Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/3kDHaWERSDGnky_Y8mCUMsI0RG8.roa
File: 3kDHaWERSDGnky_Y8mCUMsI0RG8.roa (raw, json)
Hash identifier: 3KfqA2shfg9aGRITiSFAOawVaxTpDv6s6CQbgrl5tms=
Subject key identifier: DE:40:C7:69:61:11:48:31:A7:93:2F:D8:F2:60:94:32:C2:34:44:6F
Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial: 018CC726D768B0B14970BE320BE947D51B9C
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/3kDHaWERSDGnky_Y8mCUMsI0RG8.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41828
IP address blocks: 195.191.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d7:68:b0:b1:49:70:be:32:0b:e9:47:d5:1b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de40c76961114831a7932fd8f2609432c234446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:46:42:50:04:75:35:65:57:b5:08:88:47:
2c:1d:53:41:a7:f2:b5:0c:73:a6:2f:80:5c:42:72:
c2:fb:d0:cd:14:99:d3:bf:fa:4c:39:34:68:70:7d:
12:5a:83:39:2f:8a:79:b0:54:85:af:ad:31:d3:b2:
3e:77:26:85:20:f8:e7:97:63:61:7d:36:a0:6c:95:
0a:24:5f:d1:03:b3:93:27:01:ad:53:71:29:b0:0d:
74:fe:81:04:9b:b0:8b:38:99:06:1a:26:f2:86:c3:
f9:08:dd:48:7c:b2:7f:98:d2:45:48:b5:5c:91:ed:
44:b7:84:fa:c9:71:54:5c:42:f9:cc:fb:84:12:d7:
71:c0:d8:50:a0:61:c7:e0:72:0e:8a:b5:72:32:f7:
b4:9e:1e:0a:63:cf:88:aa:85:b1:19:47:46:da:9c:
ec:32:5c:83:d1:80:0f:11:10:fb:8e:05:92:57:fc:
08:49:82:e5:7b:5f:dc:87:45:af:3a:d4:5f:0c:74:
cc:58:29:8a:dc:9e:5d:d4:5a:3b:6d:bf:53:19:d1:
ca:92:be:0d:ea:52:0c:e9:d6:12:1b:39:e9:bb:52:
1f:f4:ad:a0:81:d7:49:ae:99:56:56:c8:92:f8:75:
26:38:fd:f9:84:ef:07:1d:1c:50:f7:76:de:b8:43:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:C7:69:61:11:48:31:A7:93:2F:D8:F2:60:94:32:C2:34:44:6F
X509v3 Authority Key Identifier:
keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/3kDHaWERSDGnky_Y8mCUMsI0RG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:44:b9:e7:ce:b6:1d:53:39:72:ec:73:08:fa:7d:eb:8c:28:
fb:11:fa:24:62:1e:53:e1:36:00:fa:b6:e7:3c:56:ec:9d:74:
1c:55:97:df:1c:46:0a:ff:d6:f2:4a:3b:a0:c1:fd:ad:80:2d:
d8:28:1b:15:9a:26:8a:5f:6f:70:da:65:08:99:e9:8f:21:8a:
58:a5:71:ff:a5:dc:37:79:73:59:5c:32:0f:7c:2c:24:c7:df:
31:3a:7d:a9:05:0b:78:9c:f3:0d:f6:05:78:71:96:34:e4:9b:
e3:ed:0a:0f:b9:a1:39:35:0a:3a:20:6a:9e:5a:c1:06:0b:6c:
d7:ea:81:99:d2:6c:6e:e1:ba:00:fb:7b:21:a0:a2:ba:04:e2:
8c:b3:df:4d:54:ba:8d:b2:fd:89:68:2a:9e:5a:c1:f6:50:24:
58:8b:00:f2:f8:6f:07:ec:7e:35:df:be:c7:84:21:90:2e:9a:
69:e8:d4:4a:3e:7b:76:42:2c:f0:60:53:ac:c9:80:53:70:bd:
76:a5:56:0d:3a:d6:7c:6c:27:4f:87:96:61:4f:42:26:41:16:
c6:81:2c:01:cd:fb:97:0e:06:a7:de:ee:fe:3e:12:e9:9d:f9:
e8:f8:ec:29:6c:d8:62:39:1e:19:e6:ea:5d:9f:cd:18:a3:2e:
16:5f:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:42:09 2024 by rpki-client on console-fra.rpki-client.org