Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PDcLu_eQn8fKwK6biU571WbcYu4.roa
File: PDcLu_eQn8fKwK6biU571WbcYu4.roa (raw, json)
Hash identifier: 54ozTH/MVOYu7Wc11qMOEnBSLi+YVtVV21/ehivjg/s=
Subject key identifier: 3C:37:0B:BB:F7:90:9F:C7:CA:C0:AE:9B:89:4E:7B:D5:66:DC:62:EE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DC6815301488C8D2E1E2110A5E2BBD3AC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PDcLu_eQn8fKwK6biU571WbcYu4.roa
Signing time: Tue 20 Feb 2024 12:33:00 +0000
ROA not before: Tue 20 Feb 2024 12:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34661
IP address blocks: 45.149.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:81:53:01:48:8c:8d:2e:1e:21:10:a5:e2:bb:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 20 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c370bbbf7909fc7cac0ae9b894e7bd566dc62ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:96:41:96:e2:b9:ea:5c:3d:a1:6a:2b:28:
e2:02:06:41:9f:e5:9b:60:3c:1e:69:f6:d4:f9:d5:
c7:ac:f6:7b:bc:73:1e:76:47:33:f7:dc:cf:44:c5:
39:c7:7c:09:80:a8:db:0f:44:19:f7:82:f9:e6:c9:
97:4f:44:4c:09:cf:c2:e8:ae:69:23:61:26:f4:ca:
79:44:5e:45:4f:22:af:a4:c3:bb:de:b1:5d:b6:a7:
3b:dd:fa:2b:ec:7c:70:92:9d:02:7b:34:20:97:24:
17:10:47:8f:9a:13:39:76:40:17:bf:0a:5a:04:37:
5b:66:4a:83:c3:5d:1e:22:2a:96:ee:7c:60:6f:dd:
83:2b:f6:df:f2:da:c6:28:e4:65:bd:84:77:33:0f:
dd:1b:bb:d6:b2:8b:f1:f4:cb:a2:f2:e7:2b:74:28:
38:aa:6e:6e:4d:25:71:1e:31:96:71:4f:ac:59:ae:
74:b6:b9:37:c2:1f:01:8d:b3:c3:b4:ff:4b:6c:8d:
a6:25:7e:5f:bc:70:e0:71:a5:21:93:32:4b:c7:b5:
5b:f5:32:08:78:34:9e:85:e8:f3:de:79:a2:2b:c8:
47:e0:f8:61:26:2a:8c:f4:04:48:43:56:b1:45:55:
bf:81:65:9c:55:b8:99:e2:4b:0a:31:1a:27:15:36:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:0B:BB:F7:90:9F:C7:CA:C0:AE:9B:89:4E:7B:D5:66:DC:62:EE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PDcLu_eQn8fKwK6biU571WbcYu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c3:b4:81:ff:98:6c:4d:f4:ac:a5:95:a9:b9:39:39:99:f4:
35:66:c6:5d:07:e9:2b:81:93:ab:67:ba:a8:62:6e:45:6c:b4:
73:72:89:ec:9e:16:5b:5a:20:37:43:d0:8c:f4:9d:91:75:eb:
d5:28:8b:42:d1:f9:d5:4b:1a:52:76:0c:e6:03:d6:f5:78:07:
14:73:bf:b6:af:87:fc:ef:5e:cf:df:7a:4d:f7:a7:b5:f6:f6:
ba:9e:73:5f:ad:ad:b9:d2:16:3a:e2:4f:c4:e1:10:8b:e3:73:
d0:5e:42:3b:a0:d9:97:0f:e2:f0:46:fd:c9:93:2f:5a:c2:ff:
0b:2b:ed:30:2d:9d:fe:b7:14:b0:56:5c:e2:2d:b4:2f:a4:9b:
bf:98:d9:f4:2b:9b:2a:4f:cc:a8:36:78:40:90:3a:e1:49:8f:
8b:40:60:d5:e2:32:00:70:f9:92:f8:23:71:9a:0b:4f:5d:9e:
39:03:2e:89:c6:d1:38:e3:7d:14:cb:74:30:75:c5:d4:ba:4b:
04:40:b5:88:9b:21:e7:8d:fc:f6:04:65:80:0c:d9:17:ed:82:
d6:d4:68:e0:fe:d8:94:05:63:e1:db:7f:aa:3c:15:99:e4:83:
67:2a:6a:3c:f4:bc:eb:5e:20:bb:f0:41:46:bf:8c:24:48:30:
f8:f9:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:25:35 2024 by rpki-client on console-ams.rpki-client.org