Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/3nT3exBwb042VGNNQD1PvVj6xgQ.roa
File: 3nT3exBwb042VGNNQD1PvVj6xgQ.roa (raw, json)
Hash identifier: vMzQrNgFWH1Uvi4C8xmfE/FjwcNE/KVmKOm4ZFvq6zI=
Subject key identifier: DE:74:F7:7B:10:70:6F:4E:36:54:63:4D:40:3D:4F:BD:58:FA:C6:04
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 018F086467A1EB7DB6FE5BAF9FB962E765CC
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/3nT3exBwb042VGNNQD1PvVj6xgQ.roa
Signing time: Tue 23 Apr 2024 00:39:08 +0000
ROA not before: Tue 23 Apr 2024 00:39:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:08:64:67:a1:eb:7d:b6:fe:5b:af:9f:b9:62:e7:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Apr 23 00:39:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de74f77b10706f4e3654634d403d4fbd58fac604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:be:6e:cb:fe:c9:fe:e4:8f:39:0e:1f:54:
3c:46:a9:5d:2e:7b:2d:e9:d2:ef:c8:45:c8:b2:2e:
75:e7:59:4b:46:5a:d1:3d:50:cc:3d:60:0e:1d:a0:
b6:3b:e8:7c:d1:4f:78:5b:e6:2e:4a:db:09:52:a0:
c4:4b:f8:94:15:6f:a3:15:f0:33:3b:b9:e8:63:f6:
41:0a:e7:90:48:13:89:81:f3:5d:6a:6b:29:46:0a:
6d:08:03:53:cd:9b:0c:2e:17:d3:1b:04:a8:a2:a1:
7b:85:18:3b:41:fb:39:1f:2b:aa:2e:dc:00:b7:31:
f1:da:63:1d:c1:5d:b7:a9:aa:37:83:66:01:f4:b9:
6c:08:02:a7:c9:82:0a:84:77:08:5a:80:d2:46:b7:
d7:1c:09:ef:69:bc:a2:ef:99:b7:11:02:24:36:76:
45:c3:37:c1:ae:32:3a:ad:dc:b9:f1:11:3d:0c:6e:
2a:fa:20:23:62:7c:23:aa:39:8e:8d:33:f3:43:8b:
ec:df:84:c2:83:03:c4:25:62:a9:59:8e:ea:f6:16:
21:ae:9e:25:2f:d1:17:ee:c6:f9:1f:7d:36:40:50:
8a:18:b9:b3:a2:ab:bf:4a:67:b6:c0:ff:f0:94:be:
b3:1d:32:44:10:85:69:24:d2:ae:96:9b:cc:50:4a:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:F7:7B:10:70:6F:4E:36:54:63:4D:40:3D:4F:BD:58:FA:C6:04
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/3nT3exBwb042VGNNQD1PvVj6xgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:50:fa:18:35:c5:8b:ad:6c:44:d3:7d:51:ed:a7:6f:ac:cd:
35:de:0f:f0:da:e7:c1:74:22:26:e9:fc:64:e9:14:18:05:a0:
70:c5:ab:01:1d:17:f0:50:77:ad:ee:67:3d:82:95:e0:98:73:
05:a0:e7:6b:00:8e:ad:89:59:b8:5f:28:0a:44:7e:70:99:5c:
48:06:64:3c:e9:06:f8:37:2c:75:39:ae:a3:5d:13:46:87:4c:
40:a6:1a:69:a7:a8:87:b2:6f:83:39:9c:96:e3:b9:47:21:b1:
4f:ae:8e:1c:8c:d5:f4:23:bb:bf:cc:4b:c0:6e:9b:2a:89:8a:
2e:21:4b:0e:7e:71:2c:8c:0f:b0:8e:50:44:d4:0e:5c:3f:c0:
79:6f:ca:2c:a0:65:d9:34:7d:5b:91:a0:19:46:7d:b7:d6:22:
af:53:58:0d:1f:e5:98:2c:aa:c4:fe:dc:4d:87:50:0b:ad:15:
5b:67:6f:af:15:bf:6e:57:5a:93:29:59:b5:d3:bb:04:ba:04:
a6:93:da:b0:0a:b1:8b:1c:1b:56:69:84:09:f0:6a:09:48:45:
ee:a0:06:a4:58:cb:14:09:da:dd:5c:8c:f5:d0:16:fe:0e:91:
81:46:cb:9b:9c:4b:59:0d:2c:b0:11:d9:c3:97:46:52:b7:2e:
2e:3e:f2:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8IZGeh6322/luvn7li52XMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjM2ZTAyZjE1NTRmNzBkOTcxYTY1Njg0OWMwMWJkZmYx
MzhjZTgwHhcNMjQwNDIzMDAzOTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTc0Zjc3YjEwNzA2ZjRlMzY1NDYzNGQ0MDNkNGZiZDU4ZmFjNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/m+bsv+yf7kjzkOH1Q8RqldLnst
6dLvyEXIsi5151lLRlrRPVDMPWAOHaC2O+h80U94W+YuStsJUqDES/iUFW+jFfAz
O7noY/ZBCueQSBOJgfNdamspRgptCANTzZsMLhfTGwSooqF7hRg7Qfs5HyuqLtwA
tzHx2mMdwV23qao3g2YB9LlsCAKnyYIKhHcIWoDSRrfXHAnvabyi75m3EQIkNnZF
wzfBrjI6rdy58RE9DG4q+iAjYnwjqjmOjTPzQ4vs34TCgwPEJWKpWY7q9hYhrp4l
L9EX7sb5H302QFCKGLmzoqu/Sme2wP/wlL6zHTJEEIVpJNKulpvMUEp21QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5093sQcG9ONlRjTUA9T71Y+sYEMB8GA1UdIwQY
MBaAFOJjbgLxVU9w2XGmVoScAb3/E4zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQt
MTJmOWY3MzNkYzRmLzEvM25UM2V4QndiMDQyVkdOTlFEMVB2Vmo2eGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQtMTJmOWY3MzNkYzRm
LzEvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaugMA0G
CSqGSIb3DQEBCwUAA4IBAQAcUPoYNcWLrWxE031R7advrM013g/w2ufBdCIm6fxk
6RQYBaBwxasBHRfwUHet7mc9gpXgmHMFoOdrAI6tiVm4XygKRH5wmVxIBmQ86Qb4
Nyx1Oa6jXRNGh0xAphppp6iHsm+DOZyW47lHIbFPro4cjNX0I7u/zEvAbpsqiYou
IUsOfnEsjA+wjlBE1A5cP8B5b8osoGXZNH1bkaAZRn231iKvU1gNH+WYLKrE/txN
h1ALrRVbZ2+vFb9uV1qTKVm107sEugSmk9qwCrGLHBtWaYQJ8GoJSEXuoAakWMsU
CdrdXIz10Bb+DpGBRsubnEtZDSywEdnDl0ZSty4uPvLC
-----END CERTIFICATE-----
Generated at Sat May 4 16:00:02 2024 by rpki-client on console-ams.rpki-client.org