Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/3MTVvKN9DyKJLjVtLwc8uKYKMAM.roa
File: 3MTVvKN9DyKJLjVtLwc8uKYKMAM.roa (raw, json)
Hash identifier: p4OmZ5YCgAu01MaGOh+GrCKH2nsN7mgjYT5BhY8Q300=
Subject key identifier: DC:C4:D5:BC:A3:7D:0F:22:89:2E:35:6D:2F:07:3C:B8:A6:0A:30:03
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E10A91F8ED9BDCBAF79EBDD516C62
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/3MTVvKN9DyKJLjVtLwc8uKYKMAM.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:a9:1f:8e:d9:bd:cb:af:79:eb:dd:51:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc4d5bca37d0f22892e356d2f073cb8a60a3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:09:89:16:d7:9a:33:a5:70:06:6d:92:c6:
7a:da:4c:2e:1f:29:88:12:81:2c:88:15:b2:87:1e:
3d:a0:41:7f:df:42:b5:99:d6:5d:b0:26:33:3a:9d:
14:fd:82:6d:9f:7d:f7:d3:5c:f4:40:90:df:a0:68:
84:ef:f0:75:4a:88:02:94:d9:1f:b2:a2:5d:fd:77:
c3:b5:8d:c8:fd:c0:a1:66:71:4c:9f:0d:f8:4c:2b:
d8:ea:3a:55:fb:45:e1:b0:0e:b0:9b:a9:83:d2:8e:
5c:f5:95:47:75:75:0d:02:0a:59:7b:f4:6d:cb:1a:
5a:6d:c2:89:75:41:97:2c:7a:51:74:79:9c:0d:8c:
6f:df:b6:79:aa:14:3e:a7:43:51:42:35:c6:03:b3:
b3:50:67:23:97:13:39:e2:72:3c:b3:79:80:ce:f9:
e0:ce:3c:3e:7f:ce:80:22:82:6c:aa:70:ac:83:61:
f0:0c:69:29:30:f7:4a:c5:30:19:46:95:bf:4e:69:
e2:f7:2f:0f:47:fd:f5:e9:db:7a:2f:e6:b3:6b:72:
da:fc:6f:e1:dc:a1:fd:2a:c9:b6:79:cd:b8:db:75:
52:e2:e0:de:b8:54:97:08:49:f6:48:a1:c2:2b:6c:
6d:19:dd:ff:29:12:6d:ea:92:92:0d:73:08:3e:d6:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:D5:BC:A3:7D:0F:22:89:2E:35:6D:2F:07:3C:B8:A6:0A:30:03
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/3MTVvKN9DyKJLjVtLwc8uKYKMAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
14:26:3a:d8:6e:61:5e:53:fa:81:ef:da:a3:2f:20:f3:53:02:
f6:28:20:fd:af:26:4f:5f:e5:7e:5b:ad:c1:b8:17:5b:47:d1:
bb:23:d5:40:d5:c0:16:b0:0d:ed:84:0f:dd:7c:33:8b:ec:d4:
55:b5:7e:89:72:fe:c6:99:cf:63:43:77:1f:de:dd:6a:21:06:
4f:a8:8d:c0:f2:12:03:86:99:61:f4:ef:7e:41:78:38:4c:16:
64:9e:00:04:38:1e:14:03:a9:6a:34:0f:fa:0e:67:68:9a:23:
3d:08:38:e8:ad:9f:1a:dd:03:01:de:3d:49:c0:8a:ca:eb:65:
b0:8c:4e:17:29:ce:b0:fd:b1:c0:a8:e3:a1:f0:7e:62:26:a2:
71:06:aa:33:06:f7:4e:5c:1a:55:bf:06:37:84:1c:de:81:51:
4d:a1:4a:72:ad:46:34:1b:7d:bd:11:f7:4e:4f:26:9e:b7:81:
0e:cd:fc:d8:0d:ee:5d:50:a0:72:9c:48:96:53:41:03:26:cf:
35:7f:31:d2:d6:f9:13:f9:d5:43:c8:67:48:81:63:89:91:dd:
19:a2:36:8d:b6:4d:80:98:55:ca:04:4b:cb:b3:e6:6c:19:0d:
db:e4:9e:e0:ec:32:d2:dd:a2:03:97:5b:9e:de:6f:5b:ea:13:
14:78:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:41:08 2024 by rpki-client on console-ams.rpki-client.org