Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/PfiuB4cW1VuPafc2SzpuNjAm_Wo.roa
File: PfiuB4cW1VuPafc2SzpuNjAm_Wo.roa (raw, json)
Hash identifier: gCHS/B6TUGHTXI9A2cvDTfbeAx4SbtLkxRvsvh7kyK4=
Subject key identifier: 3D:F8:AE:07:87:16:D5:5B:8F:69:F7:36:4B:3A:6E:36:30:26:FD:6A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB224ED225EDE04F8491C6FD7ABA4
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/PfiuB4cW1VuPafc2SzpuNjAm_Wo.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200918
IP address blocks: 185.32.182.0/23 maxlen: 23
185.30.160.0/23 maxlen: 23
185.91.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b2:24:ed:22:5e:de:04:f8:49:1c:6f:d7:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df8ae078716d55b8f69f7364b3a6e363026fd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:2f:95:97:ad:17:47:2b:c2:8c:1d:7a:c5:
0a:df:cd:a6:25:ec:01:eb:4c:58:a4:d0:54:83:95:
7c:0e:12:f0:97:b1:d0:a5:7c:c6:7b:4d:4a:d6:ef:
ee:74:e0:81:ed:a1:90:c9:f2:bd:9e:67:05:2b:ab:
84:c4:29:ff:bc:54:96:43:97:a5:8f:02:21:15:bc:
cf:ca:ba:fd:52:29:4a:c6:f3:d1:c7:38:46:09:2a:
bf:4f:5f:ad:17:c6:64:4a:81:b6:20:de:01:41:b1:
01:60:0c:4d:5c:3b:98:7e:c1:e6:b3:c4:cd:bc:78:
d8:ae:ff:61:54:72:88:14:6c:12:c8:22:ae:c2:28:
b3:0e:06:66:27:83:66:4c:f2:79:8b:df:96:bb:d0:
bc:fa:c2:a6:cf:4d:2b:69:46:b4:28:aa:31:fc:6d:
3e:27:6d:6c:0d:2f:91:39:fa:8c:6d:0e:52:3f:58:
57:ad:9c:0a:89:c6:b5:bf:54:13:51:b4:6f:b8:a3:
c2:79:69:2e:bf:d7:4b:cb:83:0e:0c:28:82:26:8c:
51:34:10:2f:53:3a:14:07:9a:40:b8:06:30:0d:28:
b9:33:0f:7a:40:6b:db:45:ce:ce:67:e5:20:1f:a9:
82:45:c9:64:8b:b6:81:b3:35:40:3a:89:5c:a8:03:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:AE:07:87:16:D5:5B:8F:69:F7:36:4B:3A:6E:36:30:26:FD:6A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/PfiuB4cW1VuPafc2SzpuNjAm_Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.160.0/23
185.32.182.0/23
185.91.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c2:86:dc:5f:76:45:20:64:d0:b0:3c:62:e6:e1:cf:62:b5:
0a:75:39:74:1d:9c:1b:c1:b8:dc:0f:6f:69:98:90:bc:16:cd:
fd:b6:23:d6:aa:cb:b8:41:af:78:55:e3:ac:28:5a:93:d5:10:
41:84:e3:9d:6e:2e:a2:bb:75:18:09:57:1c:ee:1e:cd:ad:fd:
39:84:77:e0:2d:6f:0a:d1:45:85:27:26:5c:75:86:75:44:eb:
9f:78:09:fd:db:9a:23:6a:d6:1d:45:9c:e3:62:1d:c6:4b:e3:
ec:be:a0:27:9a:7c:0e:c8:6d:e9:ef:a6:99:8e:b7:3d:95:d3:
c3:de:b7:13:4c:d4:44:0b:df:7c:9d:48:ef:ff:63:77:9f:a5:
39:77:31:74:dd:36:d1:c2:e9:69:dc:74:54:ee:bb:ea:e7:e1:
77:f6:04:51:35:58:7e:f6:57:87:1a:e6:03:8e:f1:1a:6e:93:
88:b9:ef:24:cb:b9:ae:51:49:e5:1a:f2:d1:1a:50:cc:85:31:
39:df:67:2c:a3:54:20:a0:a9:8b:5f:f6:22:dc:c6:d5:78:0d:
fb:4c:90:6a:65:14:bc:b4:99:bc:27:5f:a9:2e:ba:a8:4a:01:
56:b4:86:c6:11:e2:52:88:3d:cc:05:6a:71:92:c9:f8:63:38:
de:d9:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:08 2024 by rpki-client on console-ams.rpki-client.org