Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3L9yhbt_dpmyI7JOplskAgzLvow.roa
File: 3L9yhbt_dpmyI7JOplskAgzLvow.roa (raw, json)
Hash identifier: M8Kjn5l95b3C0nZXAFtpYA1skYNacCmK4Wj5K3LAXns=
Subject key identifier: DC:BF:72:85:BB:7F:76:99:B2:23:B2:4E:A6:5B:24:02:0C:CB:BE:8C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE0DEE9A34BBF19F3AC55166E8946
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3L9yhbt_dpmyI7JOplskAgzLvow.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204412
IP address blocks: 195.136.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e0:de:e9:a3:4b:bf:19:f3:ac:55:16:6e:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcbf7285bb7f7699b223b24ea65b24020ccbbe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:a4:69:ce:cf:e2:7f:b2:40:95:3e:b6:1c:
27:70:fb:7d:c4:78:0f:6e:c7:ca:5c:90:53:15:f9:
c0:0c:e1:8a:b1:e3:8f:bd:28:5c:d5:c6:87:d4:55:
dc:c5:50:82:f6:4a:08:74:ae:97:4c:9a:44:db:d9:
17:1f:f9:a2:a5:9b:d9:37:53:d9:c1:f4:46:04:11:
bf:68:af:fe:09:97:f0:4e:26:b4:68:a9:30:76:ef:
a5:42:67:19:84:5b:0e:5a:2a:e6:f1:5e:b6:6f:a6:
04:00:3c:aa:25:bf:12:7d:2f:0e:84:1d:46:6e:85:
de:4c:3f:5c:d1:b6:7f:37:4a:e6:41:a7:18:b5:a6:
08:64:29:08:41:ff:36:fb:51:8f:09:71:3f:86:30:
45:e4:df:5d:a9:98:74:0a:d4:b9:4d:b8:81:78:1a:
2e:c9:11:62:53:3e:69:c9:e7:23:ca:7c:96:28:fc:
11:31:fa:3e:cd:ac:69:c0:a1:9a:22:a4:9f:12:4a:
79:e9:00:6c:05:fa:a7:23:cc:ba:f6:15:10:21:57:
22:e6:b9:16:2e:af:6e:a4:6f:04:e6:d9:28:9f:a6:
8b:c6:22:bd:25:fc:c3:a0:e8:8f:88:b9:d6:b9:2d:
17:18:09:03:21:be:b5:2d:ad:3c:a1:bd:e2:fe:eb:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:72:85:BB:7F:76:99:B2:23:B2:4E:A6:5B:24:02:0C:CB:BE:8C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3L9yhbt_dpmyI7JOplskAgzLvow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8b:60:1e:14:65:30:e0:68:f9:87:b4:93:3b:5a:fb:cd:76:
8f:3d:33:5f:6a:2b:b1:e6:27:b4:4e:4c:0f:46:66:60:65:cf:
48:e5:29:6e:6b:b2:67:cd:36:74:b7:43:13:92:e4:2f:e7:e6:
cb:72:27:ae:be:d3:2c:2d:21:e4:36:41:23:3c:20:2b:57:1d:
f3:75:0a:0c:d9:64:d4:10:1f:5f:68:45:10:88:70:bf:0c:62:
ba:56:db:71:24:c7:1e:10:f0:4b:1a:91:26:4d:43:dc:02:b0:
f1:4a:4d:6d:39:ec:a3:21:8a:23:5f:92:6c:80:56:7c:5b:b2:
06:b4:9e:d9:29:20:45:f9:01:ad:f4:a0:b1:f9:66:0a:79:bb:
09:31:28:f5:27:80:a6:d2:ef:a2:94:39:c1:31:df:16:e8:f9:
96:ad:8c:9f:98:42:37:d5:b4:b2:60:5e:9b:83:06:ca:1f:72:
b3:df:7c:1b:b3:9e:62:c1:fb:d3:f1:7a:95:37:21:b8:46:2c:
93:47:99:09:b1:4e:3b:89:2f:b2:ea:6b:fc:e0:b6:6a:57:2a:
dd:b5:aa:08:59:35:c8:2a:ff:ac:33:c3:a4:e6:1a:ca:6f:c1:
fe:5d:1c:3f:7e:56:18:9f:d5:69:1d:32:b7:79:2f:41:85:c8:
0a:11:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:44 2024 by rpki-client on console-fra.rpki-client.org