Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K3IXE0ik24rChsDbpakB3UWLik.roa
File: 3K3IXE0ik24rChsDbpakB3UWLik.roa (raw, json)
Hash identifier: 5FiOYyjGSF83wnIjDdruX4S1rjkj5mlcDS5J/dTXE0c=
Subject key identifier: DC:AD:C8:5C:4D:22:93:6E:2B:0A:1B:03:6E:96:A4:07:75:16:2E:29
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192B079FB16FD1605075E37E1367F44E584
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K3IXE0ik24rChsDbpakB3UWLik.roa
Signing time: Mon 21 Oct 2024 19:07:17 +0000
ROA not before: Mon 21 Oct 2024 19:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
85.204.22.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.45.44.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:79:fb:16:fd:16:05:07:5e:37:e1:36:7f:44:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 21 19:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcadc85c4d22936e2b0a1b036e96a40775162e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:31:43:d7:7b:62:db:3d:d6:a3:ad:47:11:
db:99:bf:08:74:84:1c:9d:fd:51:d5:1f:aa:a5:38:
40:93:50:ba:eb:98:fc:59:57:1c:91:46:f5:90:2c:
28:bf:b2:87:04:ce:60:bf:c1:b4:f9:3d:65:eb:60:
73:58:97:83:55:32:f0:32:ae:27:de:8d:e1:69:ce:
11:ea:a2:2c:7f:94:22:d2:5c:c5:b0:52:23:99:d5:
73:c1:6a:94:3f:0e:51:48:9d:90:49:33:bb:0b:79:
e5:1a:64:b7:b5:81:d9:55:37:8e:83:c4:7c:09:f8:
b2:21:ec:87:b2:b5:cc:c0:d3:5a:6d:9b:70:6e:44:
6f:97:37:f5:2d:6a:e7:86:ab:df:be:c6:32:88:2c:
18:a7:d5:fe:7b:a4:22:50:c1:25:eb:17:c7:b0:7d:
6f:1b:13:03:89:cc:77:4e:3f:2f:44:62:31:81:05:
2c:8f:a7:8e:b9:d6:1f:2f:21:9a:6a:68:6f:89:22:
87:84:29:7c:92:bf:88:70:40:8e:af:4d:5f:e5:54:
12:a7:cc:bf:04:6b:d8:11:b9:95:61:82:13:51:c4:
ad:16:dd:bf:47:3d:49:cb:51:d7:92:9d:ae:a5:1e:
7c:49:1c:ae:b8:56:3d:fb:38:fb:0c:87:eb:42:e7:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AD:C8:5C:4D:22:93:6E:2B:0A:1B:03:6E:96:A4:07:75:16:2E:29
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3K3IXE0ik24rChsDbpakB3UWLik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
85.204.22.0/24
89.34.106.0/24
89.45.44.0/24
93.114.183.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d0:19:c0:34:3b:7e:7d:25:23:59:d4:f3:a9:9a:24:58:01:
e1:3d:45:e0:1c:6f:ed:98:3c:74:6b:b3:2e:11:ea:e2:73:f2:
57:23:ef:b5:ce:ab:a8:fa:29:1e:6d:61:4b:14:34:ad:2e:93:
27:55:d0:e2:d6:c4:9c:6a:db:cb:89:ba:d1:ce:e9:e0:73:8d:
39:b9:65:b4:f1:bb:35:5e:c5:75:82:47:62:98:ff:7e:01:ce:
20:ff:80:23:41:92:e5:c2:6f:b5:b6:5f:90:24:7c:ce:6c:a6:
6c:dd:04:bb:b9:9b:e3:59:ab:82:12:9d:03:4f:79:10:a2:25:
a0:0b:91:86:72:27:77:37:ca:74:13:2d:42:b6:5f:be:67:f9:
c6:be:66:a5:59:2a:88:e9:06:8c:d0:32:8c:16:15:42:d7:f0:
a7:17:cd:82:64:d4:ae:44:6d:46:c3:56:71:77:74:47:a7:cc:
58:20:25:4c:cc:9a:49:0f:38:be:3d:2c:16:d0:f5:36:36:4a:
5f:24:f0:82:54:17:12:2c:c0:2c:ba:ac:77:1e:5e:b1:53:47:
53:7b:81:0e:9f:db:f7:88:b5:4b:e8:e3:08:68:b3:cf:32:4e:
bb:74:c2:b3:13:2c:51:b5:3f:29:0a:40:7a:10:c1:88:03:45:
36:49:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:06:47 2024 by rpki-client on console-ams.rpki-client.org