Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/3eA3nY0jv-ztYNi8BbBwajW78H4.roa
File: 3eA3nY0jv-ztYNi8BbBwajW78H4.roa (raw, json)
Hash identifier: F5NdQwD/OsUL6Yo+9nP5wpdnHQ4RvHC7/sXasAWkuyA=
Subject key identifier: DD:E0:37:9D:8D:23:BF:EC:ED:60:D8:BC:05:B0:70:6A:35:BB:F0:7E
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B6894DB29F6135BB63704D02FF1890
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/3eA3nY0jv-ztYNi8BbBwajW78H4.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61264
IP address blocks: 95.181.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:89:4d:b2:9f:61:35:bb:63:70:4d:02:ff:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde0379d8d23bfeced60d8bc05b0706a35bbf07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:09:00:e4:ef:df:c1:90:57:93:b3:22:14:
e5:de:81:b7:83:f2:f0:4b:c2:f6:e4:f1:dc:c7:e8:
ac:3e:5b:8f:42:3e:8c:1e:5d:d8:39:1a:ee:66:d9:
05:e5:e9:06:3a:4d:9f:fe:5a:d4:12:79:2c:37:2a:
a9:be:15:6c:96:e3:a4:bb:72:78:73:11:9e:63:74:
c7:bd:34:2c:fb:93:f6:ff:db:bc:f6:e5:ae:c0:94:
e5:63:c5:97:9d:a7:e9:56:87:3e:11:d1:16:ed:dc:
5a:6f:53:89:53:57:76:c9:f1:71:6f:16:07:82:04:
3f:aa:b1:1a:d9:3b:3e:5d:43:1b:33:f7:5a:06:90:
c1:22:21:6e:40:54:c6:51:6d:1b:ee:b7:49:d1:60:
e2:8b:c8:10:41:f5:55:03:a0:c8:9d:e0:c0:4e:74:
89:19:40:7e:cf:33:97:91:a1:93:7a:ae:55:58:07:
95:ce:d9:92:b6:98:59:c1:45:73:55:2a:d0:d9:64:
c6:a3:53:1b:49:72:82:e5:fa:8c:69:d0:a4:b7:0e:
95:7c:87:07:14:d8:88:20:6f:d1:35:41:76:86:44:
32:b1:a1:5b:09:88:b4:49:3e:91:2c:b7:33:09:7d:
03:d7:4c:6b:76:0c:7e:4e:1f:1e:53:7c:9f:7a:79:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:37:9D:8D:23:BF:EC:ED:60:D8:BC:05:B0:70:6A:35:BB:F0:7E
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/3eA3nY0jv-ztYNi8BbBwajW78H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:ce:48:13:1c:fc:bf:8b:ae:0d:8f:01:1c:3e:92:00:c7:
b6:75:37:b3:28:d0:e4:f7:72:e8:d3:fc:c8:a1:ea:70:ea:fa:
42:21:f6:da:eb:47:4b:d9:b7:b0:fe:b7:e5:55:23:95:b2:ca:
57:bf:24:92:5e:04:33:d8:fb:69:c5:6d:15:41:63:c2:2f:05:
e4:47:0b:e6:0f:c9:67:c0:e0:b3:ee:5a:b7:03:87:84:ed:3c:
cf:ec:ab:b6:2e:57:10:4b:95:38:19:dc:e3:38:a6:a0:b4:68:
a0:7b:9e:50:68:1e:cf:6c:7a:7a:0d:0b:ea:7c:2a:63:f7:40:
0b:dc:4b:a8:13:bc:db:06:fd:11:0e:fc:37:a5:11:38:ad:ee:
cb:9b:2b:de:39:50:4f:ac:4b:a1:c6:5e:c3:8d:28:ed:12:28:
c3:76:25:9c:57:b4:11:2a:ea:bc:91:ea:d0:ee:c1:c1:fa:df:
14:97:db:eb:3d:7a:c9:10:99:f5:63:83:2f:43:d7:94:f8:90:
1f:c0:06:18:f8:be:c0:5b:63:8c:fa:87:9c:92:e6:d6:e2:a7:
d0:86:71:40:9c:27:8c:fc:a7:a2:3c:9b:ba:5e:0e:23:9f:41:
fe:e7:5d:de:8a:7d:23:88:91:19:30:56:67:74:17:68:36:25:
f5:d6:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:06 2024 by rpki-client on console-fra.rpki-client.org