Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3wJ46YMJLxBe_f-IKcFfPurMqu4.roa
File: 3wJ46YMJLxBe_f-IKcFfPurMqu4.roa (raw, json)
Hash identifier: xwnQ5FASbC47FwbmxhudE30+a0FohgkkYdW3lSSx1W8=
Subject key identifier: DF:02:78:E9:83:09:2F:10:5E:FD:FF:88:29:C1:5F:3E:EA:CC:AA:EE
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 018CC6B88B8EC797D36F89FFFD87E0B8C02F
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3wJ46YMJLxBe_f-IKcFfPurMqu4.roa
Signing time: Mon 01 Jan 2024 20:30:32 +0000
ROA not before: Mon 01 Jan 2024 20:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212257
IP address blocks: 185.160.96.0/22 maxlen: 22
185.160.97.0/24 maxlen: 24
185.160.98.0/24 maxlen: 24
185.160.96.0/24 maxlen: 24
185.160.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8b:8e:c7:97:d3:6f:89:ff:fd:87:e0:b8:c0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jan 1 20:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df0278e983092f105efdff8829c15f3eeaccaaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:ed:e3:11:44:75:f4:64:20:e8:a7:18:f2:
08:58:25:69:94:ab:10:be:13:3e:4e:0e:47:13:ef:
ef:4a:93:f1:72:06:f9:3b:f9:bf:10:74:fa:fb:65:
af:a7:9a:1b:f7:e8:22:23:85:87:5e:ba:a2:56:6d:
4b:40:eb:12:4f:54:45:c0:59:a8:0a:be:b3:cf:ef:
b6:1e:1e:59:61:c0:fa:10:c5:22:5e:81:2a:db:39:
4b:7b:50:35:d0:05:5e:f7:1c:f2:bc:d2:04:c5:3c:
04:14:68:23:b3:70:d6:63:e8:05:a4:89:65:aa:cf:
7f:09:42:52:b6:c0:b2:b8:e3:60:b0:5b:79:57:e8:
15:6f:75:f7:39:99:19:fa:a2:d6:af:40:98:84:2c:
64:5a:b8:7a:55:cc:30:ea:cc:e8:54:e2:e7:f1:63:
78:54:ca:7b:b9:1d:94:49:6b:1e:ca:0f:10:5d:8b:
8a:63:43:ba:4b:29:db:ce:d0:96:f2:49:af:9d:c8:
8e:ed:42:a9:c0:76:61:79:f6:09:66:2b:43:6e:e9:
42:3c:2d:57:e8:1b:23:7c:59:81:d4:30:ae:d6:71:
c8:e9:fe:e1:25:e1:f8:23:c0:a3:12:00:22:77:b2:
2e:36:13:d3:65:88:78:75:bc:d7:ea:81:70:fe:1c:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:78:E9:83:09:2F:10:5E:FD:FF:88:29:C1:5F:3E:EA:CC:AA:EE
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/3wJ46YMJLxBe_f-IKcFfPurMqu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:bc:b2:8e:76:b3:77:d9:ab:65:10:90:8d:e1:15:7f:a7:b8:
fa:73:16:b9:44:2a:5f:c3:f6:d1:db:24:3c:de:6a:c6:5c:94:
95:54:cf:d1:a8:0d:d2:e7:23:42:4a:8a:87:69:43:cd:73:40:
3c:eb:c8:2c:a6:69:8c:ff:59:6e:58:35:78:68:0a:63:11:55:
a0:78:a0:68:07:c7:ff:5d:28:da:2b:fa:93:02:f9:00:e5:1f:
44:de:54:88:13:3e:ab:51:a6:e5:b8:95:24:0b:ef:39:0f:9a:
78:08:42:fc:97:53:22:3a:1f:e4:08:42:3e:f8:78:55:8c:85:
e1:54:fd:74:7c:30:89:62:e2:9a:e9:9e:b2:e2:40:12:d1:95:
50:1f:50:6e:da:23:69:28:58:86:dd:ba:0c:79:99:48:54:7f:
19:6d:31:3e:4c:20:f1:77:69:93:80:18:8e:06:18:3d:bc:45:
b3:d2:67:44:62:94:bd:25:04:77:1a:0b:4e:20:68:e6:70:c5:
c9:48:b7:4a:63:7a:b9:4b:ae:5e:a9:31:34:b5:64:b2:5c:04:
3a:d5:16:d2:bb:81:39:96:f5:ac:ef:e9:25:f9:75:c1:77:b3:
38:7f:21:4f:92:aa:26:d1:8b:91:40:f9:f9:22:4a:89:ce:3a:
32:d9:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:21:11 2024 by rpki-client on console-fra.rpki-client.org