Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/3SIyQN2PhXStkfHwqfm7cSTMWl0.roa
File: 3SIyQN2PhXStkfHwqfm7cSTMWl0.roa (raw, json)
Hash identifier: HoCUpsrv0ENh9DeBKOofK5D8MwRnWF6ywOA8/FtEBFI=
Subject key identifier: DD:22:32:40:DD:8F:85:74:AD:91:F1:F0:A9:F9:BB:71:24:CC:5A:5D
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BC9DB51D6378E382DE034F1533A495
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/3SIyQN2PhXStkfHwqfm7cSTMWl0.roa
Signing time: Tue 02 Jan 2024 10:33:50 +0000
ROA not before: Tue 02 Jan 2024 10:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1101
IP address blocks: 145.208.0.0/13 maxlen: 13
145.220.0.0/16 maxlen: 16
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.216.0.0/15 maxlen: 15
145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
2001:67c:6ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9d:b5:1d:63:78:e3:82:de:03:4f:15:33:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd223240dd8f8574ad91f1f0a9f9bb7124cc5a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:ee:52:64:0f:1e:93:10:8c:d5:8f:fb:35:
ca:47:2e:48:2a:ec:6e:05:bd:a0:f6:de:dd:4a:18:
54:6e:19:af:c4:69:37:36:4a:25:4a:61:04:4d:b3:
3f:ad:e0:42:3e:7d:5a:33:2f:5d:f6:a0:b5:2c:17:
52:0b:fc:ae:6c:0b:d5:28:fe:54:38:a6:0d:04:4f:
fa:d9:c9:c7:e4:b0:d4:6d:6e:f0:f5:0f:83:96:22:
4d:ef:3e:03:b9:2d:37:10:82:08:81:a1:7e:9a:eb:
99:e2:bf:05:ae:b4:43:2e:61:52:02:37:e8:e8:00:
35:27:b7:94:b7:b7:0e:95:b4:33:c1:33:67:24:84:
d8:23:22:2c:36:c6:51:be:37:4b:9c:b3:0e:f4:5e:
b7:d1:4c:51:30:60:a9:d7:45:13:f5:fd:2e:1c:bb:
9d:d4:57:74:82:99:fd:7a:f6:89:71:a9:08:43:ea:
06:b4:90:43:82:1c:0a:a5:1b:a2:5d:dd:87:7d:a7:
c4:7e:91:6c:19:33:87:de:42:03:80:dd:76:27:18:
c1:bb:1d:ca:d8:b6:5b:e2:d7:02:2d:93:0f:b8:6c:
b5:30:d9:43:cd:87:e8:d1:b4:fb:85:49:ee:5e:1a:
49:8d:17:a2:c9:16:12:62:96:17:c7:3e:41:e9:97:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:32:40:DD:8F:85:74:AD:91:F1:F0:A9:F9:BB:71:24:CC:5A:5D
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/3SIyQN2PhXStkfHwqfm7cSTMWl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.111.0.0/16
145.192.0.0-145.217.255.255
145.220.0.0/16
IPv6:
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
a4:2e:39:28:50:42:64:26:21:b5:38:af:5b:97:68:c3:f8:2f:
59:67:80:f5:84:8e:5e:e3:42:f3:a1:8f:50:36:39:cd:4e:7b:
25:68:d4:cc:d7:a6:be:53:64:a4:a1:3a:ba:3b:21:7d:73:ef:
35:2c:5f:cc:66:4c:58:ae:20:b4:e7:f1:f3:74:7c:1f:ff:61:
61:8e:2c:e1:a0:1e:5c:ae:61:a8:41:98:d7:ae:64:95:7c:f8:
87:88:db:c1:0d:79:6f:f9:55:9e:1b:16:09:39:27:9c:a6:27:
cf:03:f2:f4:43:04:56:d1:f7:4c:73:2f:c5:17:a7:ea:cc:09:
2a:54:11:01:97:1e:96:85:96:49:3b:8a:c1:21:bb:97:f9:43:
04:5e:de:07:9f:ea:d0:90:12:93:1f:0a:d7:a3:79:b3:54:0f:
6e:89:e2:3c:8d:7a:54:2f:88:2e:8e:48:df:03:1a:e5:1c:8e:
27:42:55:29:53:eb:d2:2c:93:ce:b3:35:5a:b8:20:13:2d:6b:
d4:f5:c1:f4:03:86:b4:19:ce:1a:80:b1:15:39:07:06:92:1e:
44:7f:6c:5d:90:60:ab:06:6b:83:c6:24:dd:aa:82:39:62:0e:
69:de:e3:71:bb:8a:f7:43:9d:55:40:c7:7f:d6:97:02:cf:a1:
78:35:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:53 2024 by rpki-client on console-ams.rpki-client.org