Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/PnbCsSNznRRluDBSBy4v2MzxIYM.roa
File: PnbCsSNznRRluDBSBy4v2MzxIYM.roa (raw, json)
Hash identifier: fIa5ZMZSV5RjWOp8V2cbGfywfjHHa5cxoXympH6gqE8=
Subject key identifier: 3E:76:C2:B1:23:73:9D:14:65:B8:30:52:07:2E:2F:D8:CC:F1:21:83
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 018CC94E57C167EC8064E5D01502FD26C064
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/PnbCsSNznRRluDBSBy4v2MzxIYM.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 176.57.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:57:c1:67:ec:80:64:e5:d0:15:02:fd:26:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e76c2b123739d1465b83052072e2fd8ccf12183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:a7:ee:ea:3e:12:9e:64:d7:ad:b1:e2:fd:
1c:be:9d:31:0f:c0:8b:7a:06:2e:e0:3e:b1:a1:28:
cb:f7:db:43:d5:0a:6d:b5:a5:8a:14:25:b8:94:d1:
01:49:3a:df:59:7f:d6:d7:34:28:fb:27:cd:f4:f8:
a0:ae:59:66:c1:71:4b:9d:e1:25:bb:31:68:97:2b:
b4:d0:9f:a9:2f:1b:91:1e:2c:d8:92:81:f3:06:e9:
bc:09:3f:53:57:43:60:68:cf:24:07:bb:a6:32:6b:
23:0d:dc:92:95:f5:64:30:36:c1:58:dd:68:51:5f:
3a:f8:36:88:b4:81:1b:9d:53:b3:9f:05:f1:2f:2e:
13:a3:c1:8e:9d:07:b8:7d:21:5b:5f:72:99:02:e4:
cb:bc:82:98:01:09:e3:de:18:fb:c6:73:a6:fb:15:
16:da:44:c0:22:27:9c:6d:a8:5d:f9:3e:2d:00:fa:
7d:92:02:29:5e:fe:8b:d1:f1:60:5c:22:5d:61:c0:
66:df:ad:9e:41:df:61:28:0f:77:a9:99:37:bc:c7:
d7:5f:08:23:07:fd:09:ea:ea:e8:78:fc:6a:61:a1:
7b:54:ea:4a:c0:04:89:7a:d2:9a:96:f7:ba:59:c4:
68:26:0b:fb:66:d6:90:82:68:67:7c:c9:4e:d8:dd:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:C2:B1:23:73:9D:14:65:B8:30:52:07:2E:2F:D8:CC:F1:21:83
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/PnbCsSNznRRluDBSBy4v2MzxIYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:35:9a:b8:f2:68:a3:1a:0b:62:31:60:e8:ec:07:4c:8c:58:
7c:7a:2e:40:25:a5:da:d6:d4:81:c6:0f:95:d5:4d:7d:5b:c1:
4c:b9:06:aa:80:53:4e:61:5b:08:a3:90:ca:2d:46:b9:24:41:
4b:28:92:d6:e6:de:7c:1c:d1:52:02:7b:01:d4:e1:ca:d6:2d:
e6:53:ed:3f:8f:2d:ef:10:96:3b:c6:7c:fa:7f:10:b9:75:a7:
cd:8a:a1:80:46:b1:1c:5a:b5:e7:f0:23:ca:8a:c9:7c:87:70:
15:72:a1:2d:56:43:af:f5:f7:a0:34:5f:23:45:c8:23:7f:b9:
a4:9d:4a:27:c4:b5:13:46:fb:47:a4:6d:dd:6e:94:05:83:36:
ce:3d:0b:52:53:70:b6:5d:ed:fa:c5:68:26:f6:c2:ba:c7:58:
01:34:64:bd:20:9f:8b:c2:34:5f:08:b7:22:3a:9d:ab:5b:c7:
1f:13:71:22:d9:d8:25:6d:c9:72:9a:0a:b5:94:a9:9f:8e:ca:
1a:3a:a8:32:fa:47:b4:81:69:8a:39:68:d7:bc:a0:72:d9:7c:
19:32:ea:45:de:52:0f:2b:d1:d1:30:29:d0:21:12:c4:59:f4:
b7:54:b2:ed:ce:2a:1e:b5:4a:be:b4:bf:ed:67:c9:f6:46:e2:
e8:67:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:36:43 2024 by rpki-client on console-ams.rpki-client.org