Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PLR0No2RX87FmMKjIJPR5yMqPjY.roa
File: PLR0No2RX87FmMKjIJPR5yMqPjY.roa (raw, json)
Hash identifier: QzW+JZ37ppTaSPv/RgxT93S9GEdQD4zeIbdbYLnEYOI=
Subject key identifier: 3C:B4:74:36:8D:91:5F:CE:C5:98:C2:A3:20:93:D1:E7:23:2A:3E:36
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D1C48874495419F93A467798B6D6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PLR0No2RX87FmMKjIJPR5yMqPjY.roa
Signing time: Mon 01 Jan 2024 18:29:35 +0000
ROA not before: Mon 01 Jan 2024 18:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d1:c4:88:74:49:54:19:f9:3a:46:77:98:b6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb474368d915fcec598c2a32093d1e7232a3e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:0c:0f:9d:9d:bc:46:ff:69:02:5d:97:ff:
01:4e:4f:07:a0:e5:ee:91:8a:a4:1d:15:5c:b4:c4:
b7:4d:6f:84:7e:3a:82:23:f5:26:28:80:da:3c:a6:
c8:06:6c:01:58:1f:29:24:6b:ae:b8:93:b2:34:25:
4a:52:0d:d2:91:14:56:ad:e1:2f:5b:1a:de:dc:97:
c9:e6:59:cd:89:ce:bf:14:16:20:d4:84:8b:f9:bf:
e8:3e:14:3a:59:a8:a1:25:69:cc:e6:6a:7f:ec:4b:
29:17:60:c5:93:65:c4:7b:19:c6:14:e6:41:87:e1:
70:5b:f0:2e:d0:9a:a5:a4:5e:01:0e:3a:70:c0:e2:
7e:b2:87:be:ae:c3:a3:a7:60:f4:f6:99:70:bb:49:
e6:b5:f0:57:ab:a6:fa:e4:16:e9:ef:0a:3d:f3:4f:
6b:f9:a3:10:a2:c1:05:0b:bd:02:36:d3:38:9c:2e:
55:15:84:86:ca:69:46:f9:6b:10:57:0c:dc:35:bd:
10:44:07:3b:fb:d3:ec:12:7a:d7:79:35:4c:0c:fc:
a2:41:cd:0b:6c:98:59:b9:d9:b4:36:10:27:59:fb:
2f:05:99:63:e4:55:e0:75:fd:2d:01:9c:f1:5c:e1:
31:66:3a:67:45:95:a8:ff:48:e5:56:51:8d:c1:09:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:74:36:8D:91:5F:CE:C5:98:C2:A3:20:93:D1:E7:23:2A:3E:36
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/PLR0No2RX87FmMKjIJPR5yMqPjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:d9:5c:5d:9d:f9:1b:59:79:7c:f9:69:d2:b6:54:16:7f:
0f:42:f9:2f:c3:08:cc:bb:a2:61:ad:02:f6:02:45:4a:cd:df:
68:31:e3:9b:50:50:8f:67:97:6d:a9:52:53:4f:12:ac:30:cf:
01:33:dd:b7:29:1a:65:0d:ff:29:47:22:4e:7d:f9:1e:17:c5:
aa:f1:51:2c:71:61:5e:89:b2:b4:a1:a5:96:3e:98:18:68:d1:
0d:41:a0:ce:d8:a8:4b:96:b8:ec:64:34:cf:e7:2c:54:e0:ba:
8a:b3:cf:cf:ef:22:95:bc:0d:ac:82:38:22:29:fb:3a:38:ba:
a1:06:ba:d8:eb:eb:f4:c6:e4:72:3d:5c:5a:0f:e2:81:f4:ac:
62:26:f2:f1:f1:84:73:a9:17:cc:c1:7b:0d:a1:66:57:5a:49:
bc:de:f3:b4:84:87:bf:2c:93:f0:38:a6:b3:af:ff:f9:fd:68:
26:6e:b8:5b:74:66:69:78:26:13:24:c7:3f:97:3a:e7:0f:d0:
2e:b6:bd:bb:9e:aa:cb:3b:5b:01:ec:43:a5:f3:3e:9b:da:fd:
b4:86:82:f1:51:8f:40:af:f6:04:dc:0d:f8:40:da:87:a4:73:
5d:12:55:7b:8e:e2:b3:78:bc:55:20:7d:79:c0:ac:a2:9c:05:
eb:be:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:19:57 2024 by rpki-client on console-fra.rpki-client.org