Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/PsO3Zreq_F9kLF5UPFpHH5B_QMs.roa
File: PsO3Zreq_F9kLF5UPFpHH5B_QMs.roa (raw, json)
Hash identifier: 7glLZBavoR3at/Ix/8YZQ8/ZZm5IZiCW59B+D4Lk+so=
Subject key identifier: 3E:C3:B7:66:B7:AA:FC:5F:64:2C:5E:54:3C:5A:47:1F:90:7F:40:CB
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01919D1C4B873EE99BDC68DC8D99852B08E2
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/PsO3Zreq_F9kLF5UPFpHH5B_QMs.roa
Signing time: Thu 29 Aug 2024 07:49:22 +0000
ROA not before: Thu 29 Aug 2024 07:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.188.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:1c:4b:87:3e:e9:9b:dc:68:dc:8d:99:85:2b:08:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Aug 29 07:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec3b766b7aafc5f642c5e543c5a471f907f40cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:3f:d5:a5:62:61:c4:d8:36:ac:3e:95:6c:
cd:8c:9f:82:4e:2b:aa:81:17:81:d9:79:d1:b1:55:
a9:7a:b7:3c:5d:05:23:b8:4e:44:6b:19:79:ba:77:
cc:f0:99:fb:b1:56:a5:3c:e7:a7:3e:9f:b0:16:cd:
03:40:06:96:aa:30:9a:e9:36:1c:2d:3a:75:56:c7:
dc:1b:35:10:6d:dc:e6:b1:78:39:d5:a6:56:0d:6f:
14:53:27:d2:54:59:37:1a:ad:93:6a:df:9c:2f:0b:
08:dd:e9:71:ac:16:a4:18:6f:64:31:ae:35:ef:5d:
0d:2f:4f:de:5a:64:04:8e:13:84:fc:91:82:c3:4e:
6b:48:c1:36:a7:f5:af:6a:21:b6:0c:84:39:48:12:
5d:11:85:dc:bf:45:0b:58:63:d8:fd:4b:d9:1e:a7:
db:62:c3:2f:b0:ec:6a:0c:c6:48:bd:13:d1:87:1a:
2d:70:cb:f4:9c:f3:22:4e:c1:4b:9b:37:08:85:8f:
c4:21:7e:45:c2:99:5f:7e:cd:e2:07:c1:a3:a0:8c:
ad:28:fa:34:09:57:07:31:a3:2f:94:f0:21:b5:1a:
99:82:da:7c:f2:2a:9d:a6:5b:03:d0:c3:8f:5d:68:
4c:df:c8:72:35:c3:3b:9c:7d:28:95:22:a9:69:af:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:B7:66:B7:AA:FC:5F:64:2C:5E:54:3C:5A:47:1F:90:7F:40:CB
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/PsO3Zreq_F9kLF5UPFpHH5B_QMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:37:67:29:79:ae:7b:b3:36:c8:4e:44:87:f1:bd:bf:ee:b3:
02:c3:53:60:43:42:6c:60:29:ca:0e:aa:3b:59:11:92:cb:ec:
ab:dc:ba:c1:bd:86:17:bc:76:35:d8:46:4d:d5:55:8e:78:a5:
27:07:4e:2d:70:d8:9d:7e:01:e7:a0:41:e3:dc:76:91:c0:6d:
85:2d:fb:5b:fd:81:93:98:ce:30:14:12:4e:55:85:99:d2:64:
b9:97:21:54:b7:05:1b:4a:06:8d:20:07:9b:8e:ad:8c:df:cf:
77:8c:be:a8:53:cc:ca:63:51:05:be:4e:50:a1:c2:99:a8:8b:
d3:98:a4:e2:79:63:55:75:d2:55:20:da:5c:dc:f9:fa:90:2b:
72:9f:26:19:93:c2:12:f9:3f:d1:48:eb:4c:32:52:ea:37:10:
79:e1:4c:2f:99:34:9f:a2:3e:37:f7:e4:8f:59:4c:50:b0:82:
ff:af:05:38:4a:8b:96:17:04:1b:70:89:b2:fb:54:f4:9f:b6:
4d:24:30:ee:fc:b1:dc:e6:9c:a2:f5:ed:4c:a2:d3:2e:8d:f5:
69:d3:ee:d2:18:d6:48:5c:3c:c7:47:13:8d:14:43:43:04:71:
8d:f7:18:65:89:2f:dc:51:68:68:83:dc:c3:e9:6e:56:1b:02:
6c:ef:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:00:02 2024 by rpki-client on console-ams.rpki-client.org