Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/3z4SeykjCCXuXI_B39fSzO8HBQI.roa
File: 3z4SeykjCCXuXI_B39fSzO8HBQI.roa (raw, json)
Hash identifier: 4U5ljk+C1aHDYQNrbzD63aTk0rilEKbuygrcstLfheo=
Subject key identifier: DF:3E:12:7B:29:23:08:25:EE:5C:8F:C1:DF:D7:D2:CC:EF:07:05:02
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 018CC348BF3C8BC87FF271A0D6E4D45F8871
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/3z4SeykjCCXuXI_B39fSzO8HBQI.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60717
IP address blocks: 176.111.206.0/23 maxlen: 23
185.55.104.0/22 maxlen: 22
185.80.183.0/24 maxlen: 24
2a04:d340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:3c:8b:c8:7f:f2:71:a0:d6:e4:d4:5f:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df3e127b29230825ee5c8fc1dfd7d2ccef070502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:10:dc:f2:9f:f6:76:87:8f:8d:f9:22:18:
f9:0e:07:c1:01:e6:d2:86:7f:8a:97:a1:41:aa:a0:
e8:95:76:cc:5d:5f:f8:c5:49:f2:36:d4:50:25:7a:
4d:fa:7c:8a:ed:cb:0d:6a:6a:cb:9b:ba:8f:e9:e2:
4b:b6:20:b5:52:f4:13:84:11:53:57:83:c3:da:fc:
12:af:bd:90:22:89:db:47:f7:55:22:6f:83:07:8b:
7c:6c:c9:55:fc:98:10:3a:d9:c0:30:d6:73:14:6b:
c2:ac:42:bb:59:3c:29:80:a7:68:5e:80:95:00:29:
9f:8a:dc:49:26:58:de:e8:3c:ee:ae:bd:fa:6a:8e:
9d:44:36:0f:f8:df:71:e2:16:14:6a:28:9a:20:6e:
50:e0:ec:21:7d:76:13:8b:ca:e3:ab:f4:83:47:cc:
b3:35:b4:c4:37:d9:24:7b:30:bf:18:2a:10:2a:b3:
5e:ef:b0:96:db:81:a0:11:4d:57:9f:c8:cc:66:05:
be:75:8c:00:f4:72:0c:2a:06:ad:12:2d:cf:f0:2a:
a9:70:c7:c2:7b:fb:83:44:65:37:f0:12:f4:f3:5e:
7d:c1:0b:96:45:fb:35:f9:69:c0:ab:42:5f:64:ea:
ad:e0:01:e2:06:9e:25:2a:d9:16:a4:d8:28:44:85:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:12:7B:29:23:08:25:EE:5C:8F:C1:DF:D7:D2:CC:EF:07:05:02
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/3z4SeykjCCXuXI_B39fSzO8HBQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.206.0/23
185.55.104.0/22
185.80.183.0/24
IPv6:
2a04:d340::/29
Signature Algorithm: sha256WithRSAEncryption
98:95:e8:42:17:2f:64:7c:98:1f:c7:ac:dc:6f:41:db:51:2e:
3a:c0:48:1f:cf:10:53:c2:98:7e:26:d7:94:ec:94:45:1b:d5:
eb:6d:d3:c2:d0:04:8f:b2:59:df:da:81:15:af:df:e2:cc:cd:
86:57:b2:d1:6a:8b:89:6b:7b:ba:89:96:45:c6:98:28:cf:7c:
d7:16:ee:17:b2:59:88:5b:cf:bb:a9:0a:62:63:9c:58:a4:21:
45:02:e8:f4:84:9f:43:3c:71:ae:e2:1f:c5:73:10:57:86:6d:
d4:03:53:20:e1:e2:00:2d:96:5c:65:ff:9f:bc:07:4e:4d:85:
ea:57:a3:2e:df:d5:28:b7:97:04:6a:27:86:e1:b2:4a:8b:17:
1d:e5:f7:26:77:40:64:40:fc:44:32:7c:0c:76:95:43:bb:b3:
44:ac:b5:34:e5:97:8a:ad:6b:c2:a5:51:c2:20:23:1c:83:44:
ef:0b:ea:39:b8:ee:dc:bc:43:78:90:7f:5d:e0:0c:6d:1c:31:
56:21:8d:7e:cc:c2:71:0f:ae:c6:3a:13:08:d1:54:a8:17:73:
2e:cb:97:2b:cb:4f:d1:56:c1:31:f4:8e:4b:49:b7:de:af:43:
75:df:8d:29:3e:e9:29:c6:e6:d8:7d:9f:b4:8d:72:d9:91:fd:
a6:41:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:28:17 2024 by rpki-client on console-ams.rpki-client.org