Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PDtiGQnN3NNdKdV3BMg0q21purM.roa
File: PDtiGQnN3NNdKdV3BMg0q21purM.roa (raw, json)
Hash identifier: 0hC6K2ex7Yk7jLM9K7C6aCvddyOagS5e3zaPB3/ClBQ=
Subject key identifier: 3C:3B:62:19:09:CD:DC:D3:5D:29:D5:77:04:C8:34:AB:6D:69:BA:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E00E9880F35D926F03A5F354C582C27B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PDtiGQnN3NNdKdV3BMg0q21purM.roa
Signing time: Sat 02 Mar 2024 20:44:48 +0000
ROA not before: Sat 02 Mar 2024 20:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 84.54.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:00:e9:88:0f:35:d9:26:f0:3a:5f:35:4c:58:2c:27:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 2 20:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c3b621909cddcd35d29d57704c834ab6d69bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:27:1a:fb:fb:0d:87:d9:75:a8:18:39:1f:
d6:41:d3:b3:5b:f5:26:21:76:1c:51:3f:7c:6f:e8:
f9:35:a7:c8:b2:ef:bb:0f:f0:90:75:28:8a:1b:74:
ad:39:9a:16:81:d9:7d:02:b4:0d:3a:58:2e:ee:b5:
7e:42:6c:b9:07:bf:c5:a6:a3:3a:02:cd:cc:a1:bb:
78:da:f3:15:fe:83:01:ab:c8:8f:90:ec:4a:17:2f:
b7:0f:34:dc:0d:43:25:c5:9d:21:1b:6e:b0:39:81:
d3:06:ed:34:4d:de:fb:93:40:8c:12:5d:d9:2a:eb:
1c:9d:ad:1b:d6:09:38:a2:d9:75:a7:4e:25:c8:00:
b7:ff:d1:f7:5c:18:6b:65:2c:5f:b9:a3:50:7b:2a:
21:01:fa:f1:d6:a5:a1:f8:49:6e:e1:5c:13:03:6d:
61:40:60:08:29:26:4e:40:42:27:22:ed:b3:7a:8f:
36:1c:84:8f:87:45:83:5b:62:05:e1:4a:88:0e:2f:
86:02:ef:8a:37:45:97:9d:e7:1b:d2:f8:45:a5:31:
f1:5a:f6:6c:e4:04:ba:74:16:32:1b:35:71:e3:60:
89:9e:c4:c2:f1:66:e3:d2:b6:82:3c:a7:36:fb:c6:
e8:4a:a0:f8:d1:f4:17:0b:b4:b8:e4:1f:1f:9e:60:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:62:19:09:CD:DC:D3:5D:29:D5:77:04:C8:34:AB:6D:69:BA:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PDtiGQnN3NNdKdV3BMg0q21purM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.48.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cc:e2:01:69:5b:46:a5:fc:15:f5:b0:cf:d4:f4:28:3d:72:
77:bb:99:08:aa:fe:37:8d:5b:32:52:fc:07:cd:a4:2f:31:43:
8c:31:a3:97:1f:d6:e0:cb:89:ca:68:5f:2b:4e:e9:47:3e:1f:
fe:32:23:e6:72:01:e3:c5:ed:e0:ed:f5:80:20:61:c3:55:bb:
95:c8:82:79:44:ca:c4:f9:eb:87:da:6c:02:ef:d5:6c:f4:51:
a9:6c:4b:31:8e:66:7a:e8:a4:44:67:5c:28:d3:2c:cd:7b:9e:
8f:35:a2:b7:5e:1a:d4:b8:25:90:f7:14:94:cb:74:9f:80:9c:
1d:ee:17:d7:04:8a:5b:5d:e0:dc:09:7d:a5:e4:dd:6e:14:ad:
75:8f:1f:8e:65:da:3a:bf:a8:4d:ac:14:72:11:e7:71:99:c2:
2e:e5:f8:4b:8d:0d:13:d2:ab:b4:90:ae:8a:5d:a4:a3:5d:44:
c2:b5:23:fd:f9:ac:15:e6:e2:35:87:52:62:c0:26:41:52:b2:
01:d9:02:d6:18:62:16:c3:ae:b5:23:bc:86:a3:93:99:a8:4f:
6e:65:cb:be:ba:2b:21:c3:4b:97:4e:1b:54:aa:58:88:59:e5:
3f:2d:d8:f8:1f:b1:d6:b0:75:ab:08:bd:46:81:fe:89:fd:75:
77:61:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:14 2024 by rpki-client on console-ams.rpki-client.org