Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/3Xyrp7wKMOKt0HRsejvTVCzh61I.roa
File: 3Xyrp7wKMOKt0HRsejvTVCzh61I.roa (raw, json)
Hash identifier: Vxl5P+4C0ZdUgIPnUJeHQSHPVe6XcawyqFo7xgR4eFY=
Subject key identifier: DD:7C:AB:A7:BC:0A:30:E2:AD:D0:74:6C:7A:3B:D3:54:2C:E1:EB:52
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018CC80153E120BD44A1A7C9B1C2F290137C
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/3Xyrp7wKMOKt0HRsejvTVCzh61I.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10282
IP address blocks: 57.90.0.0/16 maxlen: 32
57.66.0.0/15 maxlen: 32
57.87.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:e1:20:bd:44:a1:a7:c9:b1:c2:f2:90:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd7caba7bc0a30e2add0746c7a3bd3542ce1eb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:74:79:2f:ab:19:04:34:c2:1f:ae:cb:29:
af:eb:b2:8b:33:65:ea:65:b7:53:6f:2b:83:24:a9:
2f:ad:18:23:bc:94:d5:b6:3f:9d:60:d1:a5:47:dd:
bb:b8:70:d2:74:bd:75:f9:a2:38:b9:b2:26:e4:59:
1f:c3:47:6f:00:b0:1f:98:29:ab:a1:d0:02:66:2d:
ac:01:eb:5b:8b:9f:69:74:31:e9:f9:a8:5e:b8:73:
4c:45:18:dd:7d:32:1f:3e:59:ad:47:61:fd:80:04:
89:89:b2:a1:cd:9a:9d:3e:26:ca:fb:2f:e4:e4:d9:
22:60:4c:03:e9:75:cf:56:27:06:58:c5:63:ac:5f:
4f:ea:95:e0:57:d3:01:ee:a2:19:82:ee:b3:5a:9c:
04:93:69:e6:6d:c5:9c:c8:35:72:3f:96:77:2f:7c:
21:34:be:9b:a2:46:a5:f9:80:8b:e2:47:e9:98:b4:
66:39:e9:e4:16:10:a4:7e:2b:74:87:ed:1b:f1:44:
f1:d0:ce:a3:6a:ee:47:a2:dc:b3:6d:09:18:a7:19:
3f:b9:c4:f0:82:ed:12:04:c7:a0:19:7f:3a:4d:d9:
37:df:9d:7a:74:5a:5f:7c:e2:ad:01:4c:aa:b6:ad:
b9:b0:7e:eb:64:fe:b8:3d:29:00:69:f3:11:1e:43:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:AB:A7:BC:0A:30:E2:AD:D0:74:6C:7A:3B:D3:54:2C:E1:EB:52
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/3Xyrp7wKMOKt0HRsejvTVCzh61I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.87.82.0/24
57.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:8b:2a:b1:b4:b6:56:cd:1e:b5:12:f9:51:23:ee:4a:9a:e7:
a5:a6:3e:0d:6d:de:f1:ff:eb:26:27:3f:a5:8c:c5:12:21:cc:
c2:3b:11:8f:44:2c:71:28:c8:41:16:8e:f2:37:00:07:56:28:
d4:90:47:a6:80:05:17:09:a3:99:eb:94:45:c3:1a:84:0e:17:
6d:48:7a:2e:98:6e:d3:6f:03:44:8b:d2:2e:cb:74:ab:ee:86:
9b:78:61:fd:f8:92:b2:fb:fe:58:94:ba:f2:58:e8:2a:21:d2:
a9:57:f3:cd:29:f4:c9:72:92:c7:00:36:91:e9:ce:e8:f6:19:
9e:33:2e:7c:fe:68:1a:05:f0:f8:02:55:d4:e5:63:63:91:7e:
00:e1:96:4f:a3:60:0a:08:ef:f7:3b:92:f7:2a:62:9f:91:11:
08:fa:8e:7d:33:c9:79:7e:47:86:33:19:e5:25:8a:b5:04:45:
a0:75:6a:52:e0:4c:ae:69:e3:fc:80:69:c2:9b:20:c1:e8:2f:
ad:06:0f:dc:dd:b3:96:dc:86:b3:f7:7e:01:d4:ab:87:59:3b:
52:29:fd:30:b2:4e:14:e2:98:22:63:d3:25:2d:0d:4d:9d:c3:
b7:b7:65:f9:ed:7b:48:81:ae:6d:53:a1:b2:37:d8:bc:f5:56:
5d:7d:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:12 2024 by rpki-client on console-fra.rpki-client.org