Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/r_Z3MRBLC8wyKuC00hHV52EQN70.roa
File: r_Z3MRBLC8wyKuC00hHV52EQN70.roa (raw, json)
Hash identifier: sy4sT3bDvQ4o4J4l3vNJsjZ26lxVFBZ5u4w9pk9JYfY=
Subject key identifier: AF:F6:77:31:10:4B:0B:CC:32:2A:E0:B4:D2:11:D5:E7:61:10:37:BD
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 018CC7949806645F33A5B09B0E5401ADD06E
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/r_Z3MRBLC8wyKuC00hHV52EQN70.roa
Signing time: Tue 02 Jan 2024 00:30:53 +0000
ROA not before: Tue 02 Jan 2024 00:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208531
IP address blocks: 46.172.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:98:06:64:5f:33:a5:b0:9b:0e:54:01:ad:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 2 00:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aff67731104b0bcc322ae0b4d211d5e7611037bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:26:66:16:3d:d6:8e:db:a9:d3:3b:bd:7c:49:
b5:82:fc:33:3a:20:23:46:fb:5e:9e:91:15:dd:d5:
e9:28:20:91:7c:d5:58:b3:da:bf:a5:a0:dd:20:cd:
0d:7c:c1:63:87:4e:ac:c7:d7:fb:70:2e:5d:65:11:
84:33:2d:28:7e:a4:bb:b0:67:a9:22:71:a7:2a:6f:
34:1a:b0:6f:9c:3d:ed:c1:c9:5c:72:59:d2:e2:eb:
d0:13:0e:ff:79:d2:98:bb:24:01:01:62:c3:4f:22:
9d:43:6c:d4:af:4a:97:0b:8d:cc:2b:36:5f:03:fc:
42:fc:d3:f6:97:22:82:49:2d:68:ce:dd:98:9d:aa:
dc:d7:20:a4:56:0a:cc:02:73:fd:ee:4b:1b:d9:20:
08:22:48:51:cb:a8:a0:bd:4b:1d:82:49:1d:5d:46:
3b:91:44:49:66:12:a8:33:75:03:50:c7:91:a4:63:
43:74:08:50:2d:21:7f:d5:b4:2d:a7:b4:84:f9:3f:
12:0a:2e:98:e0:a7:f7:36:01:ee:df:12:dd:7c:b0:
fb:72:22:de:be:45:a7:b4:1d:f6:2e:9c:17:53:98:
96:d7:9a:39:97:1b:fa:43:e2:e6:22:d6:9f:d6:5d:
6a:d8:e8:13:a9:6d:09:75:a6:72:48:64:9b:33:80:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:77:31:10:4B:0B:CC:32:2A:E0:B4:D2:11:D5:E7:61:10:37:BD
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/r_Z3MRBLC8wyKuC00hHV52EQN70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6a:b2:b0:d4:bb:05:a4:4d:88:18:35:3c:b4:2c:66:61:a5:
51:85:d8:cf:f7:d0:c8:cc:6c:fb:ed:da:6f:84:df:bb:c6:02:
50:58:5f:ff:ff:70:2b:25:f0:63:6e:24:fa:06:d5:4e:d1:a1:
da:6d:ca:e8:7c:55:e1:50:a0:11:e0:ea:14:70:73:86:aa:e4:
ba:57:95:15:46:d9:80:89:18:eb:02:ca:c2:1b:35:5a:ab:a3:
7b:9a:13:cf:62:aa:38:28:99:35:2b:e2:7b:52:75:a5:9e:06:
0c:1a:23:3f:09:5a:60:6e:08:9d:3a:0e:03:e5:b6:57:90:0f:
fe:4b:6d:61:59:21:04:4c:c6:59:39:ff:7d:70:3c:48:b4:a3:
2c:86:55:04:73:2b:f2:96:bf:f1:bb:b7:98:fd:bb:41:75:89:
58:a2:32:30:75:32:4c:22:25:f4:1c:d6:3a:96:64:49:83:a7:
9e:c6:0f:3b:08:8a:15:4f:6f:2e:f8:3d:81:58:3c:cc:d8:7b:
a5:90:48:71:4c:3d:17:b2:e7:73:f5:6f:c2:c8:2e:66:c1:33:
4f:8d:aa:15:2e:72:79:25:52:5f:6f:71:f5:34:a8:be:a9:02:
ab:c7:04:9e:b1:52:d4:9e:44:c9:d3:8b:4f:7e:d9:25:15:51:
bc:b9:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:02:11 2024 by rpki-client on console-ams.rpki-client.org