Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PLiwiABXiAbrPoxHtAxDp0nwJko.roa
File: PLiwiABXiAbrPoxHtAxDp0nwJko.roa (raw, json)
Hash identifier: m08TitEr/+mFEk6c75W0MJnhVKdcsrYx3bgfxQI8Y3I=
Subject key identifier: 3C:B8:B0:88:00:57:88:06:EB:3E:8C:47:B4:0C:43:A7:49:F0:26:4A
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018FC13C26F81F4557469E7AA7FB73693697
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PLiwiABXiAbrPoxHtAxDp0nwJko.roa
Signing time: Tue 28 May 2024 22:04:55 +0000
ROA not before: Tue 28 May 2024 22:04:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 62.122.188.0/24 maxlen: 24
77.246.240.0/24 maxlen: 24
84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:3c:26:f8:1f:45:57:46:9e:7a:a7:fb:73:69:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: May 28 22:04:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb8b08800578806eb3e8c47b40c43a749f0264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:c7:79:28:05:2a:9b:80:a8:3f:3a:11:85:
8c:b4:98:77:65:13:2a:d2:48:60:01:48:6a:e2:d2:
21:c8:34:8f:29:bd:a8:99:67:34:26:df:8c:90:b3:
e1:fa:ea:a8:82:4c:7c:ad:a2:9d:90:84:bf:3a:63:
da:0c:c9:fd:53:6a:2b:dc:5f:29:27:82:27:60:a4:
53:32:03:b3:c7:7c:b0:65:e3:e2:b0:8e:65:b7:e8:
76:b8:07:5e:b3:ac:f5:d4:67:7a:b6:75:63:c8:23:
bd:cb:27:2b:23:a0:a5:c3:a3:e9:ce:6b:95:8f:b8:
52:2e:51:0c:74:37:10:37:b2:75:6d:05:86:50:87:
02:0f:70:54:0c:2e:88:fd:55:05:a1:c7:f2:3d:6e:
a5:c0:ee:3e:17:ab:ef:4c:dd:f3:76:9e:4f:2f:e7:
ed:8f:45:bd:7e:cb:ba:fb:42:ed:66:01:25:35:e8:
7d:52:0d:e0:00:20:cc:82:aa:69:a5:a8:18:92:39:
ee:9b:14:d9:36:30:29:dd:07:5e:8e:b7:dc:8c:2e:
fc:2a:cb:a4:34:08:41:49:ed:f2:c2:f9:5e:8f:58:
5c:2f:dd:48:3b:84:f9:49:09:88:d1:a6:48:0a:bf:
98:eb:f8:dc:a4:52:c2:1a:02:b6:ab:47:8e:f3:22:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:B0:88:00:57:88:06:EB:3E:8C:47:B4:0C:43:A7:49:F0:26:4A
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PLiwiABXiAbrPoxHtAxDp0nwJko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
77.246.240.0/24
84.246.111.0/24
91.247.178.0/24
178.23.188.0/24
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c2:a3:9f:0f:22:71:d5:5b:d2:62:23:4f:77:b9:b5:9b:b9:
a3:3d:8c:dd:a2:0f:b8:24:27:b1:bb:b9:67:c1:e5:c4:99:09:
9c:05:d5:02:2a:27:39:f2:51:fb:3a:07:ca:94:7c:f7:52:cf:
72:b4:1a:9e:db:32:24:71:1a:65:1f:aa:fd:fe:2e:8c:90:8c:
a3:39:54:a5:17:38:c5:41:68:4f:6a:de:52:db:84:2f:8e:f4:
32:66:7c:93:f4:ed:3c:8a:68:c3:29:b4:26:8d:16:2e:24:75:
e4:55:8a:83:44:bb:05:24:db:d5:09:e8:19:7b:b3:eb:74:88:
1b:ec:04:7b:60:45:a4:e7:88:a7:7e:db:8f:8f:a8:a9:fe:59:
79:db:81:3d:a0:7d:93:33:ef:e5:55:d2:27:09:34:da:68:0f:
27:f0:a6:36:03:2e:01:c1:3d:d4:6d:61:dc:e6:ab:ae:97:38:
ba:38:31:63:b7:66:14:ff:63:d0:5c:bb:4e:2c:e6:3e:71:79:
4e:2d:f9:7a:8a:13:73:00:25:4d:cd:aa:5c:0c:14:b5:17:56:
96:2f:3d:a3:d7:ae:3a:ac:92:af:87:bf:45:6c:2b:22:5b:c2:
6b:d2:0d:83:8f:0d:5f:3c:61:86:f8:ea:96:51:46:fb:84:15:
51:7d:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:08:10 2024 by rpki-client on console-fra.rpki-client.org