Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3NVNQ6RUSi6wv2Ez2jDp6fnYPQo.roa
File: 3NVNQ6RUSi6wv2Ez2jDp6fnYPQo.roa (raw, json)
Hash identifier: 6t5ui46Nmqa4MCiRn7KZ8Vilc+i5etIi+ikigHhHFV8=
Subject key identifier: DC:D5:4D:43:A4:54:4A:2E:B0:BF:61:33:DA:30:E9:E9:F9:D8:3D:0A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3D31A1AF8FA18CA4FE0AFB339407
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3NVNQ6RUSi6wv2Ez2jDp6fnYPQo.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202969
IP address blocks: 95.47.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3d:31:a1:af:8f:a1:8c:a4:fe:0a:fb:33:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd54d43a4544a2eb0bf6133da30e9e9f9d83d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:85:70:79:3b:c2:06:38:16:df:0b:09:88:
e5:f5:f3:3c:85:b2:a0:6b:07:97:a1:05:e7:d2:bf:
2e:de:bb:46:58:ab:47:b3:ef:5f:6a:78:0d:5e:b9:
2b:d9:f2:07:6a:51:74:ef:b2:eb:07:57:6f:cd:a7:
42:c4:ef:1e:54:d5:c6:3c:19:b6:bd:90:97:45:71:
fe:1c:4c:dd:44:22:44:f5:c8:e2:cc:00:e7:e4:18:
8a:d7:77:03:00:a6:e8:9a:fb:5e:e4:9b:db:fd:c2:
65:b7:ff:07:1d:cb:00:45:bb:b2:ef:3b:3b:4a:fe:
61:b5:bc:49:5c:af:62:d3:a8:e6:05:58:f1:8b:6c:
78:51:98:43:4f:93:e1:70:bb:44:eb:20:41:67:4b:
96:90:53:b3:c1:fc:8b:73:e5:11:89:7f:98:fe:1f:
d8:3e:ce:4a:63:b4:f8:fe:ec:09:95:09:dc:46:22:
87:c7:46:37:30:ce:ae:08:ca:ee:e0:54:b2:cd:3e:
74:32:fb:07:06:2f:9b:0b:34:44:fa:02:a3:8d:26:
a9:4a:b3:b1:00:85:cd:69:64:ac:0a:7b:c4:1a:d2:
06:16:76:81:23:d8:ee:ee:2f:85:5c:cf:9c:22:1d:
8b:5d:37:23:d0:fa:28:59:fb:10:fd:94:72:2c:84:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D5:4D:43:A4:54:4A:2E:B0:BF:61:33:DA:30:E9:E9:F9:D8:3D:0A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3NVNQ6RUSi6wv2Ez2jDp6fnYPQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:13:17:b1:82:7f:04:87:cc:04:c8:8c:19:d1:b0:ea:de:5a:
9a:8d:ae:a6:16:04:d6:0b:fd:c7:18:9b:dd:5a:ac:44:57:50:
1b:09:a5:30:a1:38:7a:df:20:08:bd:44:c0:07:2e:7b:b5:68:
7a:3c:aa:8a:bd:ef:96:5c:39:1b:85:ba:9f:72:2e:2e:f5:21:
45:e3:ff:b9:9c:79:12:64:2e:3e:56:d3:a4:9a:08:39:e8:92:
a6:d6:51:ff:e4:85:a2:ef:96:59:cb:42:98:b9:95:83:48:09:
fd:5a:ba:8d:65:17:5d:5b:c6:c4:31:c5:c2:85:bf:72:c5:b6:
45:9d:67:2d:78:06:d6:47:0a:df:2e:d3:48:6b:56:50:99:5f:
e1:5e:59:20:dd:83:3e:19:b4:ee:c0:ce:e8:e5:fb:03:ce:0e:
3c:3a:61:09:7d:33:96:b2:0e:ba:8e:26:fe:91:89:91:ef:48:
cb:10:30:aa:0e:ee:eb:ee:ba:19:86:69:cc:b9:93:53:a2:03:
24:63:8e:46:47:bd:24:77:59:56:26:58:ba:c9:87:6d:fc:9e:
4f:4a:52:46:1d:7d:1d:0a:7e:75:33:7c:9d:a0:d2:fc:65:4d:
79:57:36:a9:35:ec:51:73:46:5e:cc:34:18:3a:f4:f0:b3:78:
98:2f:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org