Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/3fRSPLNayKtWkagQyroA_JGKblU.roa
File: 3fRSPLNayKtWkagQyroA_JGKblU.roa (raw, json)
Hash identifier: /6B+wqTuPtxWkIbkZ67rN16g1cQpAdh+aDK4C7FOZsM=
Subject key identifier: DD:F4:52:3C:B3:5A:C8:AB:56:91:A8:10:CA:BA:00:FC:91:8A:6E:55
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 018CC2DB631F41A9DEB207E653DCF7F52717
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/3fRSPLNayKtWkagQyroA_JGKblU.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 185.37.4.0/23 maxlen: 23
185.37.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:1f:41:a9:de:b2:07:e6:53:dc:f7:f5:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddf4523cb35ac8ab5691a810caba00fc918a6e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:4a:e1:6b:66:b2:dc:08:97:40:a1:06:fa:
f2:8d:8c:30:ea:0f:af:0e:d0:9a:d0:df:42:23:61:
e1:02:5a:e2:f6:1f:fa:a7:0c:09:17:6e:eb:ca:0c:
e7:e7:5e:5b:b7:bd:97:d0:8a:2f:50:98:4d:51:12:
ef:bc:7f:11:6b:77:a6:f7:8e:34:78:cb:ad:ba:d7:
f3:74:bc:e2:71:48:b3:a1:ae:f9:76:aa:f2:3a:4d:
01:df:e9:ae:1b:aa:bb:1c:95:63:f8:47:6a:4f:16:
28:bd:32:26:2a:c2:84:bd:1f:db:2e:9a:dc:75:f1:
64:75:f8:c9:c6:ab:41:eb:4e:14:5e:65:52:ad:8f:
c1:38:a1:31:11:fa:bc:d5:18:64:66:84:6d:9f:14:
17:67:4b:18:b0:89:ce:1f:82:55:0c:03:44:ca:ff:
28:b8:46:41:88:1f:9f:dd:76:07:86:26:94:9a:d7:
1c:b4:ee:3c:dd:c4:53:c1:96:dc:03:85:e3:66:12:
73:df:28:0d:02:d2:55:f0:8b:7c:80:08:79:f2:d1:
3a:6f:45:c3:09:11:5d:fa:06:6b:98:5c:7d:8c:8a:
70:f9:89:09:63:6b:f2:f5:17:51:99:81:e1:07:e6:
39:9c:0e:e5:17:ad:40:de:ef:9e:7b:2d:9e:c4:9a:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:52:3C:B3:5A:C8:AB:56:91:A8:10:CA:BA:00:FC:91:8A:6E:55
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/3fRSPLNayKtWkagQyroA_JGKblU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.4.0-185.37.6.255
Signature Algorithm: sha256WithRSAEncryption
33:d2:0c:8d:52:e5:a8:29:17:19:12:c1:94:a1:8e:7b:8f:55:
76:eb:36:ee:2c:45:b5:ae:e9:ca:71:60:dc:53:6d:98:50:64:
b8:77:d8:6b:f0:79:39:36:c8:46:5b:c4:70:e9:2d:3c:43:8e:
f6:43:10:5d:92:2e:c2:2e:5b:10:a5:9d:66:0e:5d:d8:7f:32:
dc:29:95:4c:78:ff:6b:26:ec:62:7d:75:f9:d1:2b:7b:d8:17:
4c:e2:d8:eb:a6:be:73:30:ad:f2:69:ce:ec:b3:76:bc:4c:83:
b9:bd:67:5a:80:53:ab:73:cb:c8:be:db:af:57:92:70:8a:a7:
e9:2f:3e:b3:42:39:39:58:36:05:eb:2f:7e:19:e2:5a:c4:28:
19:fc:7e:7c:11:79:9f:40:ec:fb:e9:cd:8b:e0:91:f9:d1:53:
78:87:05:da:c2:0f:a1:f8:2b:9e:cc:c9:2c:31:bc:87:f2:6c:
90:f1:a1:12:77:1e:dc:06:92:6a:a7:68:10:a6:05:e3:60:20:
29:b0:c3:8f:5d:74:d9:44:9c:06:8f:31:4d:8c:64:00:2f:48:
bf:2f:36:57:74:5c:48:30:59:a8:ef:fa:43:dd:65:0a:2a:82:
71:a6:bf:21:58:c6:5c:67:e8:40:87:11:b6:37:45:3f:96:09:
ab:ec:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:20:27 2024 by rpki-client on console-ams.rpki-client.org