Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/3HP-_QGZkx4FEsGSxuLA8J9CrDM.roa
File: 3HP-_QGZkx4FEsGSxuLA8J9CrDM.roa (raw, json)
Hash identifier: B2OI5vQLaQpkW06eYqVQHh0Dx2uVzunJdHkAZmwhRsA=
Subject key identifier: DC:73:FE:FD:01:99:93:1E:05:12:C1:92:C6:E2:C0:F0:9F:42:AC:33
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 018E6598529A301357A8226A7E0C72E12A29
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/3HP-_QGZkx4FEsGSxuLA8J9CrDM.roa
Signing time: Fri 22 Mar 2024 09:57:45 +0000
ROA not before: Fri 22 Mar 2024 09:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2111
IP address blocks: 77.71.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:98:52:9a:30:13:57:a8:22:6a:7e:0c:72:e1:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Mar 22 09:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc73fefd0199931e0512c192c6e2c0f09f42ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:1d:23:90:8f:3d:ed:19:78:25:80:3f:30:
06:19:f5:b9:3c:6d:b5:e6:ec:1a:a0:ae:29:8f:12:
3e:e7:cb:a2:ea:a1:05:12:5c:7a:d8:4d:69:7c:42:
31:7e:32:38:c9:52:ee:f0:62:df:52:93:44:7a:6c:
b0:5e:69:0b:a9:c1:15:85:f6:03:4f:f2:07:19:68:
b2:cc:6d:8c:f8:b0:d6:0a:f2:1b:6d:04:a5:82:33:
7a:d0:08:08:df:c6:96:ab:59:64:c0:95:8c:a7:b6:
bd:da:fa:30:d8:83:6a:db:50:73:e0:ef:07:2d:b6:
b7:cf:11:36:b1:fb:c5:ee:4d:03:d7:8d:5a:25:c0:
ea:d8:4f:b6:7b:44:06:f9:ed:a5:e6:d0:1e:ef:26:
86:2c:35:74:9f:fa:6e:28:58:62:0f:40:c2:cd:8b:
cd:09:6b:5e:8f:09:e5:4b:09:7b:f1:c2:f2:95:77:
47:cb:49:6d:54:46:2c:16:d3:d5:de:6a:3c:f8:25:
82:a6:bf:64:c3:d7:4e:c5:ba:b4:28:f7:01:95:4f:
1a:eb:af:7e:26:64:fd:a1:62:b2:0e:b2:30:3a:04:
b9:e4:9c:3f:39:21:62:e4:c3:d5:aa:12:34:f0:8f:
c7:9f:56:e7:a5:12:3a:a2:a6:b0:05:a7:ef:e2:44:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:FE:FD:01:99:93:1E:05:12:C1:92:C6:E2:C0:F0:9F:42:AC:33
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/3HP-_QGZkx4FEsGSxuLA8J9CrDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:10:bf:28:d4:ce:95:13:dd:61:67:56:e4:c2:3e:fc:87:0d:
2f:05:4b:d3:77:2e:cd:de:89:3e:45:1b:4d:7f:63:97:80:43:
24:d8:65:d6:69:5c:db:99:41:a3:86:0e:2a:26:db:d4:af:f3:
a0:7f:b9:a1:e2:af:7d:74:f6:1b:f7:00:b3:34:8e:94:16:97:
2a:ea:9f:26:85:10:f3:e4:6c:b2:2e:b1:c8:f0:42:7e:8b:24:
d9:a5:95:15:11:18:07:70:a6:b3:4f:c2:dc:bd:87:88:01:8b:
cd:a1:0e:24:5f:61:a2:eb:4f:c5:78:3d:28:0b:d6:3d:5b:4b:
1a:d7:66:bb:f0:50:87:bf:2f:0c:ed:b4:51:34:d7:df:df:5f:
13:b3:5c:31:49:55:4b:c2:04:f2:13:c5:12:09:2d:6a:a2:56:
b5:cc:67:43:36:46:01:db:88:61:b9:df:56:65:41:d2:05:38:
cc:78:3b:bd:e1:eb:c9:31:ac:2d:10:6b:b8:d1:04:ab:d9:20:
b7:32:d4:19:e5:24:d2:78:32:14:ad:12:06:c2:9a:64:b3:f9:
b2:85:55:83:4c:c7:9f:d3:08:84:31:ba:69:70:0e:58:41:88:
45:a5:e5:8c:27:6c:b4:8b:2a:87:ff:7b:95:31:26:83:95:4f:
66:8d:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:51:35 2024 by rpki-client on console-ams.rpki-client.org