Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Pn-_WQURSDtJB_pZlGJMKi0HK7I.roa
File: Pn-_WQURSDtJB_pZlGJMKi0HK7I.roa (raw, json)
Hash identifier: +YIvUYNPTcFm1n0KVObmztq2srPPab+S7N9LJmAqLi0=
Subject key identifier: 3E:7F:BF:59:05:11:48:3B:49:07:FA:59:94:62:4C:2A:2D:07:2B:B2
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018CC7944DF4E5306802E136FD5AF1487EE5
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Pn-_WQURSDtJB_pZlGJMKi0HK7I.roa
Signing time: Tue 02 Jan 2024 00:30:34 +0000
ROA not before: Tue 02 Jan 2024 00:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4d:f4:e5:30:68:02:e1:36:fd:5a:f1:48:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 2 00:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e7fbf590511483b4907fa5994624c2a2d072bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:b8:c2:a9:2e:72:0c:8c:40:7d:1c:16:64:
97:c3:55:fa:7f:44:19:cc:af:3b:57:79:54:31:7f:
27:db:f0:6f:ec:02:f3:52:76:3e:85:ab:e9:e2:ff:
1d:cc:d9:2e:24:12:1b:e6:69:10:7e:95:a1:6c:67:
4c:0a:ee:62:dd:5b:4e:04:c0:f6:e2:ae:86:8a:56:
0f:a3:4e:53:4d:84:44:80:b5:b4:2f:1a:a8:cc:44:
62:36:8b:af:51:bc:be:9e:cf:3b:a8:0a:3e:d2:68:
8f:62:35:9e:a7:8f:85:db:d0:06:23:84:ca:ff:d6:
fd:56:ed:e4:80:79:45:40:95:3d:70:6e:54:5b:5f:
4c:5d:5c:83:1c:41:14:e9:c3:6d:11:65:39:00:03:
25:1d:d2:8c:19:f3:72:11:73:2f:31:0c:44:c7:de:
ff:98:5f:fd:04:7a:ea:0e:64:c3:72:4e:1f:68:b1:
23:89:b9:7c:ec:57:17:14:8e:b1:4b:7a:a0:4a:99:
b7:01:3e:78:dd:49:43:c1:18:64:81:c9:32:8a:95:
8e:67:a9:51:e4:17:c9:f7:69:fc:4d:b2:47:36:ce:
9e:db:14:a8:6b:e1:90:cd:d6:40:98:62:0e:a6:b8:
a8:28:93:61:49:a9:47:d3:19:c3:db:5e:c1:5b:32:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:BF:59:05:11:48:3B:49:07:FA:59:94:62:4C:2A:2D:07:2B:B2
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/Pn-_WQURSDtJB_pZlGJMKi0HK7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4a:0b:68:b8:0e:3c:4b:ca:e2:55:fb:85:db:1e:5e:da:99:
68:35:48:fb:1f:9c:3b:f0:1d:6f:c1:f8:ac:37:ed:f6:0d:39:
86:79:f0:ff:10:80:ed:70:36:9c:6a:ce:1a:67:8c:34:e7:3b:
d3:61:a6:d8:8f:e0:46:67:b6:a6:db:33:ab:05:56:4e:50:e6:
49:7c:1b:25:8c:9d:d9:b1:9e:8f:44:72:e7:43:3b:41:09:41:
e2:1e:41:c4:e7:dc:cd:85:ad:4b:43:97:30:cd:62:60:5b:cc:
c3:26:60:38:0b:c0:b4:08:a2:07:f5:62:dd:68:b0:c3:3d:2f:
d2:35:61:a0:31:2e:13:8c:e0:02:50:e3:2a:9f:e2:8a:1d:dc:
e5:7c:04:dc:73:e8:8e:c1:5d:b3:80:b4:ad:d1:41:13:fa:7c:
f1:99:b1:77:da:14:8a:5d:94:93:7a:aa:ce:ce:2b:77:04:e9:
a9:94:f6:30:89:1d:9d:cf:30:00:11:2a:d3:1c:0d:bf:01:cb:
09:87:92:c8:2d:19:c8:a8:39:9b:46:cd:71:85:1f:62:52:a4:
f6:c4:81:df:c1:fc:8f:28:18:1c:9d:05:76:d0:34:69:c0:ae:
cc:db:fd:d0:bc:94:19:09:b0:08:da:1a:3e:4d:0c:6a:c6:38:
26:16:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:40:34 2024 by rpki-client on console-fra.rpki-client.org