Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/3BqZM4gah3db8NGRKCbkmFWPBvw.roa
File: 3BqZM4gah3db8NGRKCbkmFWPBvw.roa (raw, json)
Hash identifier: xy29DSbhqZPVJH7x+frM8UEIKBgwLwoAJAGebUIG/Jw=
Subject key identifier: DC:1A:99:33:88:1A:87:77:5B:F0:D1:91:28:26:E4:98:55:8F:06:FC
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF43BC15ABC3974C2E6B4E6558823
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/3BqZM4gah3db8NGRKCbkmFWPBvw.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199910
IP address blocks: 82.160.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f4:3b:c1:5a:bc:39:74:c2:e6:b4:e6:55:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1a9933881a87775bf0d1912826e498558f06fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:2b:92:34:c2:5c:6e:22:4b:0b:39:ab:1b:
64:49:7c:93:36:ab:25:68:57:c0:99:be:f7:4b:4d:
da:05:76:a7:ff:d3:03:01:7a:f7:aa:c2:e2:b0:93:
97:77:1a:90:35:9f:36:8c:52:8e:3b:8c:b5:84:66:
36:2f:cd:c3:61:cd:c4:9a:41:0f:92:ca:48:fc:b3:
ab:46:ba:65:66:57:6a:37:35:14:89:62:4b:af:87:
89:e8:aa:fe:cb:b0:35:03:c2:e8:3f:24:c7:e5:0b:
3b:5c:ca:52:3a:36:bf:99:03:e1:ae:52:5d:c3:ff:
90:42:20:60:f0:65:6b:0f:64:a4:b6:2a:97:23:9b:
f9:de:71:71:e3:01:21:0e:0d:8f:f2:17:52:3c:18:
9b:97:e4:7f:fd:64:ad:31:16:cc:cc:04:1d:03:59:
53:66:f6:6f:c5:1a:c3:5e:59:af:7d:6f:0d:40:42:
f9:c0:99:bf:2d:fc:00:94:c7:a5:4b:6d:48:a0:f0:
91:d7:56:4d:7d:8b:83:54:76:99:1b:55:07:ba:0f:
e0:af:a7:3b:7c:06:4d:3a:2c:41:9f:c1:7e:13:54:
e1:67:c8:42:ef:67:9b:50:2c:03:db:c1:2b:cd:f8:
3c:9f:d9:36:9a:dd:63:68:b1:26:3c:27:d3:c5:ad:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1A:99:33:88:1A:87:77:5B:F0:D1:91:28:26:E4:98:55:8F:06:FC
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/3BqZM4gah3db8NGRKCbkmFWPBvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0e:38:9a:5f:30:3d:db:d7:85:7c:6e:a6:8e:ec:b4:8c:54:
ee:3b:73:7c:ea:cf:e8:36:74:2d:fe:e7:ed:33:5b:f5:71:ba:
00:40:9e:fd:68:a9:ab:ad:3e:04:85:32:76:28:0d:46:3c:a2:
84:a8:58:39:cc:02:31:12:61:33:40:30:43:ec:bc:19:5c:82:
60:1b:82:4f:0c:12:f4:c4:66:15:9d:fd:0d:c4:58:5e:c4:9e:
17:2f:40:d7:09:fd:86:c9:bb:cd:f5:0d:6d:c4:e4:9c:df:0f:
d7:dd:e4:08:2b:2e:33:c3:ee:bd:5c:bb:34:e6:1c:74:cc:0a:
4f:61:61:3d:a9:b3:7b:04:90:38:4f:74:b1:a2:17:8e:9e:ee:
90:e2:00:e8:e1:2a:cd:fa:32:7d:ce:67:94:41:ac:0f:94:4b:
ee:b1:bc:98:68:4c:b4:06:25:ed:5e:1a:28:22:42:d8:74:a0:
de:4c:02:eb:15:80:07:e4:1c:db:d9:40:0c:77:f7:a1:91:d1:
85:35:8f:bf:91:e7:ac:b8:86:4b:e5:4b:ab:4e:c9:ff:73:1e:
96:85:c2:54:a4:fb:16:e7:63:1d:19:3f:fe:f5:8a:c4:ef:2a:
58:f4:65:22:8a:00:03:68:50:0c:16:a2:7b:0a:99:31:ac:b5:
d9:67:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:09:01 2024 by rpki-client on console-fra.rpki-client.org