Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/ImAQannuwVOgMf04hE6LPunycrw.roa
File: ImAQannuwVOgMf04hE6LPunycrw.roa (raw, json)
Hash identifier: zJsd46VKYNgDL6hcbpCT+zIswpeMrVhLjWxvjwGDoB8=
Subject key identifier: 22:60:10:6A:79:EE:C1:53:A0:31:FD:38:84:4E:8B:3E:E9:F2:72:BC
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 018CC8DCE5BEB41679AB7370FE46E7A68738
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/ImAQannuwVOgMf04hE6LPunycrw.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e5:be:b4:16:79:ab:73:70:fe:46:e7:a6:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2260106a79eec153a031fd38844e8b3ee9f272bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:dc:06:44:04:a6:c6:42:8a:e9:8a:b7:ee:
61:89:d2:a4:f7:a7:90:5a:cd:fc:6a:23:f9:27:85:
3b:6d:2d:0d:a6:57:f2:fa:28:ae:d8:81:f0:82:bc:
19:d5:76:12:8d:f9:32:b8:ce:ec:fd:27:30:8e:cd:
a3:df:bd:8c:8f:49:a6:1b:fc:c2:3e:8e:99:50:88:
fd:a6:61:c0:5c:63:0e:4e:75:f8:4c:0e:30:05:ce:
82:93:9e:b8:4c:41:0c:fe:24:b1:78:c3:57:3f:05:
19:e4:81:b1:ff:ff:9b:cd:a5:ae:0c:45:b1:61:0a:
17:78:48:33:7f:d6:b9:61:78:c7:6b:ce:50:b5:e9:
cf:0d:54:34:a2:d3:32:b4:4d:6e:5f:32:75:18:41:
ee:05:d4:73:9c:7c:11:24:59:33:70:42:70:8d:d3:
1b:84:d7:34:db:8e:f5:43:7e:0c:1e:d0:41:b1:d5:
5e:7b:65:00:c4:90:8e:0d:d7:88:f8:ba:3d:73:7b:
0b:da:7b:90:26:99:75:3b:96:b4:2d:71:b8:d9:0c:
a1:64:36:fa:62:a4:c2:19:e2:2c:57:58:66:5c:35:
7b:36:71:bf:2e:cc:cb:33:05:c8:d8:60:f2:02:0c:
81:3a:74:30:58:2d:88:58:c4:4c:d6:17:5a:51:cc:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:60:10:6A:79:EE:C1:53:A0:31:FD:38:84:4E:8B:3E:E9:F2:72:BC
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/ImAQannuwVOgMf04hE6LPunycrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/23
Signature Algorithm: sha256WithRSAEncryption
81:95:8b:14:a1:1c:54:ba:44:91:aa:50:c9:32:61:ce:af:12:
e4:a6:f1:64:59:14:d1:8c:7e:f4:c9:32:ed:39:57:2e:3c:6f:
3b:60:fa:4f:4c:18:e6:8d:c7:a7:50:c3:ab:05:00:8e:2a:dd:
de:f6:bf:a2:f0:1e:d4:9a:c5:62:0c:c8:1a:b6:c7:3c:7b:67:
cc:68:61:11:47:4c:13:84:04:18:20:05:d6:bc:9e:a8:17:2a:
d9:03:b6:f1:f2:45:ad:bc:e9:83:00:43:45:1a:42:c2:80:62:
08:40:6b:51:2e:13:f7:f1:00:77:0c:86:8e:cd:a7:58:16:72:
e7:8e:2b:34:07:75:5f:d6:d5:89:b2:21:26:9d:60:9a:77:9d:
74:b2:f3:da:df:27:ea:d5:ed:62:ec:ec:10:50:3f:45:71:4b:
45:aa:d1:52:42:04:62:4f:58:1a:0b:48:c3:c2:1d:ff:c0:11:
b4:94:ce:6e:40:ca:db:87:13:69:3a:ca:32:a1:9f:8c:25:49:
34:02:77:4f:b6:91:1c:6c:d8:eb:28:5a:1d:79:2d:78:46:02:
b8:cb:e3:a5:65:87:91:38:18:38:57:41:af:3f:f7:e4:8e:a2:
10:aa:ea:bc:16:b2:10:4c:f5:0b:fa:a5:09:6d:8d:28:01:1a:
aa:b1:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 20:40:23 2024 by rpki-client on console-fra.rpki-client.org