Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/PBEuArOPBxvdm11OLQ-9w2Qopu8.roa
File: PBEuArOPBxvdm11OLQ-9w2Qopu8.roa (raw, json)
Hash identifier: rVvThJcnOdB3qfLcxYsOgTu07oEuo0un/o0eVxLvLdM=
Subject key identifier: 3C:11:2E:02:B3:8F:07:1B:DD:9B:5D:4E:2D:0F:BD:C3:64:28:A6:EF
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 018CC3B7217A314AA88D9AABF3CBC0E81353
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/PBEuArOPBxvdm11OLQ-9w2Qopu8.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199752
IP address blocks: 185.36.132.0/22 maxlen: 22
185.187.108.0/22 maxlen: 22
185.239.171.0/24 maxlen: 24
2a00:ef20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:21:7a:31:4a:a8:8d:9a:ab:f3:cb:c0:e8:13:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c112e02b38f071bdd9b5d4e2d0fbdc36428a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:87:22:86:30:24:01:a4:6a:4a:d3:74:7f:
06:f2:75:52:1c:10:9f:be:ab:45:fe:ec:23:01:1a:
08:a3:92:57:bc:84:45:b2:2a:03:a2:cf:57:42:b5:
92:00:12:33:a7:1c:14:ab:3b:55:c5:e7:8d:7a:25:
7c:79:27:43:92:bd:97:e3:af:ca:18:3f:d8:54:2d:
90:90:d7:e0:5d:13:26:02:52:b4:f0:a7:ac:db:41:
07:70:6e:fb:7c:3d:f7:c2:f4:bf:68:b5:51:c8:27:
5e:0e:1f:56:8d:4c:8f:cd:2b:3a:2b:95:ed:2d:73:
50:09:b1:e2:99:e9:a0:d5:7d:37:52:fd:16:e1:82:
b7:96:e5:85:a1:79:10:f7:3a:47:23:26:d7:f5:c8:
7e:65:0f:94:ea:a0:b7:1b:47:bf:98:00:b3:57:5f:
e4:ed:43:21:17:1f:6d:a5:71:05:2e:0d:3d:42:7b:
c6:b2:45:a7:9e:86:8a:8e:9c:5e:35:93:ad:2d:2d:
bf:30:78:b1:9d:97:2c:48:ca:7e:22:77:d1:c0:cc:
a3:83:3d:9e:0d:81:2d:75:80:66:ff:a9:3c:2d:10:
29:32:fe:eb:64:66:59:c3:02:14:f4:2d:c8:cc:c8:
e7:2c:b8:b5:98:e6:dc:de:a0:dc:00:c1:bc:4b:76:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:2E:02:B3:8F:07:1B:DD:9B:5D:4E:2D:0F:BD:C3:64:28:A6:EF
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/PBEuArOPBxvdm11OLQ-9w2Qopu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.132.0/22
185.187.108.0/22
185.239.171.0/24
IPv6:
2a00:ef20::/29
Signature Algorithm: sha256WithRSAEncryption
18:b9:32:da:f7:0b:d7:3a:e9:be:e1:b3:e2:84:9a:0c:fe:5c:
8f:34:60:92:9c:4e:5a:0c:d2:bd:06:01:f7:4f:9a:87:11:17:
d8:8f:a9:52:c3:17:80:80:e8:a4:78:68:2d:28:8f:b6:d7:c1:
7f:71:79:22:26:33:a5:ad:3b:70:0b:99:f3:20:3b:16:3e:ec:
b1:66:b3:e2:83:78:a4:d4:38:5b:0a:aa:bb:35:84:2a:9f:b5:
29:9e:0e:47:94:4f:91:b0:17:d0:88:5b:7e:c0:7f:f5:b6:58:
e9:33:60:d1:2c:29:09:bd:3f:c6:46:d7:00:c8:fe:73:ad:f0:
ed:0a:c9:98:ad:f2:3a:ce:b6:ee:dc:b6:c6:71:a9:8c:a3:98:
94:ce:2f:45:69:ed:72:77:e0:c3:49:8f:83:05:4e:43:14:2b:
1b:4f:40:1c:3b:60:ef:d4:9a:b0:1a:bd:31:dd:79:a5:bb:f8:
9e:2f:8e:6c:19:e6:ab:5b:89:7f:0c:63:39:5a:d5:de:82:7a:
9b:92:98:7f:1d:fd:2a:fb:60:f8:3c:16:90:7a:d9:67:f8:14:
fa:1d:f2:fd:78:31:ab:97:c7:ff:21:2d:08:09:ad:6f:60:bd:
07:bc:36:23:2b:68:fb:e0:4d:f5:bf:a1:43:d6:f2:6b:42:90:
6b:d5:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:21:40 2024 by rpki-client on console-fra.rpki-client.org