:03:16:e1:b2:6e:f5:e4:52:d3:6f:
bc:4b:e0:c1:52:45:07:28:4e:ee:b5:67:c2:f1:db:
dd:14:5a:19:32:86:02:c8:92:8e:ed:f1:d5:46:4b:
42:39:50:f6:25:7d:a1:39:cc:db:f5:9b:c7:ae:09:
b2:fd:a2:7e:fa:12:b8:07:d3:1d:91:d4:72:c8:b8:
ed:06:7d:c1:fa:67:88:fb:1d:ef:00:bb:ce:cc:13:
4c:7b:c5:4f:54:a1:00:b2:fa:7a:4c:9c:ad:c5:f9:
49:d0:65:26:cd:da:89:dc:e1:ef:b9:20:e9:56:52:
8f:03:eb:db:e3:2b:8b:19:2f:6c:57:83:69:19:b1:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:93:7B:12:D6:EA:D1:3E:77:AD:86:BC:32:2D:13:7C:14:91:4E:FF
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3pN7Etbq0T53rYa8Mi0TfBSRTv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e3:61:d6:f2:b9:6a:9f:f2:fc:b6:9d:1c:20:df:07:04:eb:
5e:22:08:16:c4:3e:ac:d5:1a:09:aa:e7:01:34:ae:f6:cc:eb:
4f:6f:73:7d:1c:a7:e8:eb:7d:40:82:b8:29:b5:4e:29:7e:f1:
de:09:2b:d4:10:71:78:e6:71:8f:bb:fc:62:2e:18:73:53:f9:
37:50:ba:0f:b3:42:7e:98:89:c9:7a:d1:82:6a:4e:f4:fb:59:
5c:68:b7:d1:d0:97:e3:2a:07:63:6c:41:66:ed:4e:d1:9f:c4:
9f:8f:83:a6:14:e0:c9:3b:8f:c3:ed:c7:aa:a1:40:50:98:1f:
b7:5c:77:b4:6c:a0:8c:8e:fb:25:57:00:02:e1:81:fb:78:10:
20:29:e1:6a:57:a7:e1:a7:b7:c9:f0:69:c7:af:f1:c1:4b:8d:
2f:99:4c:0e:39:71:c8:1a:0f:e1:f5:e7:9d:90:33:76:db:7a:
61:22:0f:0b:1a:90:49:05:c6:ac:b4:19:4c:54:fc:5c:07:6b:
a8:95:5d:b5:78:be:28:71:d7:6d:71:d8:92:58:9d:f1:f6:22:
c9:e9:04:ab:37:d1:87:11:66:ee:83:72:a5:3a:4c:ba:21:b9:
d8:e3:83:2b:fe:89:c4:ee:16:a6:53:17:57:40:a3:9d:a1:18:
3f:67:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:58 2024 by rpki-client on console-ams.rpki-client.org