Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mZ3hhnXUb_QoSgaP9XGzETalaIw.roa
File: mZ3hhnXUb_QoSgaP9XGzETalaIw.roa (raw, json)
Hash identifier: 1QMuEI9/p4QrmgOWVMN7sW0tMWUBWQS7AwafcgkvR7Y=
Subject key identifier: 99:9D:E1:86:75:D4:6F:F4:28:4A:06:8F:F5:71:B3:11:36:A5:68:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802893D74142DF643A7A0E3AC5E9BCD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mZ3hhnXUb_QoSgaP9XGzETalaIw.roa
Signing time: Tue 02 Jan 2024 02:30:58 +0000
ROA not before: Tue 02 Jan 2024 02:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200131
IP address blocks: 194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:89:3d:74:14:2d:f6:43:a7:a0:e3:ac:5e:9b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=999de18675d46ff4284a068ff571b31136a5688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:16:e0:2e:88:79:80:3d:83:cd:14:20:10:
8c:80:df:94:15:a4:e0:f1:7c:3c:a4:dc:bc:c2:e2:
5f:58:0a:91:71:10:dc:45:fa:d6:ef:56:cb:90:90:
d3:e7:47:5e:a9:c8:38:b5:05:8a:fc:93:53:3f:c9:
fe:40:c9:40:82:ae:0d:a6:ea:54:39:bf:e2:5e:48:
fc:4e:db:7b:1a:b9:b5:ff:90:a4:f4:0b:ec:42:b4:
3a:c7:e8:47:9b:86:29:bc:36:bf:be:e2:11:0d:73:
1e:01:9b:f5:67:90:0a:a6:ae:c5:94:f8:fb:1c:4b:
b4:3c:10:88:c3:cb:7d:df:b5:83:ee:56:f9:d1:ce:
48:03:90:cb:89:1b:e2:fa:b3:6a:48:8f:da:a8:cc:
3d:e1:50:46:4d:23:1b:42:ce:b4:86:88:a9:e1:bd:
cd:bc:24:21:4e:82:41:2a:11:35:a4:73:de:4b:b8:
0a:2f:56:07:7a:62:c5:ac:72:cc:4c:af:bf:a9:8b:
88:2b:3e:27:81:28:d4:9a:7c:5a:29:66:93:72:23:
0a:38:62:f3:d1:a7:1b:ac:02:57:21:d4:bd:98:55:
a2:c4:81:8f:2c:01:09:94:c7:04:90:69:22:03:0f:
11:ea:23:1e:f0:9b:c0:0e:93:25:4e:da:f7:7b:6a:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:E1:86:75:D4:6F:F4:28:4A:06:8F:F5:71:B3:11:36:A5:68:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mZ3hhnXUb_QoSgaP9XGzETalaIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bb:05:b2:3b:ae:3a:76:32:e3:c5:ba:d7:89:87:98:29:54:
b6:f1:a2:2f:70:f1:24:49:74:66:a2:68:2e:06:3c:11:ae:15:
77:36:fb:f8:04:3d:22:52:6f:14:0d:ea:d8:ae:85:b3:0a:0f:
d8:d4:ff:25:08:c3:46:81:bc:f1:c9:7a:cd:06:ec:17:a8:5f:
34:9b:db:82:ca:7f:53:7b:be:7e:9b:c2:f7:86:29:2c:e9:88:
fc:3d:92:4a:02:51:63:c3:f1:a1:81:31:94:34:c9:17:05:10:
6a:da:8e:db:2f:f3:f3:c1:5c:f8:7c:01:d0:bc:b0:7a:6f:76:
ed:05:42:19:52:60:1a:0d:1e:3b:3d:88:8e:ae:fb:f3:d9:b2:
f3:f4:54:30:83:f1:15:8a:58:ab:ec:93:cd:d2:eb:89:e8:11:
06:32:26:59:be:ac:67:cf:19:f2:3d:ab:85:9b:b4:84:15:fa:
78:70:82:9b:2e:03:b8:ef:2c:b1:47:eb:bd:13:6a:5d:4e:21:
54:42:11:55:8f:18:7e:5f:40:7b:69:5a:fc:9c:18:1c:cd:d0:
56:06:35:21:45:9b:e9:52:bc:18:68:0e:3a:02:ce:7a:26:39:
73:8c:47:f7:59:42:9f:46:85:0e:3f:18:db:9b:5e:cd:0c:e0:
aa:75:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:32 2024 by rpki-client on console-fra.rpki-client.org