Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3yPyvySNZlDmuBkhMAfCC0Fod-Q.roa
File: 3yPyvySNZlDmuBkhMAfCC0Fod-Q.roa (raw, json)
Hash identifier: O9N5jUQ9wg6spyTlGKwdUMmofxpXirKAUEchMkad94M=
Subject key identifier: DF:23:F2:BF:24:8D:66:50:E6:B8:19:21:30:07:C2:0B:41:68:77:E4
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9478037C7F28F6141F1BF2B9CD959
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3yPyvySNZlDmuBkhMAfCC0Fod-Q.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209850
IP address blocks: 151.237.68.0/24 maxlen: 24
151.237.71.0/24 maxlen: 24
151.237.69.0/24 maxlen: 24
151.237.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:47:80:37:c7:f2:8f:61:41:f1:bf:2b:9c:d9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df23f2bf248d6650e6b819213007c20b416877e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:6a:d9:f4:46:f5:ad:96:9f:a1:e8:a0:bd:
30:bf:fe:58:85:9a:4d:9f:b3:21:4b:1c:0f:c6:47:
8e:08:29:05:1d:7b:52:75:a0:40:50:80:53:00:cc:
e5:16:57:5d:61:4d:4c:4d:51:c4:f0:cd:d5:50:d1:
7c:71:f8:14:42:4c:d7:ae:7f:16:73:2f:10:83:4d:
0e:53:2e:76:85:56:f4:bb:bf:3c:91:7b:06:67:29:
68:b9:03:d7:0f:50:31:b4:0a:1c:2e:6c:91:06:b1:
73:d8:17:2e:67:d3:a9:5a:3e:81:3f:dd:1f:99:6f:
8d:99:0d:8f:e5:6e:3c:fc:84:cd:5d:52:76:40:20:
41:d8:c4:74:82:b4:db:f9:27:e7:ab:c1:ec:40:a9:
ee:64:68:11:22:9b:d5:9f:f1:d3:11:60:66:db:57:
d7:2c:8f:0a:93:56:d8:7b:7d:aa:4b:25:ea:96:4e:
7a:07:be:cd:78:a7:3f:0f:02:c6:7f:d2:85:ea:d7:
fd:68:2d:ef:a2:e5:78:1a:d0:ef:de:e1:a0:33:93:
a8:93:b4:59:9a:72:73:ba:b7:7e:9c:8d:3a:11:15:
e7:69:b9:92:96:69:2b:49:14:0e:23:20:8b:0b:c2:
32:70:a9:ad:1f:f9:9e:72:e3:cf:81:7f:32:e2:03:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:F2:BF:24:8D:66:50:E6:B8:19:21:30:07:C2:0B:41:68:77:E4
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/3yPyvySNZlDmuBkhMAfCC0Fod-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.68.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:33:3d:d9:11:64:ab:6a:00:14:ff:33:e5:6f:d5:15:b6:0d:
0e:6a:a9:f6:84:e3:44:66:48:28:85:34:87:6e:f5:aa:1e:a8:
ee:e7:58:6a:1b:99:02:52:2a:8c:8e:04:f4:f0:46:d2:02:e4:
f0:c0:ac:32:d6:c4:c0:c4:36:3d:f7:5a:91:9c:7e:e8:b7:0c:
ec:26:d6:6c:20:f0:92:de:66:12:32:8d:0f:a9:09:f0:11:66:
64:cf:17:86:ff:f8:38:0a:0e:ed:91:2e:6e:db:5a:0e:71:05:
52:ed:7f:f0:2f:dd:c6:ca:e7:49:bb:4d:bd:c8:7d:87:7b:dd:
3a:15:dc:61:e0:54:d9:0c:8c:70:c3:de:cd:af:1f:2c:06:04:
da:88:04:c6:68:9f:97:f1:36:c1:d6:8b:37:bc:09:4a:d4:f1:
ad:db:c4:9b:e6:1c:cb:87:f0:1c:62:ff:a6:25:6d:81:42:61:
14:ad:5b:55:ff:18:23:9e:ad:e8:af:27:36:4c:be:68:1d:44:
22:e8:08:cd:b1:2f:7b:22:0c:fb:7b:10:75:44:6a:28:6b:c7:
ee:89:f9:a2:74:a0:c6:18:8d:b8:96:11:b7:e0:14:72:15:24:
e6:14:79:17:1d:53:45:f5:c3:52:66:b9:59:0a:11:a5:fe:bc:
91:68:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:58 2024 by rpki-client on console-fra.rpki-client.org