Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pnxnbvvPUu5jqACUUCDgTPvL78w.roa
File: pnxnbvvPUu5jqACUUCDgTPvL78w.roa (raw, json)
Hash identifier: TdYFslRkDdUcUH7sykSy9bi4KLyvjex7SWd4bX2vpRE=
Subject key identifier: A6:7C:67:6E:FB:CF:52:EE:63:A8:00:94:50:20:E0:4C:FB:CB:EF:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192BDDDB834652DEA002F81E10DB7F75EF4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pnxnbvvPUu5jqACUUCDgTPvL78w.roa
Signing time: Thu 24 Oct 2024 09:31:17 +0000
ROA not before: Thu 24 Oct 2024 09:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43548
IP address blocks: 85.217.176.0/21 maxlen: 32
87.120.99.0/24 maxlen: 24
87.121.108.0/23 maxlen: 23
91.92.168.0/22 maxlen: 22
93.123.65.0/24 maxlen: 24
94.156.4.0/23 maxlen: 23
94.156.80.0/21 maxlen: 21
94.156.97.0/24 maxlen: 24
2a00:1728:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:dd:b8:34:65:2d:ea:00:2f:81:e1:0d:b7:f7:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 09:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a67c676efbcf52ee63a800945020e04cfbcbefcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:a3:ce:af:d4:15:3a:a1:db:8d:67:b6:39:
06:c2:45:b3:42:23:5b:e4:5a:88:3a:bb:ee:03:e9:
98:7c:43:9d:63:7e:77:21:a3:e4:c7:8f:e7:94:af:
b5:7d:09:bf:e8:08:1b:39:ab:be:6d:9b:4f:a7:06:
ef:f1:7d:8f:89:37:ee:88:42:19:f9:25:d2:94:9c:
4c:a5:3d:9e:bb:11:54:cc:45:7e:4b:a8:c6:06:19:
ea:80:91:86:98:af:dc:d4:fd:7c:d9:44:80:86:a5:
dc:0d:de:60:c0:7b:43:16:8e:55:61:18:39:66:b3:
af:14:0c:f0:5b:19:77:75:0a:8f:78:c1:8c:1a:7c:
27:f1:b5:fb:d9:cb:88:17:3b:58:d3:fa:53:f7:c6:
6b:32:eb:5b:2f:e4:58:d2:04:4b:7b:11:78:ab:51:
4b:42:2c:da:83:47:6b:17:56:99:2f:08:75:2b:c3:
cd:51:fd:8a:9a:5b:40:6d:be:7d:b3:38:a8:ae:5a:
7a:06:d1:5e:8f:39:f4:d8:29:dd:2b:4f:c5:31:86:
d5:37:d5:35:97:45:7e:76:23:a1:71:cb:84:ee:5f:
8c:13:23:8e:e6:6e:6d:d5:6b:a6:e8:9a:01:9d:97:
04:57:10:24:43:fc:ad:7e:c3:05:cd:4f:40:bc:60:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:67:6E:FB:CF:52:EE:63:A8:00:94:50:20:E0:4C:FB:CB:EF:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pnxnbvvPUu5jqACUUCDgTPvL78w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.176.0/21
87.120.99.0/24
87.121.108.0/23
91.92.168.0/22
93.123.65.0/24
94.156.4.0/23
94.156.80.0/21
94.156.97.0/24
IPv6:
2a00:1728:2d::/48
Signature Algorithm: sha256WithRSAEncryption
3c:78:b5:6f:53:59:e4:17:d6:71:d0:96:b7:a7:e0:3c:52:d8:
22:1a:0e:5c:c0:b8:e0:ae:3b:00:54:8a:c0:c8:15:c1:c1:37:
1a:3a:19:4c:20:59:65:b6:30:9e:ec:df:b3:fc:6a:fe:9d:e4:
a8:ee:c7:5f:6c:dd:9c:d4:30:20:e6:9b:14:a8:50:54:64:e6:
19:78:9a:d9:1c:02:0c:dd:42:ba:a4:4b:ef:b3:d8:d4:d1:1b:
b6:3d:4b:47:00:db:55:33:16:33:df:4a:90:34:4d:d7:8b:27:
c4:58:e5:aa:48:d9:b6:79:14:1b:e0:11:99:ac:69:4b:40:da:
cf:ee:78:aa:9a:8a:98:c0:0f:a1:3c:26:99:ce:81:e3:5d:0f:
96:06:83:1d:af:f5:14:38:45:9c:5f:96:37:e5:ba:82:0d:7b:
f4:f7:0b:06:51:9c:a9:27:b8:09:65:f2:74:fc:15:ca:ac:10:
2b:69:3f:f4:1b:14:04:8a:c0:00:45:e6:7d:2e:7f:ab:a5:9e:
8a:bc:a6:45:93:0f:26:5f:08:e4:69:0f:ce:6a:95:c5:44:58:
63:79:26:84:ff:34:ef:79:1c:88:5c:6e:44:df:bd:c7:fb:1e:
7e:31:4f:d0:42:69:46:a9:30:be:57:3e:32:84:93:c1:90:2d:
20:14:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:08 2024 by rpki-client on console-fra.rpki-client.org