Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/3tcEWJLNR5YppEf-NC1t0Lwazco.roa
File: 3tcEWJLNR5YppEf-NC1t0Lwazco.roa (raw, json)
Hash identifier: 0HPTjkF9b4kad5XiMa6wR9oJsy0isI71bmEWe19u3sw=
Subject key identifier: DE:D7:04:58:92:CD:47:96:29:A4:47:FE:34:2D:6D:D0:BC:1A:CD:CA
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 018CC500FAB709C767A38A53E7D8E15581AD
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/3tcEWJLNR5YppEf-NC1t0Lwazco.roa
Signing time: Mon 01 Jan 2024 12:30:24 +0000
ROA not before: Mon 01 Jan 2024 12:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20526
IP address blocks: 194.242.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fa:b7:09:c7:67:a3:8a:53:e7:d8:e1:55:81:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Jan 1 12:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded7045892cd479629a447fe342d6dd0bc1acdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:98:80:3e:93:0b:28:ad:cc:b4:fb:8a:3b:
2d:f7:59:3d:9b:0c:e1:3f:e9:4b:3a:45:d5:a8:e4:
e4:5e:5c:14:66:e3:2c:1e:59:8e:9f:0a:e4:26:d6:
65:bb:c7:e0:e2:42:07:91:a9:5e:c3:b4:62:65:52:
e2:23:8b:c1:8e:4b:49:d9:d6:ed:35:a2:22:f6:e2:
61:b4:36:62:3f:6d:4e:fc:d5:4e:c3:fa:01:40:20:
be:27:8a:69:98:d0:e2:8c:99:18:d2:58:10:36:7b:
a0:41:8d:08:b9:a1:11:f3:95:3e:d5:26:7e:a5:28:
a2:52:5f:41:69:04:d6:ea:c0:2a:27:50:fd:da:b5:
9f:a4:a9:88:e6:62:47:5e:7d:38:c8:54:75:79:0f:
93:bd:4a:f0:3b:b2:04:c1:bc:07:fe:26:42:df:6c:
12:2d:38:19:7f:9b:fe:0c:68:12:03:8e:c7:fc:d9:
fd:10:05:e4:c9:dc:db:4f:1b:b8:ec:75:9d:47:86:
2a:ef:25:d0:62:54:52:46:af:5a:69:7d:19:cf:37:
94:94:00:79:85:bc:4c:c8:d1:f7:79:5d:fc:02:15:
9b:f0:25:2f:10:8d:0a:a5:1d:ba:a5:fa:7d:af:67:
08:29:1a:af:34:a9:5c:26:61:03:38:47:17:52:81:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:04:58:92:CD:47:96:29:A4:47:FE:34:2D:6D:D0:BC:1A:CD:CA
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/3tcEWJLNR5YppEf-NC1t0Lwazco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.36.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f9:04:6b:87:7b:16:29:bc:a5:f4:54:43:b7:f8:89:67:c8:
0e:b1:95:d4:3e:73:86:90:b0:a7:84:77:29:28:74:a5:ae:b4:
12:2c:5e:02:fa:b9:55:b6:a7:c3:dc:ae:aa:69:20:e3:79:18:
9f:3a:c8:f9:7c:12:c0:1a:f8:68:80:0a:0e:a2:fb:6b:ae:88:
d3:69:49:8e:2b:f5:a5:c9:af:7a:f9:83:28:95:84:02:5a:29:
f1:1a:f8:ea:05:83:74:da:b9:8d:50:4d:3d:c0:64:e8:b4:fa:
89:e5:53:58:40:eb:cf:ff:41:f1:4f:5d:e6:7c:06:b4:e0:51:
b0:00:e4:87:5a:a6:43:44:08:2f:0e:93:86:ca:d9:bf:18:af:
b1:e2:3e:74:de:7a:89:ff:89:e0:68:56:52:b9:2e:21:be:9d:
f5:ea:9d:c6:12:20:01:98:56:f1:4c:17:99:d2:fb:76:08:35:
db:a0:a3:58:3b:a8:c8:08:59:b1:d3:b8:82:10:3e:7a:9c:17:
01:51:5f:30:6d:ad:94:e0:2b:4e:ca:52:75:8d:bb:05:05:02:
bb:37:5d:05:62:20:3d:6d:43:a3:d9:7a:0e:70:ea:53:24:dd:
8b:11:7a:67:ff:8e:ca:6b:dd:d2:9f:cf:41:96:58:cf:46:48:
59:f1:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:22:27 2024 by rpki-client on console-ams.rpki-client.org