Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/pjGEMuNoO9gtgQoDBeR-B3itT2M.roa
File: pjGEMuNoO9gtgQoDBeR-B3itT2M.roa (raw, json)
Hash identifier: RYNbAPSco8b7E+6dvpELFZOdDZKou25w13HFONLZkww=
Subject key identifier: A6:31:84:32:E3:68:3B:D8:2D:81:0A:03:05:E4:7E:07:78:AD:4F:63
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 018CD16CF7847420C0BEFE01FEACCB94C10D
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/pjGEMuNoO9gtgQoDBeR-B3itT2M.roa
Signing time: Wed 03 Jan 2024 22:23:48 +0000
ROA not before: Wed 03 Jan 2024 22:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 45.80.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:6c:f7:84:74:20:c0:be:fe:01:fe:ac:cb:94:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 3 22:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6318432e3683bd82d810a0305e47e0778ad4f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:1e:54:d3:68:1e:1b:f4:8a:fe:46:ea:8a:
34:a2:8f:57:67:11:a9:9a:d0:de:8c:54:f1:4c:f8:
9f:fa:cb:7e:27:08:87:11:b4:a3:7f:51:eb:af:6c:
2c:c3:50:92:8a:ef:f0:a6:c7:72:e7:89:47:4a:d4:
e5:de:01:fa:fd:26:72:79:08:35:68:cf:dd:cc:33:
15:75:c9:e4:a7:b0:d5:7e:6e:76:bc:bb:a6:36:69:
07:74:07:e7:2b:71:a0:60:08:a9:c1:25:94:ed:ae:
72:81:45:d0:0b:e0:22:8c:e5:ce:ce:f0:63:c8:54:
00:76:d3:b5:fb:a8:71:05:71:a2:ad:f0:03:6a:09:
b2:7e:07:74:dd:d9:44:c4:f4:01:5d:fe:11:78:db:
19:1a:f1:2e:66:e4:0b:b4:24:69:68:22:75:48:29:
6a:17:0f:6c:75:69:04:3b:30:33:d4:6e:c0:97:9f:
28:83:58:da:72:75:db:cb:2f:ff:e3:8b:4b:62:f5:
53:14:c5:cd:86:87:c4:75:4f:23:d7:d6:13:63:a1:
92:f9:33:25:1f:a6:48:33:00:35:a8:6f:9d:19:2b:
e4:4f:61:b8:a1:6a:b7:2c:d2:50:cc:1a:5e:6d:05:
0f:7b:3c:d0:bd:01:13:8d:be:71:bf:a9:81:b7:2d:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:84:32:E3:68:3B:D8:2D:81:0A:03:05:E4:7E:07:78:AD:4F:63
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/pjGEMuNoO9gtgQoDBeR-B3itT2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c2:ef:b8:f4:23:07:ad:a3:2f:4d:9c:ee:98:73:16:0a:76:
d7:8d:eb:d0:57:0b:66:aa:05:a0:0a:d0:45:bc:15:f3:70:b7:
3a:dc:fa:7d:40:cf:0f:72:23:6b:97:05:a2:71:53:b6:42:2b:
73:88:2d:05:15:e6:46:f3:49:7a:ad:9c:cf:48:6f:48:4b:42:
8c:ab:48:4e:12:a2:b8:58:b8:75:c7:7e:23:81:03:60:06:c4:
5c:8a:b1:d6:d2:68:08:9a:c4:97:93:e4:0f:e2:dd:47:c8:60:
90:3c:c3:ff:a4:44:a8:5d:92:03:c0:36:a6:4f:cc:ec:f3:93:
29:a6:36:71:f3:82:7e:2d:74:e3:01:33:c6:4a:90:32:d0:d5:
07:b6:87:24:10:9b:98:1d:68:68:66:51:5b:b2:40:0a:c8:50:
d4:9c:1f:18:7b:a2:b7:27:8d:63:ee:73:33:ce:85:50:c3:03:
57:ec:ce:15:dd:2e:71:b4:ee:e2:dc:c2:7a:6f:f2:27:e8:19:
7b:eb:9d:bb:fc:d8:c4:ee:80:1c:ba:5c:b9:68:2e:e1:ea:c3:
34:c1:be:58:30:74:f5:f3:46:f7:2c:6e:28:91:e5:cb:d1:9a:
8b:a4:59:6f:d5:4e:44:4f:10:34:f4:2c:26:c4:81:ff:e5:85:
85:d0:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:26:57 2024 by rpki-client on console-ams.rpki-client.org