Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/jvZ3Dvy-eKjjvIiXdFSETUCrJ1o.roa
File: jvZ3Dvy-eKjjvIiXdFSETUCrJ1o.roa (raw, json)
Hash identifier: qccboirrfGFZgm09LPjoG6PmRjOoIzazGjHxw5+L9M8=
Subject key identifier: 8E:F6:77:0E:FC:BE:78:A8:E3:BC:88:97:74:54:84:4D:40:AB:27:5A
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 018E435B14B29E484C36BA91C45BB1C141B1
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/jvZ3Dvy-eKjjvIiXdFSETUCrJ1o.roa
Signing time: Fri 15 Mar 2024 18:23:46 +0000
ROA not before: Fri 15 Mar 2024 18:23:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:5b:14:b2:9e:48:4c:36:ba:91:c4:5b:b1:c1:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Mar 15 18:23:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ef6770efcbe78a8e3bc88977454844d40ab275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:82:b9:a3:c8:34:50:a6:f0:9d:ca:9d:b5:
70:24:ff:b1:d3:62:06:a1:0a:72:bc:82:1b:04:d4:
9d:c8:bd:8c:05:84:d5:02:5c:aa:9f:a1:9a:f6:ab:
4d:c0:78:e1:78:02:4b:93:b0:41:71:d1:35:0a:3d:
fc:26:39:73:7b:fb:63:8f:bb:3b:04:49:08:c0:cf:
51:7b:ed:6a:38:0d:c3:44:37:df:9d:5a:3f:e3:c9:
77:63:17:bb:4d:01:33:26:6a:2b:93:72:9d:2d:a1:
b0:d3:7e:75:01:74:88:e8:48:29:73:be:46:ce:a2:
fd:f3:01:90:5d:01:0e:94:15:c8:fa:12:c1:2c:3f:
f3:6c:f5:cf:3b:7d:a8:ca:d4:6d:a5:c3:23:d9:1f:
6b:3c:ad:fc:1e:e4:63:1e:42:e9:8d:48:cf:bf:ff:
39:08:60:86:34:ac:ac:99:dc:7a:fd:71:25:0f:b7:
1d:5c:38:35:e9:7c:3f:7a:44:7b:39:3d:ab:7c:0f:
f0:67:40:11:9a:4b:7e:b8:8a:81:25:e5:29:cf:b0:
e0:fc:b8:ed:aa:38:32:79:27:c7:83:8a:98:4a:75:
34:29:56:2a:e8:27:cc:04:7c:4c:57:84:43:ce:03:
38:e2:86:ef:b4:e4:91:64:7d:74:2b:8f:f1:41:12:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:77:0E:FC:BE:78:A8:E3:BC:88:97:74:54:84:4D:40:AB:27:5A
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/jvZ3Dvy-eKjjvIiXdFSETUCrJ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
89:cf:01:d1:29:a1:bd:fe:69:22:d6:5f:62:75:c1:59:fe:9f:
b0:8d:bb:e2:30:50:98:7f:c1:0e:61:39:63:ab:4b:6b:40:52:
64:d1:45:af:25:76:a6:c4:58:c9:49:72:1a:d5:49:04:f7:7b:
ec:a8:1f:e1:7c:1e:64:ec:87:32:8f:37:10:16:9a:8b:ca:50:
aa:02:b5:32:de:ba:de:e9:43:69:ea:97:98:7d:1d:23:a8:55:
09:94:92:74:0c:ef:0a:2e:e6:e7:19:1c:72:a2:9a:b9:78:9c:
e0:73:1e:b7:f7:03:11:41:98:8e:c3:62:97:0b:58:7a:af:1d:
8f:b4:a8:0d:16:33:3f:b2:c0:ba:69:08:1b:bd:d5:7b:55:e5:
dd:95:d7:7b:a1:f8:f9:a7:25:64:94:7d:87:86:0a:28:4e:8f:
6d:91:6b:f9:56:4c:14:f2:43:09:cb:7d:ed:ac:21:6d:24:55:
cf:e4:51:ff:4d:8c:05:e9:7d:bd:e7:d2:eb:d7:0f:0f:02:6f:
57:7f:45:9e:51:80:b1:a9:87:7e:bb:75:f9:f7:cb:48:1a:cb:
d8:2c:6c:fe:65:64:2a:a5:de:a4:55:5c:8a:a4:21:18:f2:b4:
ab:ff:a0:7d:cb:3d:92:cd:a3:fb:c0:d4:cc:da:fc:23:40:47:
83:bc:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:11:20 2024 by rpki-client on console-ams.rpki-client.org