Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/pUM70Q0Im8j5DGEAHmNC-laF0M0.roa
File: pUM70Q0Im8j5DGEAHmNC-laF0M0.roa (raw, json)
Hash identifier: zJIJA0SzT0tUsS91uTtcnr0tNgKrCmAFm7XTP2RAQAo=
Subject key identifier: A5:43:3B:D1:0D:08:9B:C8:F9:0C:61:00:1E:63:42:FA:56:85:D0:CD
Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial: 018D178C6917EB76F3C415C879A3C677A302
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/pUM70Q0Im8j5DGEAHmNC-laF0M0.roa
Signing time: Wed 17 Jan 2024 13:11:34 +0000
ROA not before: Wed 17 Jan 2024 13:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34945
IP address blocks: 86.36.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:8c:69:17:eb:76:f3:c4:15:c8:79:a3:c6:77:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Validity
Not Before: Jan 17 13:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5433bd10d089bc8f90c61001e6342fa5685d0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:95:0a:df:59:77:44:ed:66:31:a1:3c:b3:
b1:c1:61:40:c1:4c:48:dc:2d:dd:4d:b2:01:22:f8:
b9:0f:10:5b:fd:81:24:3c:99:ca:fb:d5:f1:9d:8a:
93:f0:f5:de:e2:63:96:8d:c3:d5:89:0e:82:16:5b:
d6:96:3a:30:5f:6a:cb:87:6e:3c:b1:e0:76:0f:be:
f9:66:13:6e:12:41:e1:13:c7:40:90:39:4f:b6:98:
0a:82:96:49:ff:bd:af:8d:b3:4d:31:f6:b6:c7:da:
4f:52:b6:22:89:7e:5a:3f:9d:12:ce:b9:cc:0a:f4:
4c:67:41:2e:6d:8d:7d:4d:c8:e8:4b:e6:74:a7:1e:
2a:bd:03:d6:7d:b5:6a:53:de:ce:2b:a3:8f:64:5e:
ff:7e:ed:64:0c:5e:97:4e:30:b8:00:3e:5e:c5:2d:
a2:23:5e:28:68:f8:fb:19:ce:5a:c6:5b:1e:eb:58:
c2:2e:b9:42:1a:51:0b:76:74:97:0b:66:e4:6c:05:
08:af:8a:e3:fc:09:78:19:87:b3:61:2d:26:39:31:
77:25:60:4d:b8:e0:be:19:55:c9:93:42:09:96:1f:
36:2e:f6:78:de:6b:d3:17:49:26:fc:a8:0c:c7:9a:
4e:de:fe:58:db:29:c1:8a:13:b4:e0:34:58:7e:61:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:3B:D1:0D:08:9B:C8:F9:0C:61:00:1E:63:42:FA:56:85:D0:CD
X509v3 Authority Key Identifier:
keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/pUM70Q0Im8j5DGEAHmNC-laF0M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:e1:5a:e8:f4:d7:95:04:87:6d:74:f7:6a:10:85:1c:6f:e7:
96:9e:94:70:be:e2:e0:8b:8e:f5:83:e0:b7:32:a0:18:08:3f:
9b:66:0f:3b:34:34:6a:31:e1:92:e2:9f:af:94:18:ca:da:eb:
16:9a:a8:19:4f:6c:49:31:bc:6b:75:7e:84:1a:58:db:f7:d2:
aa:04:1e:8a:4f:d1:04:40:2f:96:53:4d:98:cb:ef:0b:c1:8a:
04:1f:68:ae:6d:49:59:d7:c3:60:65:aa:16:6b:80:6a:44:9f:
f5:41:d4:11:e0:c7:eb:0b:01:94:41:bb:f3:c9:b7:39:7d:9a:
93:4d:7f:b1:18:e6:94:55:5c:96:ca:f7:51:9f:fe:d4:43:b4:
93:32:7c:93:11:56:79:c2:34:e8:97:89:84:49:69:bd:a7:36:
b4:2e:25:4d:2c:f7:af:3d:a2:bf:ab:37:da:83:06:46:bc:01:
d7:cc:36:72:b1:3d:46:fb:50:71:67:c2:46:e2:ea:fa:36:fa:
e8:fb:1b:d1:d5:6f:7d:9b:e4:f2:dd:64:4d:51:0e:aa:01:c4:
de:63:bd:97:99:fc:be:72:59:84:89:25:07:d2:cd:c0:82:71:
87:73:fe:c8:18:4f:a0:2d:38:be:27:4f:20:4c:cf:c4:da:35:
c9:6f:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:08 2024 by rpki-client on console-fra.rpki-client.org