Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/3KPQLaMdfoDKUgK0z2FqtVTZkSs.roa
File: 3KPQLaMdfoDKUgK0z2FqtVTZkSs.roa (raw, json)
Hash identifier: MpnQLdQYE4bfhGUktVv5KRvxzcU9DYuiKry+q1c/xPw=
Subject key identifier: DC:A3:D0:2D:A3:1D:7E:80:CA:52:02:B4:CF:61:6A:B5:54:D9:91:2B
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 018CC26D6524B2FDC079E7F43396EE48C37E
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/3KPQLaMdfoDKUgK0z2FqtVTZkSs.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201598
IP address blocks: 185.69.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:65:24:b2:fd:c0:79:e7:f4:33:96:ee:48:c3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dca3d02da31d7e80ca5202b4cf616ab554d9912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:26:e4:99:ca:fe:3d:81:45:5c:f9:46:ad:20:
a5:a4:e4:f6:63:5e:79:61:2c:7e:a0:06:93:1a:f9:
a1:49:9e:df:c1:fc:c8:4f:7c:f0:27:9e:75:8c:b8:
ad:c0:68:31:ed:70:2e:11:2b:50:b9:e7:c2:5e:2f:
6b:e6:72:99:6f:d8:57:69:1f:b3:69:f6:f7:5d:b8:
86:8c:8c:4a:bb:1b:f8:86:df:d9:22:81:3a:d0:22:
dc:f7:0d:79:4f:8b:4b:ed:a4:47:29:64:39:fc:d7:
64:bb:3a:81:52:ce:b3:0b:54:c3:e3:e0:4a:9c:28:
87:5a:92:ad:4a:18:70:af:5e:e7:ea:aa:7a:34:26:
e8:0d:0c:40:5f:ef:69:18:e5:32:68:bc:05:6c:a0:
cf:52:9a:1d:8b:c9:e1:bd:bf:e8:88:4f:de:6e:c8:
c6:4d:b4:05:1d:6c:ec:b7:2b:bd:83:d4:f7:f0:c6:
a3:74:2d:d1:fa:ec:d7:5d:d5:08:71:d6:60:94:31:
22:0f:63:62:b4:af:fa:97:47:1e:cb:5a:66:76:df:
1d:cc:73:c1:07:70:07:e0:90:db:1e:04:01:1f:10:
9a:30:84:05:8c:54:44:0b:00:b5:61:34:6b:8f:95:
aa:e1:10:34:8e:19:1f:a4:5e:f7:d2:6e:61:9c:83:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:D0:2D:A3:1D:7E:80:CA:52:02:B4:CF:61:6A:B5:54:D9:91:2B
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/3KPQLaMdfoDKUgK0z2FqtVTZkSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.172.0/24
Signature Algorithm: sha256WithRSAEncryption
53:30:2f:b3:41:48:31:62:aa:9b:70:5d:3b:a8:9c:4d:20:4d:
7b:9a:81:22:95:b8:f0:e1:de:02:8f:13:26:24:d9:5a:ff:26:
d2:1d:b0:fc:09:94:5e:c3:b3:93:d9:6e:41:74:f5:ce:98:ec:
57:62:b4:24:80:f1:8f:90:2c:9f:de:20:52:70:bd:35:d2:7c:
38:9e:df:a0:9a:f1:50:a2:18:3d:28:33:07:fc:35:2f:2e:50:
12:3c:e3:e4:07:8a:e7:50:c4:03:fd:7a:c7:fc:3e:ad:aa:77:
4b:16:f8:67:bc:f8:39:c6:29:65:a5:3e:b2:ee:95:f6:df:b7:
44:28:da:6b:43:87:9b:c6:5c:c8:4c:5d:9c:c7:cc:23:7e:8f:
0c:8d:99:88:df:cd:7e:f9:11:c4:19:fc:28:50:56:d2:39:92:
5b:92:5e:df:f1:e2:c2:b5:ba:15:c0:9f:7d:64:ff:c0:84:08:
e7:bd:1b:56:3e:c1:24:8f:ff:15:38:d0:92:ee:6f:73:8f:54:
0d:e9:08:71:e6:cf:17:95:50:19:aa:b0:2e:8f:9d:5b:12:27:
5f:03:fc:e5:ee:03:00:e7:24:64:24:4e:5c:38:48:3b:08:d0:
2f:56:1a:e3:2d:df:9e:5d:1d:34:7a:57:11:aa:4b:a3:76:67:
1f:52:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:16:58 2024 by rpki-client on console-ams.rpki-client.org