Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pfa_YaT2dSfPjJcqgY1HdL-TJJQ.roa
File: Pfa_YaT2dSfPjJcqgY1HdL-TJJQ.roa (raw, json)
Hash identifier: AfZI6oVoTzoaYtUtOqiHA9+2zPomGLxxg8RyzGqbYdY=
Subject key identifier: 3D:F6:BF:61:A4:F6:75:27:CF:8C:97:2A:81:8D:47:74:BF:93:24:94
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0825E0023951B0FB9E62F8031B01
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pfa_YaT2dSfPjJcqgY1HdL-TJJQ.roa
Signing time: Tue 02 Jan 2024 06:29:37 +0000
ROA not before: Tue 02 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208389
IP address blocks: 93.123.3.0/24 maxlen: 24
93.123.4.0/24 maxlen: 24
93.123.1.0/24 maxlen: 24
93.123.0.0/24 maxlen: 24
93.123.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:08:25:e0:02:39:51:b0:fb:9e:62:f8:03:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df6bf61a4f67527cf8c972a818d4774bf932494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:72:97:ad:87:f7:16:f7:d5:41:80:81:8c:
19:a9:fa:4d:10:83:1c:ba:d8:c1:cf:2a:5b:4b:b8:
7d:e4:ca:8b:bd:02:17:6b:12:af:40:88:7e:51:74:
2c:f7:86:bf:f2:8e:8e:3f:e0:c0:34:0b:b8:a2:d8:
b3:bb:4d:ab:4e:30:0e:f6:f6:b6:85:0f:f4:4c:c3:
7f:a6:e9:a5:b1:0b:b7:a4:39:55:bb:6f:9a:b0:a2:
fc:21:6e:b6:0d:29:72:34:fc:45:97:0c:35:2c:19:
b1:43:ec:d7:33:6e:5f:ba:d4:98:5c:39:6d:8c:e4:
10:25:73:d2:38:19:90:eb:14:3d:5e:d6:c3:d5:88:
0d:92:55:ff:3e:47:cf:81:02:7f:42:18:de:bc:6d:
78:95:05:19:a6:2a:f5:75:08:b8:f1:2f:16:0c:9e:
80:4c:5e:27:e0:82:81:02:e3:ee:9f:26:c8:5a:4c:
99:5b:60:e6:99:e1:9c:c5:17:7a:3e:f6:10:63:9a:
45:94:a9:17:e6:6c:13:59:29:e3:9d:38:a9:5d:86:
ea:88:3e:9d:14:0e:fe:3b:5f:5f:24:87:6d:d6:0a:
59:7b:b3:3b:ab:c6:7d:7a:24:e1:52:ce:5a:9e:ed:
3b:af:ed:f4:17:a6:4c:15:f3:b0:cc:34:55:83:ad:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F6:BF:61:A4:F6:75:27:CF:8C:97:2A:81:8D:47:74:BF:93:24:94
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pfa_YaT2dSfPjJcqgY1HdL-TJJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.0.0-93.123.4.255
Signature Algorithm: sha256WithRSAEncryption
3b:05:76:48:b1:ce:a8:ac:34:27:01:1e:be:f1:b2:c2:dd:25:
17:fe:50:67:fe:31:cb:f3:7e:36:fc:f3:96:78:45:aa:8a:a3:
6f:b4:3f:99:bb:f6:fc:11:40:ff:84:72:40:84:f2:51:68:e2:
03:5b:c8:91:ef:23:cc:6e:35:39:1c:0f:9b:f6:a9:8f:93:a2:
46:38:c0:46:d3:f5:59:2b:4d:09:9a:7f:00:dc:71:a5:a9:82:
5d:06:b0:8e:3b:6a:ca:33:92:9e:bd:3c:6f:8d:66:fd:de:0c:
de:5e:4a:4a:f9:d2:6e:ee:11:03:b5:7f:6b:b2:28:a1:88:94:
d3:94:e6:00:1d:77:c5:a5:e6:60:00:b9:f9:9f:5a:37:7b:6e:
92:ce:c9:d0:02:41:3a:18:9a:07:c9:77:03:40:25:4f:87:05:
20:00:9d:79:f4:b1:3f:e4:69:55:88:6f:cf:29:42:36:74:2a:
45:be:22:4e:6f:8c:a8:43:1e:ac:c7:35:54:d1:da:1d:3a:5e:
bc:17:0e:bf:62:92:0b:b7:af:6a:5f:9b:7f:89:f2:b9:22:97:
23:2f:f7:cf:92:b4:b1:30:a3:fe:a4:19:ea:d5:6f:21:0e:c1:
c8:8b:cf:26:51:36:fe:cb:82:42:c0:5c:d6:79:c3:3d:31:f5:
81:97:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org