Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3L4hje9cM3cFKTWq_sIDoRCg5_U.roa
File: 3L4hje9cM3cFKTWq_sIDoRCg5_U.roa (raw, json)
Hash identifier: T+NsYRL61m3HK9gZNG2a5kPbmvjZSw7AcQYXis9jiU0=
Subject key identifier: DC:BE:21:8D:EF:5C:33:77:05:29:35:AA:FE:C2:03:A1:10:A0:E7:F5
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 018CC3B695BAB171BA4863D4255FEE0A71F6
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3L4hje9cM3cFKTWq_sIDoRCg5_U.roa
Signing time: Mon 01 Jan 2024 06:29:32 +0000
ROA not before: Mon 01 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208712
IP address blocks: 45.87.236.0/23 maxlen: 23
2a06:7a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:95:ba:b1:71:ba:48:63:d4:25:5f:ee:0a:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcbe218def5c3377052935aafec203a110a0e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:9c:9f:91:b5:ae:86:a4:95:d0:c1:bd:73:
bd:0a:09:5b:b0:98:8b:f7:ad:31:2c:97:9b:4a:6d:
4f:e9:b0:77:21:89:c1:46:44:fc:d7:fe:b9:31:00:
4b:4a:fb:62:06:48:2c:ef:79:cc:5f:b4:58:80:3c:
3f:1a:5e:60:57:10:c2:af:66:7d:f4:52:c8:52:0c:
f2:f2:87:8d:e6:b7:ae:ae:21:ce:26:8e:63:90:75:
af:5b:0a:af:e2:b6:19:ab:3e:50:9f:93:86:b0:a0:
dc:54:6f:16:92:42:e4:17:a2:1a:f9:37:db:da:1c:
44:04:0e:6c:e8:6a:79:8c:41:4b:70:e7:83:a3:f4:
71:f5:b7:c5:25:20:ce:b0:dd:d6:cb:61:ba:79:07:
d9:d8:ee:a8:64:f6:73:52:2d:f9:0d:fd:04:6e:91:
b2:56:16:d1:7e:0c:67:f5:f0:1d:00:74:41:03:b5:
6a:30:3f:89:a1:0a:36:3b:f4:51:2f:53:d7:d5:42:
22:e8:87:f4:7a:aa:75:b9:13:a2:79:ec:85:27:d8:
fa:74:b8:d3:54:d0:4c:14:32:2b:67:37:e2:1d:c5:
c3:06:a0:b2:b3:69:75:1b:9e:38:32:d5:1d:3b:b1:
ec:cb:ca:10:85:20:d0:79:28:3a:ec:96:6b:52:0d:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:21:8D:EF:5C:33:77:05:29:35:AA:FE:C2:03:A1:10:A0:E7:F5
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3L4hje9cM3cFKTWq_sIDoRCg5_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.236.0/23
IPv6:
2a06:7a80::/48
Signature Algorithm: sha256WithRSAEncryption
60:67:7a:c4:f0:03:23:bb:c1:61:c8:14:e8:18:52:cc:5b:6c:
d3:93:ae:07:ae:ee:e5:e0:fd:6a:49:95:f0:67:b0:da:4d:e2:
8b:33:95:3d:e8:8a:b3:dc:d5:6d:52:f1:64:00:e9:1c:d6:ef:
c1:2c:4d:84:8a:c6:a1:2f:58:ef:7e:5e:e1:2a:87:2d:12:dc:
34:6a:82:b9:b8:cb:11:ff:c7:83:9b:00:2a:72:aa:1a:f4:db:
33:e4:11:13:57:4b:94:73:cc:b0:66:41:18:83:74:3c:a0:b4:
b0:27:c7:50:48:48:21:64:57:43:9d:e6:4c:96:af:72:1f:db:
88:62:5f:a4:8d:5a:15:7c:f1:dd:bb:ef:1d:98:a7:27:31:ee:
d6:10:90:6b:0f:40:7e:95:0f:22:15:b3:fc:51:06:55:d2:d0:
06:30:d9:24:91:90:0f:98:73:d1:bb:68:26:dc:86:4a:10:f6:
76:ca:58:22:ac:09:f6:b0:fd:6d:45:c3:3e:e6:ca:0a:ef:56:
7a:cc:60:a2:75:86:c9:5b:0a:62:ea:f4:0f:5d:4b:41:0c:d5:
01:6b:1f:14:93:20:c3:df:32:45:6e:cd:2d:a9:e2:b6:23:42:
75:0c:d7:d6:97:d7:fe:54:9c:b1:39:a4:6b:b1:d8:68:0f:84:
00:26:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:03 2024 by rpki-client on console-fra.rpki-client.org