Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3NTnVTuJyT6xRebLF6V_5Aj49nE.roa
File: 3NTnVTuJyT6xRebLF6V_5Aj49nE.roa (raw, json)
Hash identifier: CYMwnuossuJDsh61qjlq/kj845hc4/W8NjdK1/PtBFo=
Subject key identifier: DC:D4:E7:55:3B:89:C9:3E:B1:45:E6:CB:17:A5:7F:E4:08:F8:F6:71
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424FA883F05B30E8D80E7ADD6A478A6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3NTnVTuJyT6xRebLF6V_5Aj49nE.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211863
IP address blocks: 93.190.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fa:88:3f:05:b3:0e:8d:80:e7:ad:d6:a4:78:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd4e7553b89c93eb145e6cb17a57fe408f8f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:0b:33:2d:7f:e0:b4:8c:2e:7d:86:16:f7:
0f:09:ba:0f:48:28:05:ba:6d:b0:5f:b1:32:20:16:
65:7f:c8:78:04:e1:0a:27:54:6b:a1:64:59:9d:8a:
36:06:5b:37:4c:58:fc:59:83:72:1c:db:07:3d:dd:
a0:71:71:2d:12:13:75:cd:28:8d:df:3e:1b:32:ba:
1a:ee:fb:7b:25:93:e4:03:36:11:3d:20:34:b1:d6:
7c:d4:23:85:ce:d8:f5:c6:a9:86:22:cf:18:d3:96:
d1:e3:c5:09:52:78:f0:ea:44:8f:8a:c1:77:f1:62:
f4:cc:c3:72:8a:00:c6:99:b0:01:ba:e7:e1:46:00:
8d:8c:6a:48:5d:8d:20:ab:ac:c3:38:e3:ed:27:c5:
c6:2e:7b:b2:b0:22:92:3d:8c:33:e4:b2:f0:a8:d4:
01:19:3d:2e:5e:1f:3f:94:c1:22:cb:2c:13:cb:9a:
f2:4d:c6:16:2f:10:fc:18:fd:b9:34:e1:28:9f:89:
59:e8:69:1d:22:18:53:cb:f7:89:a4:b8:3e:26:e6:
73:6c:ab:34:3a:04:31:7d:d0:71:02:70:cd:a2:f3:
d8:5d:e2:79:d8:4f:e2:f6:0e:d3:6b:19:e2:af:aa:
c7:64:f3:4b:b9:e6:35:60:0f:c8:6b:60:98:0e:5e:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:E7:55:3B:89:C9:3E:B1:45:E6:CB:17:A5:7F:E4:08:F8:F6:71
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3NTnVTuJyT6xRebLF6V_5Aj49nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.14.0/24
Signature Algorithm: sha256WithRSAEncryption
47:89:18:80:3d:2b:00:3f:7a:92:38:da:07:09:c2:a5:8b:26:
2f:a3:e9:34:5e:56:f1:f5:c8:40:5b:7f:e1:0c:88:1e:f5:62:
aa:ba:5b:fc:b9:61:19:ed:04:e8:ea:9a:ca:e4:52:b9:ff:74:
14:5d:ef:82:07:8d:2a:fe:3b:4c:5f:0a:2b:4e:5b:e8:02:3d:
b2:ff:41:1b:c9:97:1d:5d:c3:67:54:b6:37:4b:20:0e:5e:b9:
a9:bc:40:ef:cc:03:25:93:1c:c0:50:d2:37:fc:e3:fe:14:9f:
44:ac:84:73:62:41:f9:b0:fa:64:38:68:d9:0f:0d:73:18:67:
43:d0:13:71:2d:6e:6d:ea:b2:23:5b:4e:a8:a8:e7:82:20:68:
e7:fc:94:da:4d:4f:84:b6:83:05:8e:c6:05:da:c9:be:f0:0d:
c4:42:39:11:83:a7:98:7e:cc:77:be:90:24:aa:2b:98:71:d1:
65:11:ed:e7:13:b4:87:94:f8:57:b0:f2:fc:10:98:03:38:53:
8e:98:f7:d0:bd:49:2e:b8:0b:3a:e4:f0:4d:8c:79:96:9a:0d:
ae:3f:b1:2e:e2:41:d9:04:66:bc:f2:ed:b7:6d:27:9d:6a:fd:
8d:bd:22:43:d9:ec:1c:ba:43:7b:b9:3a:5f:05:6d:6c:e0:b2:
ff:23:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:43:15 2024 by rpki-client on console-fra.rpki-client.org