Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3MYrYpLJ3N1jjBlraOn-YKCJp0A.roa
File: 3MYrYpLJ3N1jjBlraOn-YKCJp0A.roa (raw, json)
Hash identifier: 8Tnl/qpeTU37HFhSlrtsg4LBkIrPUd1mv12wCf3Eu14=
Subject key identifier: DC:C6:2B:62:92:C9:DC:DD:63:8C:19:6B:68:E9:FE:60:A0:89:A7:40
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018E47249BC026F7510662C4D23DA4073391
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3MYrYpLJ3N1jjBlraOn-YKCJp0A.roa
Signing time: Sat 16 Mar 2024 12:02:45 +0000
ROA not before: Sat 16 Mar 2024 12:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 160.20.108.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:24:9b:c0:26:f7:51:06:62:c4:d2:3d:a4:07:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 16 12:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc62b6292c9dcdd638c196b68e9fe60a089a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:28:14:5f:1e:4f:a5:82:42:6e:84:1f:aa:
24:da:62:e2:b8:0b:59:f6:56:3b:9f:74:69:f9:8f:
a6:f1:2c:4c:42:a9:51:85:23:63:a5:15:26:68:67:
af:5a:cf:8b:c9:46:ca:32:f2:b6:54:76:92:8f:8f:
f3:25:81:49:02:bc:35:a4:f3:11:fa:52:80:dd:e3:
29:cd:b2:67:10:30:82:83:7b:15:09:36:7e:72:8f:
96:92:74:ca:a2:97:bb:f4:8b:24:9c:4e:c8:23:4c:
aa:f2:c2:7f:d2:18:78:d0:3a:54:f1:93:f3:99:10:
a6:13:94:04:53:bd:49:0f:ac:55:68:a7:1d:51:ec:
0e:cd:70:fc:6c:48:22:7a:6c:81:80:3f:79:09:14:
27:c1:a7:02:c0:2c:32:ca:f6:63:bc:27:fb:49:0b:
93:60:37:1e:05:4f:bf:3a:4b:eb:07:78:c7:cb:0b:
8c:15:48:de:24:ef:e7:32:2a:db:4d:1f:de:bd:19:
1d:9e:d1:4c:29:d1:12:06:0c:96:3f:d7:98:f3:f5:
02:a9:43:78:b2:41:d0:95:c6:58:e1:6c:ad:fa:f5:
c3:8c:85:0b:84:1d:10:f4:f7:08:09:ff:18:7c:23:
5f:0e:5b:48:00:97:63:56:54:7e:52:b1:ca:e9:19:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:2B:62:92:C9:DC:DD:63:8C:19:6B:68:E9:FE:60:A0:89:A7:40
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3MYrYpLJ3N1jjBlraOn-YKCJp0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.108.0/24
193.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
09:19:ce:e4:6a:02:a4:03:82:70:63:e1:2f:63:ee:bc:57:2f:
ea:c5:28:6c:80:1d:a8:7e:e9:5e:43:8b:5b:4d:bb:45:61:7b:
49:da:5a:f8:12:ae:4c:0c:5c:98:69:3d:04:ca:e9:2d:ec:c3:
ab:72:aa:f5:0a:98:8f:5a:20:80:db:62:6e:e8:65:d7:d1:c1:
39:7f:02:09:78:2e:fb:8b:4c:0d:c5:f9:3a:e8:10:0d:88:40:
c7:e8:eb:84:4a:fb:99:3c:70:8b:55:10:5c:98:8f:98:84:15:
41:c9:28:8e:05:ed:d8:c6:76:f0:39:f0:4d:46:e9:e8:ba:4d:
32:22:55:66:a1:e8:5a:f6:44:fb:ac:1a:96:1e:7f:ac:f6:0b:
77:2d:b1:82:a7:2c:36:58:85:21:94:5b:fd:d8:cd:1c:51:9a:
8c:3a:46:24:42:c9:c5:46:b6:38:d6:7c:4c:37:03:20:bf:e7:
40:5a:25:c2:35:3a:b8:3c:e1:80:d1:55:da:53:7b:2a:d7:0c:
85:9c:31:88:fd:bf:1e:b8:30:03:18:f1:51:7a:1d:db:4c:0d:
a3:6f:61:d6:66:d0:2c:69:19:66:28:e3:a8:d9:05:01:81:63:
0f:a1:db:5f:08:c5:62:50:6c:3f:10:e8:fc:d0:f2:96:8a:a3:
2c:5e:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:14:39 2024 by rpki-client on console-fra.rpki-client.org