Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/pnoGa-Wj3BRRn2MtErFjlBrHMys.roa
File: pnoGa-Wj3BRRn2MtErFjlBrHMys.roa (raw, json)
Hash identifier: Im8SsSzp+omYD4756Z6Nnb0Qf5PesxcaEMD2+3XFMrM=
Subject key identifier: A6:7A:06:6B:E5:A3:DC:14:51:9F:63:2D:12:B1:63:94:1A:C7:33:2B
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 018CC72741881B6CC9EE37F95A58CCB2D9D5
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/pnoGa-Wj3BRRn2MtErFjlBrHMys.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15461
IP address blocks: 193.93.12.0/22 maxlen: 32
91.219.220.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:41:88:1b:6c:c9:ee:37:f9:5a:58:cc:b2:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a67a066be5a3dc14519f632d12b163941ac7332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:93:3c:00:55:77:45:95:e1:e9:99:0e:b9:
6f:35:7e:3d:da:e1:97:2a:02:2a:be:8b:5e:54:12:
d8:b5:9c:d2:bc:75:0b:57:24:d6:2f:66:42:9a:8a:
1d:b1:95:02:27:ed:ff:50:f8:60:79:cc:33:e8:cf:
d0:18:91:00:9c:b7:fa:c7:55:7c:48:8c:4d:d9:24:
19:c0:01:62:6f:ed:26:7f:b0:55:44:db:36:be:33:
6d:a4:51:2f:93:69:89:8b:8c:ae:c9:08:db:d9:8c:
3a:fb:b8:82:28:08:73:ec:74:1c:1d:88:12:f7:59:
47:e5:24:b0:bf:09:ec:32:29:8d:1d:9f:05:fd:e3:
9c:37:41:da:46:2c:fd:85:97:0a:28:96:a6:46:ec:
b1:ab:be:99:ad:6a:ac:e5:8d:d5:f1:f1:c9:c9:f5:
42:78:82:e7:33:e2:c1:72:b5:4f:2e:4f:66:48:2f:
cd:fd:2f:11:4b:3d:07:04:d6:92:4e:95:9a:04:91:
7e:24:3c:f2:1a:0a:cf:43:d9:12:04:c5:9a:53:2c:
a5:8c:e0:b0:78:22:a4:47:01:0f:af:f7:82:49:ea:
52:68:e0:f8:d7:7a:3e:52:af:fd:89:e5:5e:1f:a7:
96:86:7c:85:22:56:cc:74:ff:65:f8:bd:34:fa:23:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:06:6B:E5:A3:DC:14:51:9F:63:2D:12:B1:63:94:1A:C7:33:2B
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/pnoGa-Wj3BRRn2MtErFjlBrHMys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.220.0/22
193.93.12.0/22
Signature Algorithm: sha256WithRSAEncryption
91:71:53:50:d1:78:6c:02:62:38:52:cd:22:ff:a4:96:14:f0:
11:a9:2e:2a:90:19:c7:ca:fa:6f:9a:87:94:2f:0e:1f:79:06:
8a:8a:2b:49:09:b2:4d:d4:e0:8e:44:27:b2:70:f5:59:64:60:
95:df:16:50:4a:6c:f1:09:1c:65:5e:fe:fb:7a:5f:27:df:5a:
37:b0:33:a2:7b:2c:29:06:9d:75:8f:45:1b:e5:f1:75:46:c9:
7f:9e:23:cf:7c:b0:48:38:a1:be:51:ae:d9:45:4c:2f:c4:9f:
63:96:61:f6:7d:a0:60:95:70:3f:e0:18:a5:6e:5a:63:18:16:
44:27:01:cd:3f:b2:c4:ce:34:fc:ac:10:8f:29:e8:ff:0f:81:
4b:92:3d:b1:02:ff:6c:44:20:ba:b2:5a:ff:1b:7e:20:77:3a:
88:5c:b6:2c:24:09:9f:3e:87:54:e9:45:54:2a:bc:5d:72:53:
4a:97:27:1a:03:0a:23:1b:7a:77:cb:dd:6c:6d:5e:cf:d2:36:
4a:28:ed:71:97:96:a8:a1:c5:86:4d:00:99:7a:13:05:33:f6:
e6:58:d6:fd:18:f3:3f:17:1e:c1:74:25:ba:3a:ef:57:3f:51:
a7:47:6a:21:d8:d2:9b:0a:6d:57:eb:05:a0:7f:8c:d5:14:44:
c6:79:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:03:21 2024 by rpki-client on console-fra.rpki-client.org