Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/3IN_KcQkQkawBzjl_3EaxURfiQY.roa
File: 3IN_KcQkQkawBzjl_3EaxURfiQY.roa (raw, json)
Hash identifier: N6q28fuWasCIH8rLZ6SmhhBpiwVXiG9y64ZFap3gqww=
Subject key identifier: DC:83:7F:29:C4:24:42:46:B0:07:38:E5:FF:71:1A:C5:44:5F:89:06
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 018CC794986DB53F72D89AF6EEAB2AA40015
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/3IN_KcQkQkawBzjl_3EaxURfiQY.roa
Signing time: Tue 02 Jan 2024 00:30:53 +0000
ROA not before: Tue 02 Jan 2024 00:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209117
IP address blocks: 46.172.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:98:6d:b5:3f:72:d8:9a:f6:ee:ab:2a:a4:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 2 00:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc837f29c4244246b00738e5ff711ac5445f8906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:c7:64:c1:f7:93:4a:32:87:0e:4e:bf:e7:
f9:fc:36:cf:d0:76:c9:40:73:0b:66:b4:ca:92:f8:
6e:c8:ae:cf:8c:0a:ad:2e:cc:5e:4b:dc:9c:41:45:
5e:44:90:66:16:9a:5e:6c:b6:e6:9e:39:a4:50:f8:
86:55:7b:8e:77:63:ef:86:55:f9:6e:21:1f:3e:0d:
fc:21:84:78:c9:1d:b8:db:45:2f:1e:10:b8:1e:db:
9e:ae:eb:2c:7d:d3:2e:d9:49:88:ba:9e:b5:a8:34:
5c:1b:05:f0:1b:97:f4:7a:0e:b8:c3:57:06:3d:57:
34:f3:17:6a:4e:b6:4b:08:8b:a2:44:fa:86:d0:f2:
f4:a1:84:1b:06:b9:f3:91:e3:54:6e:52:9a:62:44:
44:5c:05:46:fa:f5:8f:c6:b3:50:3a:23:14:ef:32:
a4:4f:1b:7f:a7:88:5e:ed:04:0d:c9:85:73:76:a9:
64:43:27:48:52:4c:d2:d5:9d:61:e8:28:47:0a:51:
fb:07:c4:e5:8c:23:a7:f5:25:87:46:fe:0f:55:dd:
6d:0b:cd:78:fb:02:2e:1a:bc:f5:41:90:86:c2:18:
34:ab:0e:b1:d3:ec:c8:a5:ff:5d:88:a9:da:ab:bb:
f5:1c:b8:64:da:63:36:ad:44:da:01:56:9e:30:cc:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:7F:29:C4:24:42:46:B0:07:38:E5:FF:71:1A:C5:44:5F:89:06
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/3IN_KcQkQkawBzjl_3EaxURfiQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7d:8a:5b:f6:dd:14:ee:a2:cb:4d:b8:e7:4c:87:45:58:a3:
d2:a1:76:3a:92:00:73:a2:1f:d7:f6:d0:69:a1:b0:ab:a5:f2:
5a:ea:49:85:73:91:07:a2:91:4f:3e:70:f2:bd:bb:29:29:50:
51:c0:e2:6c:5e:08:96:28:76:0e:4c:6d:da:53:f4:e5:84:1d:
56:76:a9:f9:82:79:55:ec:50:39:d4:90:4c:dd:a2:32:c7:0f:
8a:fe:3f:43:97:48:22:d7:c9:14:b4:69:8e:1e:46:9d:98:35:
2a:7e:e9:15:50:3a:df:43:c3:a9:64:6a:e6:1c:41:a7:b3:18:
3b:f5:eb:e2:4f:8f:43:78:6e:d1:a3:ed:69:03:46:d3:b1:2c:
c4:cc:ab:22:47:3b:be:30:50:2a:0a:07:e0:ec:a5:0f:91:2c:
98:3f:35:cf:03:5a:88:f4:40:27:f5:04:67:60:68:b6:68:6c:
cd:50:6b:aa:f5:56:5a:fc:a8:4d:02:14:13:10:fc:83:0e:0e:
a8:3c:72:32:56:c9:81:3c:bd:04:8b:e8:92:de:e6:89:72:1c:
9b:19:96:d5:27:0e:fa:eb:c3:0c:9c:1f:82:ad:8d:8f:54:6b:
9a:1e:cf:70:df:7b:ff:99:a4:56:97:6e:7c:aa:7d:da:f3:0a:
a2:9b:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:25:35 2024 by rpki-client on console-fra.rpki-client.org