Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3NHWvHja0NEuyqQYXFwPMGs1aOg.roa
File: 3NHWvHja0NEuyqQYXFwPMGs1aOg.roa (raw, json)
Hash identifier: kCd8gS39mdf4a7oV3keW+bGE/K8enxTOD10PXLimxKs=
Subject key identifier: DC:D1:D6:BC:78:DA:D0:D1:2E:CA:A4:18:5C:5C:0F:30:6B:35:68:E8
Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial: 018CC86F778EC4F2EFD6A10DED2D1C25E9DB
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3NHWvHja0NEuyqQYXFwPMGs1aOg.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56805
IP address blocks: 185.63.77.0/24 maxlen: 24
185.63.76.0/22 maxlen: 22
185.63.76.0/24 maxlen: 24
185.63.78.0/24 maxlen: 24
185.63.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:77:8e:c4:f2:ef:d6:a1:0d:ed:2d:1c:25:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd1d6bc78dad0d12ecaa4185c5c0f306b3568e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:cc:a8:3c:ff:57:3c:0f:d5:98:a4:ae:fa:
92:27:3a:87:47:10:ea:95:e6:de:5e:92:9c:30:02:
f3:15:a2:91:31:c3:19:db:09:7c:e1:8e:48:2e:79:
96:6f:1f:b0:14:27:1f:e3:64:dd:c6:9f:bb:81:5d:
e3:7c:e5:0f:1d:dd:e9:44:21:d8:87:d5:cc:2e:9e:
f4:8a:f7:04:e4:c3:6e:46:5f:26:32:82:6b:67:ec:
96:79:cc:4e:50:ef:73:da:c0:13:88:a5:20:bf:60:
75:ad:ad:86:7c:3c:f1:bf:73:c0:32:57:f9:08:5d:
a7:a5:fe:6c:38:8b:f8:e2:4c:8b:45:f1:4d:ef:c1:
a4:7b:80:de:8c:a2:ed:77:8d:1e:e2:75:79:64:80:
77:a1:60:d4:df:68:b8:d5:d1:71:2b:a5:3d:24:69:
2a:4a:f8:dd:a3:01:e9:6c:77:b9:df:0e:b6:16:c3:
07:df:7a:08:c7:ff:bb:df:da:53:15:e0:6a:e1:39:
3a:fb:4c:5f:44:78:e1:50:24:53:fc:7d:35:89:dc:
41:89:09:35:a9:2c:d4:7d:9a:4f:1f:f5:d6:2d:e7:
15:40:16:4b:25:f0:32:a2:f8:9a:9b:9d:b5:94:47:
7c:d7:6b:88:dc:55:7e:56:67:1c:bf:6f:ba:14:17:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:D6:BC:78:DA:D0:D1:2E:CA:A4:18:5C:5C:0F:30:6B:35:68:E8
X509v3 Authority Key Identifier:
keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/3NHWvHja0NEuyqQYXFwPMGs1aOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.76.0/22
Signature Algorithm: sha256WithRSAEncryption
36:44:34:b9:c4:fe:93:db:bc:c4:6b:21:9c:bb:3f:04:55:a0:
60:eb:5a:35:0f:b4:c3:08:03:91:5d:cd:d0:63:dc:6f:35:13:
35:50:dd:53:7d:47:c3:ae:d1:41:ff:68:3f:4e:b8:dd:ca:73:
d0:d7:13:f5:95:87:26:d6:e8:17:9f:3f:4e:75:e5:1a:a5:23:
3a:d3:df:9d:d8:88:09:59:02:6c:17:10:cc:8d:53:9b:f8:cb:
55:b2:c8:38:c7:63:8c:0a:67:a9:e0:10:f9:3c:37:ab:c5:09:
f9:22:2e:d2:9a:da:91:a6:d0:fc:05:78:45:5a:21:8c:d5:88:
7a:84:c6:58:ab:75:ff:da:71:2a:c9:09:dc:11:ba:fc:7d:2a:
2d:25:b1:93:00:32:b4:ad:3e:fe:bc:63:4b:85:e6:be:0e:6c:
f7:14:a7:c0:64:40:d9:9c:57:f8:ff:b3:fa:e9:fe:d7:a8:f0:
1a:81:b2:bc:50:58:10:ac:2a:04:d8:d4:4b:42:ce:b5:d7:00:
7b:31:6d:8e:2c:d6:ac:57:79:62:04:5c:c4:5a:6a:e4:b9:05:
52:e2:eb:8a:05:6d:1a:31:7d:4e:58:bc:7e:23:20:d3:fd:64:
97:86:eb:a1:25:b2:39:6c:73:3c:69:e0:05:e3:89:67:a8:b1:
14:19:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 06:31:03 2024 by rpki-client on console-ams.rpki-client.org