Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/3wIIqgyvuAJNMgo1nE0iHW5a0fU.roa
File: 3wIIqgyvuAJNMgo1nE0iHW5a0fU.roa (raw, json)
Hash identifier: y1DF+v4CpOpGWcAa04ZkwrnPUSIwmAv7R5kt1mbNC2o=
Subject key identifier: DF:02:08:AA:0C:AF:B8:02:4D:32:0A:35:9C:4D:22:1D:6E:5A:D1:F5
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 018CCA9A12A58346F40915584E874711D5C0
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/3wIIqgyvuAJNMgo1nE0iHW5a0fU.roa
Signing time: Tue 02 Jan 2024 14:35:44 +0000
ROA not before: Tue 02 Jan 2024 14:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 79.110.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:12:a5:83:46:f4:09:15:58:4e:87:47:11:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jan 2 14:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df0208aa0cafb8024d320a359c4d221d6e5ad1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:b0:60:e2:d6:d7:25:11:fd:ec:57:ba:20:
9e:3f:e0:0f:40:06:e9:3e:62:1b:e7:cc:62:4b:67:
9a:b1:91:63:51:48:44:fc:4b:3b:d9:4a:de:1c:73:
71:31:f7:ab:82:17:bc:f6:9d:32:bc:b6:91:6d:6e:
ce:87:69:1c:43:4d:58:d7:09:da:36:07:cf:4d:1a:
df:c1:17:83:56:f2:6e:21:58:22:5b:08:77:9f:eb:
f7:45:5b:ac:f9:d6:c3:c1:12:52:b9:1e:5e:86:93:
ab:19:ab:10:4c:5b:d6:58:99:a0:da:de:b6:3c:d5:
bf:fa:33:94:69:b8:1d:84:ea:07:af:8e:9f:7e:7b:
18:aa:1f:48:1b:c8:84:57:78:83:52:57:8b:0e:e3:
3b:68:6f:08:23:80:31:b9:e6:8a:b4:0b:51:3e:24:
26:8e:c9:d2:c5:31:ae:9d:7f:5f:7d:8f:d6:2a:63:
31:bd:6a:16:a7:06:dd:48:d7:41:5d:3e:69:ea:55:
f1:a2:0e:24:21:cd:37:6b:6c:e1:82:3b:82:6d:f6:
83:db:ef:5b:cc:14:26:f7:1d:71:ec:ca:2d:51:44:
fa:18:10:a0:e4:a6:df:8c:72:3a:84:37:c3:31:5d:
84:19:f4:a2:5e:76:29:26:b8:76:6f:a3:a3:ca:00:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:08:AA:0C:AF:B8:02:4D:32:0A:35:9C:4D:22:1D:6E:5A:D1:F5
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/3wIIqgyvuAJNMgo1nE0iHW5a0fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6d:d5:08:47:6d:ec:9d:55:88:c6:e6:50:41:f7:4d:82:15:
a4:72:1f:4d:ff:b6:d4:59:bc:ef:45:d4:87:2a:11:14:7c:90:
e2:65:5f:0f:4f:8c:db:5d:3a:cd:d8:8a:01:d8:1a:af:7d:66:
1a:c6:36:e7:b1:39:01:63:5a:a9:6b:d2:2a:7d:23:67:b8:f7:
62:ca:c9:8a:23:90:0e:a1:51:05:bc:66:17:8c:56:c9:6d:96:
84:05:1a:d9:a7:6e:87:c6:f5:4b:1a:71:71:a5:d7:e9:a8:1b:
2c:de:9a:81:ff:91:b7:d6:d9:f2:5a:29:4b:37:35:fb:f2:32:
56:a1:4b:73:0b:7e:d8:66:72:8d:c2:c1:58:62:85:73:48:00:
d8:58:fc:8c:81:77:b6:81:03:5a:2b:7c:b4:1e:25:a3:bd:20:
42:83:76:12:bd:03:07:ab:30:12:0c:96:38:e7:0a:2c:9e:c6:
29:ae:aa:cd:b0:1f:f4:1d:53:47:97:64:95:93:84:cc:a0:38:
5f:48:68:8a:7b:84:10:b8:7c:d1:53:e6:03:3f:08:99:4c:39:
27:37:4c:92:d8:1c:1b:be:0e:17:08:07:86:51:be:68:59:1d:
d3:29:43:10:a8:1a:8c:ca:da:33:a5:cd:10:5c:d7:b2:3d:4e:
f7:26:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:03:12 2024 by rpki-client on console-ams.rpki-client.org