Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/3s068CnHUYE2tkWQ74XCwBZR8i8.roa
File: 3s068CnHUYE2tkWQ74XCwBZR8i8.roa (raw, json)
Hash identifier: 8FrH634pdrSGPaGc/OzS/S1N4Zfh3Jw+aCDaklLvM/k=
Subject key identifier: DE:CD:3A:F0:29:C7:51:81:36:B6:45:90:EF:85:C2:C0:16:51:F2:2F
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 018CF450BB35A954C4091A76729A9072ABE9
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/3s068CnHUYE2tkWQ74XCwBZR8i8.roa
Signing time: Wed 10 Jan 2024 16:59:40 +0000
ROA not before: Wed 10 Jan 2024 16:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202550
IP address blocks: 185.206.252.0/24 maxlen: 24
2a0f:9780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:50:bb:35:a9:54:c4:09:1a:76:72:9a:90:72:ab:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Jan 10 16:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=decd3af029c7518136b64590ef85c2c01651f22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:26:f7:fe:c7:9d:52:32:c6:2e:18:38:e8:88:
a1:5b:70:ed:70:3e:98:26:77:69:32:c6:95:f9:f8:
af:64:5f:9f:3e:0f:71:3f:03:15:a1:e4:ea:12:81:
92:6a:28:c8:65:17:b5:13:e8:09:b2:da:b8:66:22:
58:9b:9a:c6:52:f4:2c:4a:1e:b0:68:49:9b:f2:0d:
8a:dd:be:da:11:a8:ac:6a:5a:bc:26:b4:1f:87:a0:
1a:cb:d4:08:21:03:8f:e6:35:0a:b3:8b:98:3f:2f:
e0:d2:31:10:4b:1a:ae:9c:7b:73:a5:97:fe:d3:57:
0a:e1:16:22:ca:28:74:15:82:f8:73:3e:bd:bb:ae:
bc:e4:94:04:25:60:12:c1:f6:a2:80:ce:96:0c:36:
85:82:07:e0:9b:74:05:d0:66:dc:0f:ea:aa:d5:23:
16:b2:c9:71:85:6e:c8:db:89:0b:02:4f:0f:05:1f:
21:f8:92:ad:99:73:be:c3:12:a7:f7:10:38:d9:24:
c1:5e:70:cf:e0:a4:7d:45:fb:18:20:c8:7a:77:be:
23:3e:85:f0:d3:16:14:21:5b:40:93:6d:e0:70:ad:
fd:02:af:b2:db:d0:9e:8b:57:24:3f:a1:03:6d:82:
a2:e8:c1:46:cd:15:60:12:03:33:2e:2f:7f:ff:41:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:3A:F0:29:C7:51:81:36:B6:45:90:EF:85:C2:C0:16:51:F2:2F
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/3s068CnHUYE2tkWQ74XCwBZR8i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.252.0/24
IPv6:
2a0f:9780::/29
Signature Algorithm: sha256WithRSAEncryption
44:79:2a:32:68:3a:18:15:77:d1:57:44:97:2c:a7:37:17:46:
0c:b7:c9:16:e0:e0:be:31:a8:c6:37:2c:8c:aa:1e:96:98:42:
6c:0e:03:1e:89:21:de:9c:88:51:18:50:03:6b:c8:d9:0f:cc:
60:90:dc:b7:4b:90:df:17:7d:aa:b1:34:41:b1:1a:05:7b:7a:
67:ab:9a:79:e6:b0:03:bc:29:53:ef:60:c7:20:18:3b:b7:d4:
a5:b7:a7:46:79:6e:21:09:ff:81:f9:14:96:cb:1c:f5:7d:8f:
0a:0e:e5:64:02:c7:37:c6:73:6b:e2:62:5b:a1:33:c9:31:1b:
97:f6:93:c9:63:d7:f7:8d:90:63:75:3a:4f:c4:3d:97:b4:74:
e5:46:35:53:87:d9:ce:8c:0c:eb:f7:3a:bf:65:f5:f0:62:23:
b5:09:c0:b2:ff:63:04:00:55:bc:c6:ac:76:44:0d:4a:f8:6a:
fc:e1:de:e6:7f:b0:1e:2b:42:65:b1:60:f2:02:ec:30:17:f1:
cf:b1:33:8d:0a:12:a6:ef:54:a7:db:5e:ce:7e:4d:d1:04:cd:
02:ab:39:37:4f:33:b6:e8:68:fd:96:4c:a8:8b:ac:c9:5d:a9:
60:b5:bd:4e:cd:53:46:93:59:45:01:4f:9e:b6:0a:a2:f2:44:
2f:c2:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:14:32 2024 by rpki-client on console-ams.rpki-client.org