Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PiicB2K_nwdfJ1ImdzjxAeMmPag.roa
File: PiicB2K_nwdfJ1ImdzjxAeMmPag.roa (raw, json)
Hash identifier: 6j2yuwPQK3HLyRIwDZWTlgkn5lMTUK4K8ehqpH2p5Yo=
Subject key identifier: 3E:28:9C:07:62:BF:9F:07:5F:27:52:26:77:38:F1:01:E3:26:3D:A8
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01906E37A45A08EEE5C0716934C7B037F822
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PiicB2K_nwdfJ1ImdzjxAeMmPag.roa
Signing time: Mon 01 Jul 2024 12:14:18 +0000
ROA not before: Mon 01 Jul 2024 12:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216361
IP address blocks: 45.139.9.0/24 maxlen: 24
185.217.39.0/24 maxlen: 24
194.36.172.0/24 maxlen: 24
194.36.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:37:a4:5a:08:ee:e5:c0:71:69:34:c7:b0:37:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jul 1 12:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e289c0762bf9f075f2752267738f101e3263da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:43:d6:17:cd:35:fd:da:7b:74:27:32:68:
d9:b5:f7:f8:0b:9a:9a:d9:04:f1:84:85:d6:27:5e:
bc:99:86:a7:14:fa:24:38:48:6d:f2:20:17:f3:76:
a7:38:6a:a2:1e:27:2d:5b:0f:54:50:96:43:8b:bb:
da:10:a1:1f:f7:bb:66:ab:c9:d7:8a:a9:04:44:92:
ec:d0:e7:81:3b:c7:dc:53:d5:ad:45:27:ac:fb:b1:
ac:0b:cd:a6:d8:ce:7e:7c:6f:f6:b5:aa:e8:aa:c8:
fb:2a:bd:13:b6:aa:f1:2b:a9:9c:cf:5d:6a:61:bc:
18:b6:b6:b2:07:27:21:12:21:16:22:61:d3:ed:69:
a8:97:7d:ee:6b:66:67:8b:46:2f:ab:2e:18:d4:81:
7c:fd:7d:42:38:cd:96:45:9a:d8:33:aa:31:06:63:
2f:58:98:83:20:f5:46:e5:66:87:a1:68:01:9b:ec:
6a:d3:4f:53:d0:66:78:15:c8:f1:be:ef:c5:53:98:
95:96:7e:a3:b2:85:b8:b8:8d:0c:c6:cd:79:15:65:
c1:55:52:13:57:05:8a:88:09:d1:53:0f:c4:45:b6:
93:d9:2b:1f:f9:49:dd:6a:f2:3f:e8:5e:13:25:37:
e7:be:67:3b:ac:38:26:99:af:1a:79:ce:ad:92:69:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:9C:07:62:BF:9F:07:5F:27:52:26:77:38:F1:01:E3:26:3D:A8
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/PiicB2K_nwdfJ1ImdzjxAeMmPag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
185.217.39.0/24
194.36.172.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c7:4d:0a:e2:d5:b9:20:bc:29:10:5f:bf:a6:33:5c:e6:90:
0f:c2:86:38:00:cc:54:73:f3:c9:33:5a:fd:b2:2d:d5:27:dc:
97:47:07:14:54:0e:36:06:58:48:23:c1:1d:9f:42:71:ac:07:
dd:c1:ef:db:8d:3d:3b:89:c8:f6:b1:34:f6:b9:c9:d1:d7:02:
8f:a9:bc:31:f6:37:15:ab:99:5d:f6:21:60:9e:1d:d4:8f:86:
03:f9:09:f9:4c:c9:e7:c4:a5:11:bf:6f:65:04:9a:a7:34:83:
d2:98:46:4e:03:f5:be:53:f2:98:4e:e8:cc:5a:f3:d5:40:96:
63:7a:80:ca:8c:42:02:ec:72:87:6d:dd:e0:2b:1a:d2:34:be:
b1:91:fc:7b:5c:76:2f:b4:1f:dc:9b:15:69:c1:b2:e7:6c:c5:
15:ee:f5:01:3a:5c:b0:69:3a:b5:23:1d:97:7c:ec:6e:a9:c5:
72:0f:d8:3d:2c:67:98:0c:c1:1a:15:83:b9:c8:ed:f4:c9:9e:
97:d9:86:f3:a4:b8:fe:ed:0f:28:4a:92:54:0d:b2:4a:a4:25:
26:cb:1f:c5:bb:d5:77:6b:33:d9:5a:93:25:61:fa:34:f2:13:
25:9e:ff:11:57:46:b3:b8:6e:67:c4:bc:98:f7:79:45:e9:b8:
16:6c:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:17:11 2024 by rpki-client on console-ams.rpki-client.org