Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ppj1X1A3qjSwi_tykVoTxWaMSwc.roa
File: Ppj1X1A3qjSwi_tykVoTxWaMSwc.roa (raw, json)
Hash identifier: +1eGu3svDefhhkKRt0+88MGpZYKQ1K7V5O9EZ4wr3m4=
Subject key identifier: 3E:98:F5:5F:50:37:AA:34:B0:8B:FB:72:91:5A:13:C5:66:8C:4B:07
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A362F63144B90B27D452FD2CD29F9
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ppj1X1A3qjSwi_tykVoTxWaMSwc.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134729
IP address blocks: 95.82.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:36:2f:63:14:4b:90:b2:7d:45:2f:d2:cd:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e98f55f5037aa34b08bfb72915a13c5668c4b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:a7:69:64:2a:92:1e:5d:7c:e0:fc:ff:d0:
af:1b:71:47:44:25:42:c7:0c:56:d0:33:20:10:72:
ed:dd:33:c7:4a:d1:81:41:8e:11:d4:fc:3d:22:8c:
73:c5:b2:8c:b4:03:3a:43:cf:48:6e:ff:1f:b1:3e:
b1:d6:61:7f:0c:68:a3:31:53:30:a6:0f:81:c8:34:
10:ea:16:3c:b3:7a:9c:78:70:e7:44:3b:ea:23:08:
ce:bb:b6:18:b3:f8:11:05:ab:e5:af:14:f5:4b:49:
ec:8a:94:11:65:b8:cc:10:60:ee:ea:25:d5:63:6e:
56:ef:6a:c1:b1:7e:41:de:42:45:b8:51:9a:9f:33:
8b:ef:2e:bc:58:5f:9b:ee:14:31:e6:27:72:2c:6c:
b6:48:13:1b:03:84:ae:b9:9c:74:67:b7:0e:fd:43:
f7:4a:4a:79:e8:cb:ca:97:75:50:b6:d3:2d:4f:50:
2d:f5:78:a1:1d:b6:ee:f0:65:70:bf:62:69:b9:44:
3d:9f:8a:94:64:5d:2c:b1:9e:f0:19:ba:89:16:d9:
91:c6:09:6c:10:bc:64:b3:56:e7:14:b9:90:7c:d1:
34:ce:99:d1:a4:d8:1d:a9:fe:1b:a1:e6:8a:34:15:
c9:1e:d1:2c:7e:c9:7e:3b:ad:a9:ff:aa:ee:75:75:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:F5:5F:50:37:AA:34:B0:8B:FB:72:91:5A:13:C5:66:8C:4B:07
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Ppj1X1A3qjSwi_tykVoTxWaMSwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.48.0/20
Signature Algorithm: sha256WithRSAEncryption
78:de:f8:d8:27:bf:5b:91:19:46:c9:3e:e8:1b:c5:da:39:f2:
37:5f:55:23:74:2b:53:e8:4d:a2:8d:3f:62:8e:09:5f:f0:ee:
ee:5b:17:f8:90:17:a6:af:24:3f:d6:a9:bf:95:02:5a:26:70:
9d:91:f1:1d:10:f8:51:ab:47:5b:d7:9e:46:b2:66:1b:78:e8:
0c:86:b8:c3:08:c2:f5:52:22:23:9e:6f:35:30:e8:35:3e:fb:
6c:7f:af:c2:1e:ad:b9:16:40:cb:e4:29:51:6a:84:d2:d2:62:
a9:d7:44:b1:6f:e0:33:bd:0f:d0:90:a8:f5:d2:e3:d0:25:d3:
52:49:a8:e7:2c:c2:e6:12:5f:4f:d0:a9:c0:41:72:8f:9e:26:
42:f7:0e:f1:ee:3b:40:fd:bb:0c:c1:59:a6:4e:ba:5c:d7:f8:
7f:6b:25:15:ea:14:a3:9e:ef:27:a6:10:d6:b4:dd:98:37:28:
85:f0:23:12:2a:f9:c3:6f:cf:ea:89:a3:d4:c6:25:b9:79:b1:
10:f8:e3:2f:f5:62:2b:10:2d:c5:7e:8a:e2:fb:c6:b6:26:18:
db:b5:b3:0c:c1:a0:7c:de:c3:99:83:74:f4:36:9d:48:d5:b5:
38:ce:c7:58:d0:c1:21:24:37:f9:18:00:a0:5b:9e:78:a1:5e:
59:8d:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:43:42 2024 by rpki-client on console-ams.rpki-client.org