Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PchTeY0ZpTGCiKuC0BHC5XTSQ48.roa
File: PchTeY0ZpTGCiKuC0BHC5XTSQ48.roa (raw, json)
Hash identifier: CLgz6YoiekUgBGhWsRtNJogKRnIGATPwdN7SZ9XHNFc=
Subject key identifier: 3D:C8:53:79:8D:19:A5:31:82:88:AB:82:D0:11:C2:E5:74:D2:43:8F
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018E1484A56976D76A301ED209C6197DB191
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PchTeY0ZpTGCiKuC0BHC5XTSQ48.roa
Signing time: Wed 06 Mar 2024 16:07:01 +0000
ROA not before: Wed 06 Mar 2024 16:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43861
IP address blocks: 45.134.176.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:84:a5:69:76:d7:6a:30:1e:d2:09:c6:19:7d:b1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 6 16:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc853798d19a5318288ab82d011c2e574d2438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:8d:ba:01:d2:ed:b3:33:59:04:4f:73:56:
a3:ab:0b:8b:1d:b7:dd:7d:bb:e9:e3:70:2e:db:c7:
12:27:2d:2a:8e:94:ca:e1:89:fa:20:1a:f9:a9:30:
58:d7:cb:f2:29:09:58:32:38:c7:70:9f:cf:87:58:
0c:90:bc:b3:a3:96:9b:6c:fb:0a:86:75:a3:38:51:
34:65:ad:86:72:7a:35:bd:73:10:4a:ee:73:8f:01:
6d:2e:f1:04:32:e2:2d:19:64:b4:26:a2:0e:54:62:
de:31:8b:32:58:a3:60:2a:06:d3:c3:f9:16:73:79:
31:bb:53:28:ac:4a:eb:31:58:94:49:0e:f6:ce:1b:
e4:be:82:ca:3f:f7:79:4d:d7:7c:f3:a7:9c:7a:b4:
24:b6:57:33:9b:7b:3d:7e:03:a3:54:02:1a:d2:15:
b3:1c:d7:f4:af:9a:d4:43:36:6b:41:81:16:30:ad:
dd:34:9e:ce:40:9b:40:06:5c:a0:2e:0c:d1:32:e5:
b6:15:39:75:68:b3:d9:2d:63:99:65:49:51:bf:6c:
51:b2:a5:4f:23:cd:16:c5:55:d8:24:fa:80:f9:f8:
fb:c5:80:d1:e8:91:b1:47:ac:6a:10:32:17:3a:62:
b2:08:1f:c5:33:cc:66:73:61:93:20:54:08:38:2b:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:53:79:8D:19:A5:31:82:88:AB:82:D0:11:C2:E5:74:D2:43:8F
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/PchTeY0ZpTGCiKuC0BHC5XTSQ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.176.0/22
Signature Algorithm: sha256WithRSAEncryption
77:af:d6:6d:a2:75:09:b8:37:43:95:78:4b:12:c9:8a:67:6b:
b8:11:c5:76:84:b8:63:12:28:2c:a2:23:33:7f:38:3b:29:3f:
cc:a1:81:fe:e0:ee:7c:9e:6b:32:d7:09:1b:d5:e0:18:e0:b0:
93:1e:1d:c3:c2:d0:d2:ee:7a:aa:eb:68:9f:4a:96:25:4b:2f:
44:f0:b3:99:24:e0:99:39:9d:d9:d2:24:7b:40:9c:64:d7:f6:
32:ca:c5:38:8d:30:f3:e7:c1:ad:74:a1:b9:46:f6:8f:6c:7e:
43:9e:b5:8f:8f:0e:e7:25:87:70:5a:6e:02:8f:cc:e0:8a:a6:
63:f8:52:21:b2:24:51:82:66:25:5e:ca:87:29:97:25:78:1d:
b3:a3:e2:88:42:79:3e:61:0c:14:85:20:35:77:0c:47:1e:e7:
a5:11:5d:c2:64:91:26:73:f6:fd:a0:0f:a2:0e:7e:41:2b:14:
84:4b:0b:25:c8:fd:ed:f8:a5:99:22:01:e8:5f:fa:5b:4b:3b:
6d:4c:07:42:43:c4:c8:1b:96:7d:0c:05:01:90:55:44:08:7e:
4d:75:17:4d:1b:d1:e8:7d:50:ce:5a:55:85:ac:b7:12:43:af:
13:a0:27:a7:52:5d:84:7e:82:93:7f:f0:89:43:69:c5:eb:83:
08:f3:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 10:45:27 2024 by rpki-client on console-ams.rpki-client.org