Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/3SbOfJ60h-wCYSjMST_edIFSm2g.roa
File: 3SbOfJ60h-wCYSjMST_edIFSm2g.roa (raw, json)
Hash identifier: TmI+1Aqdc3ruq38XjOxIE3lX/8tZQzH8PFAXz5MYS1A=
Subject key identifier: DD:26:CE:7C:9E:B4:87:EC:02:61:28:CC:49:3F:DE:74:81:52:9B:68
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190E3B6539675A05817298C8A85C50D3325
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/3SbOfJ60h-wCYSjMST_edIFSm2g.roa
Signing time: Wed 24 Jul 2024 07:48:15 +0000
ROA not before: Wed 24 Jul 2024 07:48:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:b6:53:96:75:a0:58:17:29:8c:8a:85:c5:0d:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 24 07:48:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd26ce7c9eb487ec026128cc493fde7481529b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:42:f0:45:d5:e7:7d:11:cd:6f:cf:05:bf:
21:6b:29:c3:f5:69:8b:1c:8e:38:b0:1c:ab:87:be:
45:3a:0e:73:bf:e7:34:bd:7c:03:27:fa:7f:37:76:
94:63:e2:3f:86:9d:59:fc:81:5f:e2:bd:39:82:87:
16:b1:49:42:67:41:41:6f:76:c6:39:fc:fc:bb:cb:
55:ec:2a:5c:ba:f0:a8:ae:01:5f:ae:a7:10:e0:0b:
5d:b8:1f:a7:92:d8:d3:9d:3a:ee:34:04:e5:d5:34:
67:15:f3:da:8e:af:20:c2:44:96:0c:8a:41:b6:d1:
88:87:6a:76:53:2d:9f:5e:06:30:8c:47:d6:8b:8e:
9a:f6:7e:a8:e7:ab:d3:8b:73:76:ce:f6:1f:95:a0:
24:df:29:db:50:9c:5b:b9:e1:d5:da:fc:53:2f:28:
32:64:d7:64:13:d9:ba:ca:4a:da:e3:50:1b:77:aa:
c0:8a:e8:05:7c:04:cf:c7:a5:2d:d1:56:65:af:0b:
46:72:3c:c1:16:77:0a:89:b1:f4:51:7c:b9:96:e3:
ef:90:f7:31:98:5b:0a:59:84:ef:3b:c4:e1:35:89:
32:36:65:76:28:8c:de:a3:7e:31:65:1f:1e:4e:21:
c9:25:99:22:a0:8b:3d:03:43:4c:43:f2:74:61:6b:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:CE:7C:9E:B4:87:EC:02:61:28:CC:49:3F:DE:74:81:52:9B:68
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/3SbOfJ60h-wCYSjMST_edIFSm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.243.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4e:bd:61:1b:74:0e:8c:50:cc:11:d4:69:24:de:6a:78:78:
08:0e:6f:ff:56:bb:29:52:74:76:b8:17:70:d4:41:80:e5:43:
29:d9:e7:d1:26:0e:03:ee:ce:0d:79:11:18:d5:a6:eb:e4:f0:
71:b3:fb:36:70:a7:56:0d:66:41:21:b8:99:f7:ad:6e:fd:a7:
f5:d2:f3:9e:92:5a:a4:7b:03:37:df:73:1c:ce:5c:7a:c2:dc:
7e:f7:0d:53:d1:46:1c:fc:3a:b3:38:72:8f:2d:a5:1d:29:df:
c2:4e:bd:b2:be:4d:28:12:30:53:fe:d4:22:a4:a6:98:47:1c:
6f:9b:6e:9d:f1:62:21:5b:e6:66:2f:c7:1a:46:d7:99:c3:c0:
89:82:ea:32:46:43:2d:1d:25:66:0f:03:dd:2a:0e:59:8c:cb:
bf:2b:02:02:70:21:93:65:d6:cf:b8:d0:e3:48:34:ce:68:ec:
9e:87:93:2f:2d:4a:3d:ce:fe:d9:50:ce:92:0c:73:ee:1d:f1:
f5:eb:32:07:7f:5e:ce:74:75:15:a5:55:62:0d:e1:18:14:ac:
e4:28:7d:a7:2a:4e:e7:7e:f4:ab:4b:bc:00:84:cd:b3:c0:69:
f5:2b:6a:e9:c1:18:0a:2b:54:19:52:f8:e4:af:2c:4a:83:e2:
fb:6e:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:50:15 2024 by rpki-client on console-fra.rpki-client.org