Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PENUFgRG-D2a1m8Ouq4D_IjQC-Y.roa
File: PENUFgRG-D2a1m8Ouq4D_IjQC-Y.roa (raw, json)
Hash identifier: TyB6cjewfGArWVchi+ovTrXc0TtezTHqpqGzQXq1DjI=
Subject key identifier: 3C:43:54:16:04:46:F8:3D:9A:D6:6F:0E:BA:AE:03:FC:88:D0:0B:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DC75FCACA1DDA6537B5989B979394869D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PENUFgRG-D2a1m8Ouq4D_IjQC-Y.roa
Signing time: Tue 20 Feb 2024 16:36:00 +0000
ROA not before: Tue 20 Feb 2024 16:36:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.131.134.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:5f:ca:ca:1d:da:65:37:b5:98:9b:97:93:94:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 16:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c4354160446f83d9ad66f0ebaae03fc88d00be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:23:5e:fb:e3:cc:d1:de:64:dc:a5:be:dc:
20:64:25:5b:f9:09:5f:9c:94:c4:ae:af:8c:87:91:
ab:6f:93:dc:f9:1b:ea:5e:40:c1:1c:5f:21:97:89:
7f:72:f7:e4:26:90:aa:0d:3c:47:23:4c:e9:98:38:
ee:0d:8b:dd:ec:13:4c:08:6e:d5:6f:51:ad:07:3e:
ee:42:f9:1d:80:0a:42:eb:97:1d:a6:ed:67:2a:60:
be:7c:8e:38:7b:d0:ed:1d:81:b5:6c:22:7a:bd:a8:
7d:4d:39:51:f7:9a:b6:7b:fd:18:43:08:38:e4:ae:
13:7c:99:f0:ed:3b:6e:77:b4:d4:58:dd:db:6d:0c:
11:58:e0:19:d3:eb:61:ea:83:ea:67:5d:01:65:2e:
98:dc:8a:dc:21:12:4c:97:39:ca:6c:bb:c5:79:ae:
c8:d5:4a:0b:b9:82:d6:63:13:34:cc:ae:6e:38:fa:
1d:d6:ee:cb:9f:d9:12:a4:68:5a:05:83:a6:2a:d2:
17:5c:19:36:f9:bb:4b:e9:90:e4:7d:67:25:98:eb:
4f:fe:1a:43:65:8a:de:57:2c:98:56:a0:3b:d8:48:
d9:e6:d5:14:1e:ac:f7:e5:1d:66:d7:8d:de:1d:ae:
ec:7c:81:f7:63:b4:11:52:ed:86:30:67:ef:73:d2:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:54:16:04:46:F8:3D:9A:D6:6F:0E:BA:AE:03:FC:88:D0:0B:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PENUFgRG-D2a1m8Ouq4D_IjQC-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.134.0/24
185.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2b:e6:66:2e:28:40:42:cd:25:25:14:1f:d3:bc:29:5b:13:
7f:db:9e:d3:1a:54:85:03:0c:0e:8d:2b:46:24:3f:45:1b:57:
a0:2c:81:e7:db:18:45:5c:7a:7d:84:69:65:1e:97:5d:a5:04:
ed:0a:3a:24:83:78:aa:d3:81:b2:8e:63:b1:e6:78:18:9b:49:
c0:1e:19:ba:a4:1f:c9:ce:c6:13:5b:65:bb:14:2e:f6:4f:73:
1a:8e:15:7d:23:1a:22:47:72:c6:82:26:3c:60:64:79:e3:7f:
06:18:c2:a0:d4:0c:7b:60:bb:81:83:94:b6:cd:ff:13:60:52:
48:0a:5e:20:aa:4b:fe:0b:da:7a:20:3e:33:e7:5e:cd:43:79:
31:00:fd:c3:f7:11:56:e4:11:5f:43:4d:7c:ec:c6:8b:c6:d8:
09:82:24:54:bd:13:b9:e5:be:7e:b9:24:ca:80:5a:2c:b5:59:
d3:cf:59:76:f2:be:04:36:a7:33:86:31:83:dd:e0:a0:28:54:
55:03:86:da:fe:76:b7:c7:9b:02:16:f9:f7:18:8f:b1:24:c7:
af:a4:f6:b2:52:fa:86:80:a9:88:6e:62:0a:2c:53:be:f4:26:
3c:fa:51:d8:58:04:b8:17:b7:0c:48:06:2f:54:37:f8:f3:18:
47:cc:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:34:13 2024 by rpki-client on console-ams.rpki-client.org