Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/PJ100iO3kB74HSUZcx5y_CmGnOs.roa
File: PJ100iO3kB74HSUZcx5y_CmGnOs.roa (raw, json)
Hash identifier: /lBxXhWVgEjaltshxeZ4FTdroWln5mGt7mt4gH3CQqM=
Subject key identifier: 3C:9D:74:D2:23:B7:90:1E:F8:1D:25:19:73:1E:72:FC:29:86:9C:EB
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018DC0222D96D0B19228B24B136B7C4ECA64
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/PJ100iO3kB74HSUZcx5y_CmGnOs.roa
Signing time: Mon 19 Feb 2024 06:51:21 +0000
ROA not before: Mon 19 Feb 2024 06:51:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.142.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:22:2d:96:d0:b1:92:28:b2:4b:13:6b:7c:4e:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Feb 19 06:51:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c9d74d223b7901ef81d2519731e72fc29869ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:f1:02:2a:78:e2:a7:13:ae:59:1b:61:d9:
81:a2:d9:42:54:e7:ec:e5:fa:77:96:c4:59:aa:a0:
1a:3f:10:7f:74:60:af:03:be:3e:f6:1f:80:b1:19:
7b:7e:28:61:f8:13:fb:c2:16:92:ee:0a:42:ac:e3:
e9:bc:8e:c5:b4:01:38:fd:44:99:44:e2:b6:b3:09:
9b:d9:a5:e2:3a:68:ea:66:bb:1f:19:4e:b0:56:0d:
75:70:bb:23:af:68:ce:cc:46:34:af:7d:47:a2:05:
a8:98:03:9d:9e:d9:41:b4:c3:00:af:bf:49:d4:7e:
f5:05:cb:ea:71:2a:c8:52:2f:45:28:70:2b:c9:f7:
26:29:3d:1b:21:71:61:fc:31:fe:a1:6a:97:71:06:
b8:12:6e:9e:e5:4e:b6:19:05:aa:05:a7:1d:f1:24:
75:be:1b:70:8b:6d:64:1b:5f:f2:d5:5a:30:54:43:
56:3e:bb:d0:8c:83:62:f4:a0:8f:33:3b:7c:d7:ea:
2a:a0:bd:0a:18:78:83:0b:e1:97:ef:14:e1:00:69:
61:37:e7:d7:95:e3:eb:41:03:c2:3e:a7:91:d3:db:
27:b5:6d:ef:7c:35:e2:9e:20:48:ca:14:b7:71:22:
79:d0:c8:35:09:29:c6:b4:49:1a:b8:c6:10:9e:76:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:74:D2:23:B7:90:1E:F8:1D:25:19:73:1E:72:FC:29:86:9C:EB
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/PJ100iO3kB74HSUZcx5y_CmGnOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.154.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5a:81:f9:cd:fe:74:8a:f4:c2:17:64:6f:a1:bf:94:ef:36:
f2:52:51:2e:21:01:18:62:f2:a5:2f:42:21:79:fb:7c:57:75:
7a:39:e6:46:85:5c:90:cd:71:57:66:6f:30:38:04:1e:24:f1:
3e:1c:02:2b:8a:2c:1d:4a:93:45:4c:09:a0:30:f1:a6:72:c8:
43:ad:23:85:96:14:f2:52:ce:bf:0b:14:68:90:aa:cc:06:ae:
2c:58:e9:df:92:06:d3:85:f6:1f:b4:7f:e9:2c:be:de:24:e5:
7b:62:76:ad:1b:c6:08:3d:5a:a3:2c:93:c0:2a:c4:de:40:cb:
1b:22:3f:08:6f:ec:5b:49:42:03:7a:ac:ee:f4:8a:b9:ef:15:
2a:1e:ae:52:77:0a:3b:c1:67:bf:b7:1b:37:94:84:1c:31:db:
54:2f:a2:c7:cc:54:50:52:72:3f:04:a8:7d:24:61:76:9c:4c:
ba:04:93:3b:35:99:c6:70:70:48:10:43:6e:87:f3:d6:1a:f1:
7d:54:fc:63:b5:a8:14:d9:6e:3f:b2:9b:97:eb:73:71:e5:71:
95:66:3f:4f:51:6b:ca:e5:5d:13:a2:c2:05:43:30:6b:4e:d6:
11:ab:d0:f0:25:7e:0f:77:e4:fa:2d:d1:6e:09:63:77:4a:46:
59:56:f4:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3AIi2W0LGSKLJLE2t8TspkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjQwMjE5MDY1MTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzlkNzRkMjIzYjc5MDFlZjgxZDI1MTk3MzFlNzJmYzI5ODY5Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipbxAip44qcTrlkbYdmBotlCVOfs
5fp3lsRZqqAaPxB/dGCvA74+9h+AsRl7fihh+BP7whaS7gpCrOPpvI7FtAE4/USZ
ROK2swmb2aXiOmjqZrsfGU6wVg11cLsjr2jOzEY0r31HogWomAOdntlBtMMAr79J
1H71BcvqcSrIUi9FKHAryfcmKT0bIXFh/DH+oWqXcQa4Em6e5U62GQWqBacd8SR1
vhtwi21kG1/y1VowVENWPrvQjINi9KCPMzt81+oqoL0KGHiDC+GX7xThAGlhN+fX
lePrQQPCPqeR09sntW3vfDXiniBIyhS3cSJ50Mg1CSnGtEkauMYQnnbjHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyddNIjt5Ae+B0lGXMecvwphpzrMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvUEoxMDBpTzNrQjc0SFNVWmN4NXlfQ21Hbk9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6aMA0G
CSqGSIb3DQEBCwUAA4IBAQB2WoH5zf50ivTCF2Rvob+U7zbyUlEuIQEYYvKlL0Ih
eft8V3V6OeZGhVyQzXFXZm8wOAQeJPE+HAIriiwdSpNFTAmgMPGmcshDrSOFlhTy
Us6/CxRokKrMBq4sWOnfkgbThfYftH/pLL7eJOV7YnatG8YIPVqjLJPAKsTeQMsb
Ij8Ib+xbSUIDeqzu9Iq57xUqHq5Sdwo7wWe/txs3lIQcMdtUL6LHzFRQUnI/BKh9
JGF2nEy6BJM7NZnGcHBIEENuh/PWGvF9VPxjtagU2W4/spuX63Nx5XGVZj9PUWvK
5V0TosIFQzBrTtYRq9DwJX4Pd+T6LdFuCWN3SkZZVvTt
-----END CERTIFICATE-----
Generated at Sat Jun 8 00:55:48 2024 by rpki-client on console-fra.rpki-client.org