Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/PT8vIYp1zxsliZ-zQOSiyIT2wzc.roa
File: PT8vIYp1zxsliZ-zQOSiyIT2wzc.roa (raw, json)
Hash identifier: HvO05HZ5zaK80lUaGqcP54NiiSTpcH9/WUzcBb1cY5g=
Subject key identifier: 3D:3F:2F:21:8A:75:CF:1B:25:89:9F:B3:40:E4:A2:C8:84:F6:C3:37
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003D41DA4D045FFFE2FA8A952D587C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/PT8vIYp1zxsliZ-zQOSiyIT2wzc.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48430
IP address blocks: 92.118.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3d:41:da:4d:04:5f:ff:e2:fa:8a:95:2d:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d3f2f218a75cf1b25899fb340e4a2c884f6c337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:71:aa:e3:9f:2b:33:eb:22:fd:22:e6:b0:
c0:6a:d8:0d:c7:5d:61:f5:b0:ea:b0:c9:f5:7a:85:
dc:d8:e3:a8:35:49:99:21:38:2c:18:3d:c1:2e:36:
0c:72:01:c7:3b:74:4f:7c:d1:78:fa:e9:75:f1:9d:
db:53:78:7c:06:08:16:00:91:fe:79:88:ee:61:9c:
82:c1:53:6f:ba:8a:56:8c:82:47:96:84:43:d3:7b:
c3:19:86:f0:e4:1e:92:7f:07:ab:e0:c4:e6:c1:10:
da:97:a5:3e:bb:c5:e5:df:15:17:a5:4c:c4:b0:1d:
b6:ee:41:00:04:a5:18:e0:a7:28:ba:ca:11:0c:a7:
9e:c2:a1:15:5f:52:7f:87:d4:70:ea:49:f3:c9:87:
26:5c:29:fb:c0:a3:1e:58:b2:d5:bf:f7:22:cf:ed:
33:fc:5f:6c:9d:0c:0e:99:d8:14:93:7b:8f:77:ca:
31:92:3c:72:d3:e5:92:a7:73:0e:b8:48:6d:ab:34:
56:c6:5a:ab:a7:47:f3:85:f6:40:8a:c5:b6:be:d3:
a5:7d:4e:8d:77:94:21:d8:ff:c3:53:7f:fb:2e:0a:
42:a3:73:fa:05:03:77:61:d6:4c:54:b4:11:90:86:
8f:41:fc:bc:82:c4:3a:15:26:09:76:5f:3d:2f:58:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:2F:21:8A:75:CF:1B:25:89:9F:B3:40:E4:A2:C8:84:F6:C3:37
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/PT8vIYp1zxsliZ-zQOSiyIT2wzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.124.0/22
Signature Algorithm: sha256WithRSAEncryption
48:dc:33:64:b4:e7:1a:f5:53:b3:b7:94:59:f0:10:82:c7:65:
2e:4d:68:47:84:3a:fa:d1:5e:2e:22:bb:c4:c1:a1:24:a7:df:
62:64:e8:54:60:82:aa:d8:44:22:c1:1a:47:9f:ab:4b:4e:1a:
b7:8c:05:6d:95:7a:f3:6d:4b:fb:76:56:54:73:3f:ec:9b:5c:
85:30:09:2a:84:c4:e3:46:03:5c:4e:d7:05:ee:7e:e2:1a:19:
e9:a1:7e:b1:15:9b:06:6d:7b:af:5b:2b:77:e7:6f:7e:b2:bb:
1a:2f:df:8f:2d:b1:37:e0:ba:de:00:6a:18:b0:fe:d5:48:1e:
ee:02:5a:54:53:3f:b3:69:13:57:2a:d9:79:a8:39:8b:b3:e0:
26:90:56:af:1e:92:ea:27:d9:6c:99:47:9f:aa:09:b4:3e:ed:
2b:78:a1:f2:6d:69:8f:d2:b4:46:38:fc:6a:60:aa:2e:7a:c5:
79:33:9a:b2:64:49:56:a8:47:63:82:9b:e8:94:b8:b5:70:48:
19:8f:e9:b6:1f:0e:05:1a:df:ee:d9:5b:b7:ab:67:f8:80:0f:
cf:54:83:16:e2:8d:31:d6:a8:20:a0:7c:ea:06:05:1d:8b:9f:
3a:73:ac:5f:1c:c7:12:d7:99:59:b8:ae:53:e1:e2:df:18:e9:
2c:57:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:35:50 2024 by rpki-client on console-ams.rpki-client.org