Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/PCYwqss8evuVQjkU_7Jdo7TijPw.roa
File: PCYwqss8evuVQjkU_7Jdo7TijPw.roa (raw, json)
Hash identifier: EJGqD7vNY1GAucHud03GQJO/j7hHUdGDfunbkiKVtLk=
Subject key identifier: 3C:26:30:AA:CB:3C:7A:FB:95:42:39:14:FF:B2:5D:A3:B4:E2:8C:FC
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 018CC9BC6C1C06C4D9C8C2557AB362C3C711
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/PCYwqss8evuVQjkU_7Jdo7TijPw.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9017
IP address blocks: 176.117.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6c:1c:06:c4:d9:c8:c2:55:7a:b3:62:c3:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c2630aacb3c7afb95423914ffb25da3b4e28cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:67:aa:89:b0:9e:fa:ea:57:78:c3:92:c2:
48:74:4b:f8:4b:da:b5:0f:11:80:ab:0a:7c:7d:7e:
78:ef:8e:df:df:6c:55:0b:d6:37:0d:ee:a2:3b:0b:
47:f0:61:a1:c0:0a:18:88:55:b5:01:3e:53:62:55:
d9:bf:98:1e:94:ce:b5:b5:cc:38:e7:28:bf:b5:d4:
ed:95:49:16:f3:56:02:30:b3:92:6a:de:03:4b:f5:
26:28:2b:c8:6d:ae:03:67:5f:b9:b2:99:e1:4d:13:
f1:1c:ca:8f:b4:63:5d:2d:ef:4f:d8:d4:11:e0:7a:
8a:16:bd:44:c3:1e:4d:55:17:40:82:da:b2:a3:55:
42:7e:b6:c8:43:ef:d6:0a:54:f9:d3:93:9b:fd:b9:
78:65:39:57:d8:5c:c9:34:1c:15:ab:a4:a5:26:f7:
88:59:95:08:19:fd:c5:de:97:ac:02:f8:27:25:91:
a6:19:83:56:22:02:ba:be:b4:a7:63:51:fe:72:98:
4a:f8:9e:fc:74:a5:ee:70:09:17:e9:1d:16:cf:d5:
c2:50:36:a7:9e:eb:ff:78:51:eb:dc:c6:0e:7c:c7:
47:56:73:91:ec:70:52:d7:ea:11:6c:0d:4c:e2:93:
a3:b6:53:af:99:64:89:3a:b9:81:ab:fd:8a:b3:62:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:30:AA:CB:3C:7A:FB:95:42:39:14:FF:B2:5D:A3:B4:E2:8C:FC
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/PCYwqss8evuVQjkU_7Jdo7TijPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:5e:ec:02:58:01:39:46:6f:5b:b8:ec:e6:81:02:a7:b8:
5f:b9:51:36:0c:e2:8f:32:19:4b:6c:5b:fa:a2:71:f8:80:a4:
1b:e5:d8:c5:93:9e:eb:08:fb:22:48:fd:35:38:13:0d:3a:d3:
35:d5:33:93:20:65:4e:34:b5:48:ca:16:e2:fa:67:ee:7a:85:
40:03:16:1d:5a:81:ec:b4:b9:32:10:fd:2b:36:5f:bb:3f:44:
aa:e6:b3:9e:ed:d5:e2:e4:82:21:90:23:56:46:53:7d:42:b0:
ec:b9:74:c4:83:23:26:58:90:3f:47:16:ba:9c:5f:fd:a3:b0:
89:4d:65:d1:02:32:6a:e5:c9:75:ee:98:b7:12:e3:2f:78:9f:
1c:64:9e:d0:42:00:56:77:54:70:da:62:05:ea:1b:c4:3f:d3:
55:73:9a:ed:f0:ee:e4:88:9b:d6:44:25:0c:0e:32:5c:d0:b4:
a9:99:d3:1c:bb:8e:b1:8e:1a:97:8a:c1:d3:00:fb:b3:c9:5f:
31:78:3b:70:31:e5:2b:4f:55:d3:6e:aa:44:bb:fd:1b:f2:0a:
9c:2e:ae:dd:91:6e:04:55:82:10:8f:35:1b:31:99:96:3b:cb:
ee:3a:64:5a:86:09:b7:21:9b:32:44:08:e8:04:fd:18:9b:c4:
ac:f5:f9:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvGwcBsTZyMJVerNiw8cRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0
NDAzNmYwHhcNMjQwMTAyMTAzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzI2MzBhYWNiM2M3YWZiOTU0MjM5MTRmZmIyNWRhM2I0ZTI4Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8pnqomwnvrqV3jDksJIdEv4S9q1
DxGAqwp8fX54747f32xVC9Y3De6iOwtH8GGhwAoYiFW1AT5TYlXZv5gelM61tcw4
5yi/tdTtlUkW81YCMLOSat4DS/UmKCvIba4DZ1+5spnhTRPxHMqPtGNdLe9P2NQR
4HqKFr1Ewx5NVRdAgtqyo1VCfrbIQ+/WClT505Ob/bl4ZTlX2FzJNBwVq6SlJveI
WZUIGf3F3pesAvgnJZGmGYNWIgK6vrSnY1H+cphK+J78dKXucAkX6R0Wz9XCUDan
nuv/eFHr3MYOfMdHVnOR7HBS1+oRbA1M4pOjtlOvmWSJOrmBq/2Ks2JNjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwmMKrLPHr7lUI5FP+yXaO04oz8MB8GA1UdIwQY
MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt
NzI3YjFiNTgzZWI2LzEvUENZd3FzczhldnVWUWprVV83SmRvN1RpalB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2
LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHU/MA0G
CSqGSIb3DQEBCwUAA4IBAQAbv17sAlgBOUZvW7js5oECp7hfuVE2DOKPMhlLbFv6
onH4gKQb5djFk57rCPsiSP01OBMNOtM11TOTIGVONLVIyhbi+mfueoVAAxYdWoHs
tLkyEP0rNl+7P0Sq5rOe7dXi5IIhkCNWRlN9QrDsuXTEgyMmWJA/Rxa6nF/9o7CJ
TWXRAjJq5cl17pi3EuMveJ8cZJ7QQgBWd1Rw2mIF6hvEP9NVc5rt8O7kiJvWRCUM
DjJc0LSpmdMcu46xjhqXisHTAPuzyV8xeDtwMeUrT1XTbqpEu/0b8gqcLq7dkW4E
VYIQjzUbMZmWO8vuOmRahgm3IZsyRAjoBP0Ym8Ss9fk7
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:53:58 2024 by rpki-client on console-fra.rpki-client.org