Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/ToAMP3_Eyj77Bz5c7Nm9oPDNScM.roa
File: ToAMP3_Eyj77Bz5c7Nm9oPDNScM.roa (raw, json)
Hash identifier: Yj8uqLvpntYg5NJApsipokZstmWWQWDi80d1EvOFKxk=
Subject key identifier: 4E:80:0C:3F:7F:C4:CA:3E:FB:07:3E:5C:EC:D9:BD:A0:F0:CD:49:C3
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 018CC3B6DA8C451B57BFD8AD78C56DC298A2
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/ToAMP3_Eyj77Bz5c7Nm9oPDNScM.roa
Signing time: Mon 01 Jan 2024 06:29:49 +0000
ROA not before: Mon 01 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199996
IP address blocks: 185.35.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:da:8c:45:1b:57:bf:d8:ad:78:c5:6d:c2:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e800c3f7fc4ca3efb073e5cecd9bda0f0cd49c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:11:3b:10:18:26:cd:7b:d7:62:bc:cf:f1:
30:d9:3e:40:06:88:13:94:95:d4:81:20:de:c5:7a:
ee:e1:7e:33:9a:6b:e8:8f:40:b5:55:e1:95:fc:d7:
ca:c1:c7:a6:26:e4:56:16:b9:b3:3f:b6:56:19:6a:
12:b3:b8:6b:bb:18:46:ad:77:15:59:3e:ca:6f:c3:
cc:76:c4:03:de:d4:a0:23:41:1e:48:a9:dd:38:5c:
68:be:bb:19:d9:dd:45:9b:0b:2d:fc:35:1f:e3:98:
75:73:03:16:ee:13:b4:58:23:20:b6:98:10:e2:e1:
d6:70:62:f8:4b:66:5c:dc:8c:7d:42:ec:e9:20:69:
86:6c:4d:49:24:73:39:2b:87:66:bc:91:86:59:c3:
47:5d:8a:6d:18:e8:b7:f4:6b:8a:6e:c7:6c:3a:d8:
4e:71:54:ba:2c:8a:66:3b:09:88:03:4d:1d:fb:76:
1e:fa:7a:9f:0a:08:a8:eb:15:0f:44:be:a8:60:00:
a5:9b:f1:c6:69:e3:8d:88:65:39:8c:64:ff:6a:a6:
0b:3d:36:ff:18:1b:3f:62:ee:4c:1b:8e:f2:fd:25:
e8:c5:54:e7:77:ff:56:99:39:8b:6b:a0:d7:85:25:
fc:18:93:21:5b:b4:84:1d:9e:63:b5:e7:fa:c3:0a:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:0C:3F:7F:C4:CA:3E:FB:07:3E:5C:EC:D9:BD:A0:F0:CD:49:C3
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/ToAMP3_Eyj77Bz5c7Nm9oPDNScM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:19:e6:07:a5:d4:fa:06:54:22:e5:f6:24:e7:ea:5a:c9:af:
50:0d:8b:20:b2:62:d2:5a:18:a4:70:f2:b2:d0:9f:7f:0b:4a:
5e:af:77:26:bc:a4:66:52:bf:d9:9d:a7:e2:15:31:35:9b:65:
27:eb:c6:96:84:a1:79:61:e9:83:f0:8d:ab:13:76:16:1d:ce:
9d:44:36:87:98:57:4e:73:8b:d3:d8:68:6a:2d:43:88:29:68:
f4:a5:99:1d:67:bc:fb:a6:b4:51:6f:d2:04:90:89:43:4e:70:
f0:08:a5:db:bb:11:87:57:eb:18:9e:c2:5c:c5:50:b5:b0:97:
74:63:87:04:31:ef:aa:b9:13:87:58:c1:62:ba:52:2c:a6:c1:
d9:b0:b6:4d:94:00:eb:06:ba:dd:0c:b0:a3:0e:9a:45:25:53:
06:87:26:d3:e5:eb:e1:e4:6f:fe:62:35:61:23:c0:00:9a:bf:
17:46:b2:6e:58:47:09:c7:4e:a4:42:a5:a3:11:86:25:da:6a:
46:7a:7b:23:70:f9:cd:51:78:da:7b:5a:69:5d:08:8c:4b:41:
5b:3c:02:88:8b:b5:7e:38:49:bc:55:b1:c3:56:96:e8:50:81:
85:a5:8a:17:2e:d7:8b:64:01:9a:e2:44:a5:fe:b9:15:bf:04:
22:d4:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:46:43 2024 by rpki-client on console-fra.rpki-client.org