Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/3SNIpNmJWQv6ffsgR_GBz_x7ems.roa
File: 3SNIpNmJWQv6ffsgR_GBz_x7ems.roa (raw, json)
Hash identifier: lDbBc39YuUVAuBKgBux7oBldLWUUleHh5Ut2woZWA+w=
Subject key identifier: DD:23:48:A4:D9:89:59:0B:FA:7D:FB:20:47:F1:81:CF:FC:7B:7A:6B
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 018CC8DF88301CFFF5D20AE0AF26D6F88375
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/3SNIpNmJWQv6ffsgR_GBz_x7ems.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 212.118.58.0/23 maxlen: 23
45.14.196.0/22 maxlen: 22
95.178.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:88:30:1c:ff:f5:d2:0a:e0:af:26:d6:f8:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd2348a4d989590bfa7dfb2047f181cffc7b7a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:5a:30:17:71:cf:57:a8:3c:b7:27:a6:47:
0d:e1:c3:68:d8:c1:62:bb:3f:10:4f:b6:12:3b:df:
68:ab:93:08:fa:cc:94:30:90:8f:6c:be:eb:62:f1:
a8:2b:1a:d0:ff:aa:c6:ee:62:d1:28:d3:9e:c6:6b:
41:bf:20:b8:0c:d8:78:6f:2a:ba:40:11:c2:6b:7d:
d5:e3:97:1e:78:ff:71:36:f1:3b:ac:fd:f6:f4:88:
d7:a8:ae:e8:95:30:63:db:e6:bc:c2:c8:0c:82:77:
9b:11:83:d9:9e:5c:96:b9:fb:ce:59:c0:f0:eb:bb:
64:73:e1:63:2a:c2:1a:a1:3c:b7:90:4a:7b:8e:52:
8e:8f:80:71:37:8b:a1:24:62:69:3e:df:5b:c4:dc:
9e:2d:8e:7e:db:30:a7:93:f1:21:49:b6:0b:3f:1c:
74:0c:4b:af:64:43:fe:c9:c5:ae:93:96:45:db:60:
b8:dc:ab:ac:c9:31:60:60:1a:a3:a7:3d:83:e7:47:
8c:e8:cf:43:40:c2:52:1c:94:9b:b9:72:66:f6:96:
ca:c2:c9:2a:d6:1f:aa:a4:f1:37:00:6d:6a:f8:ac:
68:1b:79:37:7b:13:40:8a:67:6a:8c:e8:ec:f7:e9:
c7:d6:07:f3:48:9f:65:bb:14:17:6c:e5:da:be:98:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:48:A4:D9:89:59:0B:FA:7D:FB:20:47:F1:81:CF:FC:7B:7A:6B
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/3SNIpNmJWQv6ffsgR_GBz_x7ems.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.196.0/22
95.178.37.0/24
212.118.58.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:0e:f0:c3:03:61:22:ca:69:da:c8:d6:c2:0c:0d:1d:2c:b4:
e6:de:e3:82:33:14:c6:33:e1:d0:3e:cf:60:a3:45:5d:dd:fc:
d0:1d:f4:50:fe:4d:06:87:b5:7b:61:08:bc:cb:32:cd:15:9c:
bb:ad:98:fa:cd:db:56:2a:1b:30:ad:a6:ae:9a:08:b1:74:1c:
d4:5e:a6:d0:d1:06:4c:a7:ab:d3:7b:9e:ae:50:e9:db:c7:44:
35:7d:d4:eb:7b:18:04:be:ad:d9:47:f3:87:d3:ee:c9:06:4e:
ad:78:1c:f8:0f:93:5d:4f:9a:4c:bc:3a:e4:ca:19:33:90:77:
ad:a3:14:be:f7:51:4c:5e:48:b7:f2:f2:86:bd:16:bc:9a:00:
56:01:7c:df:69:5e:1f:fa:a5:c3:b4:6a:c4:6f:fe:3a:2c:5f:
7a:86:3a:dc:2e:4c:84:ac:51:25:47:61:be:cb:d5:74:38:4a:
b6:48:8d:96:b1:2b:2f:77:fd:c6:2e:9d:65:94:b7:60:09:35:
68:54:01:f2:f6:a7:1d:58:32:b1:5b:71:cb:a3:14:35:3c:f0:
1f:cc:cc:29:d5:d3:64:51:d6:53:1c:11:d3:a5:5c:1c:2e:b5:
53:45:f2:bc:79:ca:56:44:c0:db:f8:55:2b:33:81:9f:1a:c9:
85:4d:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:53 2024 by rpki-client on console-ams.rpki-client.org