Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/M3K_1qnG9z5IJVLaDf99BD1xBU4.roa
File: M3K_1qnG9z5IJVLaDf99BD1xBU4.roa (raw, json)
Hash identifier: 1lmImPzPVcwHTjOT4rUdUlCyjJZq3v8qjCaJ26km/NM=
Subject key identifier: 33:72:BF:D6:A9:C6:F7:3E:48:25:52:DA:0D:FF:7D:04:3D:71:05:4E
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 0192B3F20AF04D90D0772216C8B968C8270B
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/M3K_1qnG9z5IJVLaDf99BD1xBU4.roa
Signing time: Tue 22 Oct 2024 11:17:17 +0000
ROA not before: Tue 22 Oct 2024 11:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205485
IP address blocks: 91.226.96.0/24 maxlen: 24
185.216.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:f2:0a:f0:4d:90:d0:77:22:16:c8:b9:68:c8:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Oct 22 11:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3372bfd6a9c6f73e482552da0dff7d043d71054e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:02:b7:3f:60:67:e8:5d:de:1d:7b:50:88:
a2:10:e9:f5:0b:f6:6e:aa:79:f8:6a:43:65:d9:62:
65:be:53:cd:90:72:f6:07:05:47:5b:77:87:6f:77:
6c:a8:82:d6:2a:24:2a:fb:a2:8f:01:0d:2d:7e:5e:
91:58:95:5f:13:95:c4:84:77:89:e2:90:c9:b7:01:
11:ec:3d:da:fd:4c:98:06:f7:51:03:db:11:1b:90:
be:ca:61:88:bd:ee:8a:d3:5e:00:1c:33:d2:53:87:
ca:21:88:ec:d7:02:52:15:c2:6b:a9:01:6b:2c:54:
b4:42:48:28:42:4a:29:1f:e5:ab:f7:6c:e2:a1:9c:
78:60:43:39:a8:56:85:30:a1:09:99:25:9b:2e:bd:
c4:c2:5b:80:97:4f:8d:bc:b7:67:fb:0f:b0:a1:aa:
89:7a:a0:b3:b7:7a:d6:db:c1:5f:7c:a3:82:b1:e5:
97:3a:28:43:8d:f6:7e:f6:a9:79:a3:05:65:1d:12:
ae:2e:b7:31:54:15:52:91:27:1d:b6:3c:a7:95:04:
80:72:95:e6:8d:2d:5e:15:9d:65:22:67:66:ed:fd:
58:9d:3b:4d:a8:97:26:31:d4:93:43:5d:8b:a3:ea:
01:7a:99:58:fb:f6:7b:3f:34:e2:e7:a1:5a:76:08:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:BF:D6:A9:C6:F7:3E:48:25:52:DA:0D:FF:7D:04:3D:71:05:4E
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/M3K_1qnG9z5IJVLaDf99BD1xBU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.96.0/24
185.216.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:7e:81:3d:90:0d:77:ac:7a:d8:bb:36:f3:e5:a5:f8:44:59:
a9:38:19:f5:c5:6d:7b:5d:9a:07:7c:e0:59:85:01:50:75:04:
7e:7f:2f:b3:e6:bc:e3:22:8c:a1:f5:6d:90:a9:26:af:cf:93:
5d:41:7d:2b:82:62:02:e7:54:48:38:e4:3b:de:a1:b4:7e:81:
21:b1:6a:6a:8a:35:55:ce:ad:56:6b:d2:11:3d:05:3c:88:0b:
57:39:10:ab:d9:78:01:25:21:cf:57:64:83:83:be:04:2b:24:
1a:a2:66:46:ec:df:d8:6a:f9:c3:91:34:ac:9a:93:d8:d1:3f:
be:c3:d0:42:c9:88:c6:08:81:da:c8:e1:d2:69:78:94:69:1c:
a0:9c:60:7a:2f:cd:aa:d1:8a:69:c0:e9:4c:42:2f:c5:27:8a:
e4:af:3d:3d:df:b5:f7:e9:44:55:39:9a:2e:a5:02:fd:ec:5b:
26:f0:a8:c1:0b:18:6d:12:e5:37:7b:ee:51:a8:b7:df:0c:2d:
b8:ab:96:c3:07:03:fc:68:50:8c:b2:6e:32:35:8f:7a:b1:4d:
d0:7f:22:8f:ed:09:b9:d4:89:52:35:f1:3e:2f:6c:65:98:64:
71:6e:d2:b1:ab:32:c9:50:22:2e:ae:62:5d:57:66:06:cb:cd:
ad:5d:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:48 2024 by rpki-client on console-ams.rpki-client.org