Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3AspQh4J0GTZ0Mhvk2pKT6-9Dm8.roa
File: 3AspQh4J0GTZ0Mhvk2pKT6-9Dm8.roa (raw, json)
Hash identifier: 6VCm0nU+1JDttYsUSCLCJBHoVKe+N7JA7IpYHXuqUks=
Subject key identifier: DC:0B:29:42:1E:09:D0:64:D9:D0:C8:6F:93:6A:4A:4F:AF:BD:0E:6F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86F9D32AB815576F39BB03B837D336A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3AspQh4J0GTZ0Mhvk2pKT6-9Dm8.roa
Signing time: Tue 02 Jan 2024 04:30:07 +0000
ROA not before: Tue 02 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 45.87.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9d:32:ab:81:55:76:f3:9b:b0:3b:83:7d:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc0b29421e09d064d9d0c86f936a4a4fafbd0e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:a8:49:ef:58:af:48:71:94:75:86:2d:62:
f3:e0:b3:7e:e9:d7:6a:2a:36:85:63:9d:76:54:99:
a4:e0:67:2f:5a:24:c3:a3:d5:c6:9b:63:ca:3f:89:
81:85:b2:ad:0e:11:b4:54:0b:a2:41:21:cb:14:ba:
52:2f:f5:d0:09:0b:47:71:18:0c:c3:a9:73:34:e2:
4c:38:07:28:64:10:d0:95:7c:26:d1:74:7e:bc:81:
2f:d7:b3:78:6f:4d:fd:79:f5:fc:cd:17:7e:5e:97:
40:a6:de:e0:20:e6:16:df:20:53:4c:45:89:42:bc:
38:0d:bb:08:47:b0:6f:89:9b:cd:d9:da:6a:c9:d1:
74:45:f1:02:45:33:cc:92:77:1a:01:4b:3d:66:90:
a7:65:aa:eb:e4:9e:fb:4c:b1:e8:90:92:22:9a:be:
7c:b1:29:4e:e4:40:c8:b3:a2:fc:92:99:22:86:f9:
ba:b3:24:58:5d:9e:8e:19:c9:38:84:80:8e:03:3e:
6c:5e:bc:ff:ad:32:e3:da:6a:ed:6b:44:de:f4:ec:
bb:78:ee:25:52:35:e7:2c:67:19:35:6f:65:49:9e:
ef:43:09:c0:60:bb:a6:b4:24:ba:52:ba:0a:a9:da:
b9:3e:ce:fd:22:f2:9a:1c:08:c7:bb:dd:c6:4a:85:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:29:42:1E:09:D0:64:D9:D0:C8:6F:93:6A:4A:4F:AF:BD:0E:6F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3AspQh4J0GTZ0Mhvk2pKT6-9Dm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:06:9d:8f:48:c5:27:81:c0:63:17:a6:e3:5b:ea:44:e0:43:
bf:06:ec:84:f6:70:fe:a9:c2:99:81:31:ec:ea:2e:cd:a3:6f:
fd:67:8a:f3:eb:9b:2a:2d:2d:dc:1d:37:40:c6:35:07:c9:d1:
18:5d:c4:74:89:9b:de:7e:1d:1d:cd:47:9e:92:eb:2f:81:52:
4f:d4:9e:92:94:63:df:76:ae:c1:e9:82:0f:3d:2d:0b:8b:8b:
54:76:cf:46:b0:3b:ea:9b:71:ad:1c:ba:5a:c9:f1:34:5a:34:
82:35:e1:9c:5f:35:d2:78:6d:c3:03:e4:41:12:b4:40:d6:1f:
1a:02:87:3b:30:71:f4:96:24:aa:e1:c5:37:aa:76:04:ca:9d:
58:ff:78:52:24:25:fc:c2:d3:0e:70:6a:46:fa:a5:ef:bc:a2:
f6:9c:99:26:ac:3d:41:9d:91:88:18:da:2b:a0:3e:4b:a8:d6:
b6:67:83:6c:9b:c7:39:41:9c:fd:b2:25:71:0d:e7:c6:c8:6d:
c3:2d:76:fc:46:3e:1c:25:21:0a:99:2f:75:27:d3:ba:69:27:
4d:cb:8b:da:fa:6d:a6:38:df:29:24:80:d8:f9:4b:d6:07:1a:
a9:e6:3a:2b:fb:fa:8c:de:be:f6:ab:ff:5c:97:4a:21:21:78:
7b:dd:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:28:22 2024 by rpki-client on console-fra.rpki-client.org