Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa
File: 3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa (raw, json)
Hash identifier: ioGwa2ydyd1/TDeSqhJ8S99lo9gST+ls0PYaCQLZG0A=
Subject key identifier: DD:D0:82:DD:63:E0:59:2E:25:77:A3:63:9C:E9:E6:09:5E:CA:FA:15
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 018F2E5AF04EDEFE8B477691A7A0A5E39C60
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa
Signing time: Tue 30 Apr 2024 09:34:22 +0000
ROA not before: Tue 30 Apr 2024 09:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201228
IP address blocks: 192.33.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:5a:f0:4e:de:fe:8b:47:76:91:a7:a0:a5:e3:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Apr 30 09:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddd082dd63e0592e2577a3639ce9e6095ecafa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:19:5c:b0:50:ce:ed:5c:43:c5:3c:8a:af:
0d:c2:0a:98:ed:ac:76:d6:47:da:7a:42:58:30:0e:
1a:a2:da:de:cb:43:f4:7a:80:71:ac:b2:6e:f7:7e:
07:10:d6:67:27:fe:c0:9b:38:4d:b3:95:01:89:79:
bc:8b:99:69:52:39:1d:de:af:74:14:b5:66:1b:9e:
53:ba:5f:9e:86:1f:de:8b:a2:61:7d:80:ea:e1:34:
ab:4d:05:27:d7:43:ac:f8:68:e9:b9:65:95:30:91:
5e:11:20:7c:b2:47:08:1c:da:97:f4:23:65:a8:cd:
c7:0f:65:68:72:f1:8a:51:b6:a7:61:d3:77:02:09:
54:85:ec:b1:f5:c3:2c:e1:59:c2:5c:8c:1d:bc:d4:
f6:e9:a4:b5:66:66:61:7b:3b:4c:0a:ad:15:5d:dd:
04:14:30:8d:49:c2:d8:54:21:8f:0c:3e:74:d9:9a:
33:c8:24:3e:21:43:95:7d:61:9c:db:be:13:44:16:
fa:c5:2a:d6:94:54:91:81:b8:59:40:6c:43:39:a2:
9f:03:8b:71:95:d8:46:ff:86:9b:76:40:80:41:a2:
d9:ad:62:cc:b9:47:df:a1:88:76:74:7d:08:24:cd:
fa:ab:3b:4c:b1:73:c9:e2:a6:52:cf:ca:e4:27:81:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:82:DD:63:E0:59:2E:25:77:A3:63:9C:E9:E6:09:5E:CA:FA:15
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3e:b6:3d:00:89:9e:65:2e:4c:eb:f4:5e:ed:b3:8e:1e:92:
b7:b7:c6:84:39:bd:a3:00:3c:2b:26:d8:11:fe:7e:09:70:17:
81:f5:4a:93:7d:4c:5b:8d:34:83:38:54:d5:9a:ab:68:24:49:
41:4a:c5:a0:f1:db:ec:71:d0:fe:dc:75:db:87:14:6e:7d:ea:
43:43:7e:a8:50:c4:03:e1:1c:c3:b8:ae:ad:25:18:85:ac:60:
c2:0b:21:d9:cf:5d:35:98:3f:81:e9:bc:94:45:01:a3:b8:cb:
47:3d:0c:43:83:2c:33:85:4d:2d:5b:98:dd:5b:2d:7d:27:34:
07:a5:74:cc:a5:f6:e9:8a:55:47:09:7b:81:92:f7:85:8f:e1:
ad:ab:79:b9:25:bd:21:5e:da:0d:35:f1:34:18:a2:e9:8b:4a:
02:95:8c:5a:2d:22:d4:1e:4d:3e:9c:18:76:7c:42:92:22:ef:
69:4d:30:7f:e7:46:19:1d:01:5b:8f:cf:8a:cf:d5:fe:98:2f:
41:b9:e5:97:aa:85:54:3b:a8:1e:72:6e:8e:99:5e:6c:48:69:
e4:27:8e:b4:10:60:d6:9f:d2:92:1a:74:23:6f:00:8c:95:aa:
b1:85:53:c2:d6:ff:40:f2:f6:82:32:df:69:7e:b6:20:39:9d:
39:7b:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 08:50:40 2024 by rpki-client on console-ams.rpki-client.org