Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PViq3eM65gFPgPgLRne53b4zVJs.roa
File: PViq3eM65gFPgPgLRne53b4zVJs.roa (raw, json)
Hash identifier: IGq/P/Rc8mAbbdchFiBVHprnFb8jzsuQDOQB9iYqqq0=
Subject key identifier: 3D:58:AA:DD:E3:3A:E6:01:4F:80:F8:0B:46:77:B9:DD:BE:33:54:9B
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3DAD4E84B549A68C78B31F91F294
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PViq3eM65gFPgPgLRne53b4zVJs.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 185.102.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3d:ad:4e:84:b5:49:a6:8c:78:b3:1f:91:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d58aadde33ae6014f80f80b4677b9ddbe33549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:0a:77:8c:94:ef:8c:b5:d1:4a:fd:7f:56:
ff:67:f7:e1:ee:3e:f3:b5:07:60:f7:6c:9f:d9:25:
89:14:ff:84:bb:32:e4:38:63:60:21:40:3e:ba:51:
c6:19:ab:97:d3:2f:bf:7e:dd:b9:f5:9b:8f:49:fb:
f3:71:16:cf:02:8a:b7:31:6f:2f:8a:5e:f8:1c:a2:
a7:ac:d0:6e:57:b0:a9:5c:68:08:2e:08:ab:00:fc:
a7:bb:a2:3e:7e:e3:82:70:de:86:63:df:3e:9d:6f:
64:cf:0d:32:96:95:dd:8f:c5:c7:98:57:64:61:c9:
9c:4a:4d:6d:42:c8:c8:58:82:63:fe:6b:0f:17:4f:
99:88:00:9b:ab:5d:96:aa:42:11:3e:a5:b0:48:b5:
82:32:11:76:56:e7:08:b8:55:3c:77:cc:87:fa:30:
e3:3d:18:6f:fe:66:19:b6:c4:56:b3:72:52:1f:76:
b0:85:e3:8c:e9:df:4e:c6:de:94:ae:9d:fa:cb:9d:
15:b6:5b:4a:ee:f4:8c:a3:7e:70:5c:84:31:b9:ac:
dc:17:fc:7d:00:fe:54:1a:a9:f5:6c:c8:73:8d:50:
d9:e5:08:3c:74:cd:76:a2:fe:ec:fd:ea:96:af:78:
a3:3a:6b:0b:b3:ae:a9:56:8b:ac:0d:ae:ac:f4:f3:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:58:AA:DD:E3:3A:E6:01:4F:80:F8:0B:46:77:B9:DD:BE:33:54:9B
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/PViq3eM65gFPgPgLRne53b4zVJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.172.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:28:27:1e:64:eb:09:41:45:c4:d6:ab:90:94:b8:8e:bd:68:
15:21:96:f9:66:5a:80:7c:07:f2:f6:fd:c2:0e:31:03:fd:69:
b4:66:7b:c7:c4:b0:bb:a9:cc:d6:e8:af:e3:27:34:0d:2d:c5:
c5:de:bb:9e:a6:7a:24:e4:6a:a7:12:56:f4:ce:d6:ae:42:f2:
81:fb:84:f9:ca:32:dd:e7:3b:54:d7:45:f5:31:80:7e:e0:ff:
61:2a:b0:92:18:77:0f:88:97:cc:06:60:72:70:8e:db:a7:76:
2e:83:3a:75:2b:f1:f5:44:65:cc:13:13:af:7a:f1:65:c5:a2:
1f:0a:7e:64:58:c2:95:cb:71:32:be:74:20:8a:4d:c1:ce:db:
d6:98:ed:b9:f9:ca:f7:dc:5b:ba:3c:93:5f:27:74:09:a9:53:
b0:8d:e7:92:a8:cd:5e:0e:de:a9:c9:6a:cd:6a:f0:13:da:19:
50:0f:46:39:18:b6:05:11:63:c1:fc:17:60:5d:97:fd:6e:bb:
58:04:29:87:0d:7b:40:78:4c:df:5a:4e:6d:6a:8b:54:56:f4:
4a:73:df:31:26:ed:d7:10:76:ed:b9:34:10:1f:d9:b8:d2:4a:
57:4c:b6:6c:6b:8b:f4:76:f6:80:47:55:7f:7d:4c:39:05:d6:
49:74:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:29:41 2024 by rpki-client on console-fra.rpki-client.org