Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/PSFVOP_hNMu6pGv8OQjI1bho-Y0.roa
File: PSFVOP_hNMu6pGv8OQjI1bho-Y0.roa (raw, json)
Hash identifier: fCD0EKA19aiNJcDoxMkWaOfW/Ml6ogZNK+I2jytcbow=
Subject key identifier: 3D:21:55:38:FF:E1:34:CB:BA:A4:6B:FC:39:08:C8:D5:B8:68:F9:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 018CCA2A646C85F8819A32368E50183F8D78
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/PSFVOP_hNMu6pGv8OQjI1bho-Y0.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41893
IP address blocks: 91.143.240.0/24 maxlen: 24
91.143.243.0/24 maxlen: 24
91.143.242.0/24 maxlen: 24
91.143.241.0/24 maxlen: 24
91.143.245.0/24 maxlen: 24
91.143.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:64:6c:85:f8:81:9a:32:36:8e:50:18:3f:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d215538ffe134cbbaa46bfc3908c8d5b868f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:01:da:67:02:79:20:c2:6e:9d:53:63:79:
ba:f2:f7:6f:62:e4:b2:7d:00:ea:26:a4:13:9e:33:
a9:ca:f2:18:ca:f9:7f:d7:1a:6b:c9:a8:55:4e:53:
a8:5f:08:96:6b:b1:b2:1a:df:e9:43:45:15:33:2b:
b7:9d:75:33:a3:24:54:32:98:be:3a:5c:3e:34:aa:
f7:47:87:b9:d8:6d:30:41:b6:a7:ce:ef:91:b4:f2:
01:a3:6a:b8:8f:4d:6a:46:78:d7:01:84:3f:03:ba:
5f:8a:2a:98:29:02:d6:1a:a3:c0:0e:25:d4:4e:c5:
09:c4:e6:be:45:f3:21:e9:4f:f7:b3:70:c3:bc:d6:
69:7b:f9:07:6e:d2:df:05:bd:2b:01:e2:f9:3c:fe:
3b:a0:4a:50:50:53:d4:d9:b3:83:57:4d:30:c3:f9:
89:31:3d:69:4e:aa:57:06:7a:81:66:31:bd:90:77:
c0:2a:f4:6d:69:1e:d9:5c:35:38:ef:94:2c:42:58:
b4:f4:b7:aa:72:89:01:80:15:9e:35:36:3b:98:f9:
19:2c:58:a0:a7:d4:22:3e:78:5b:58:e7:8f:6f:3c:
49:22:ef:ae:20:9e:02:f7:b8:54:d3:55:bc:d7:53:
78:2d:11:82:8e:ee:a8:b3:ed:7d:46:30:c5:44:ee:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:21:55:38:FF:E1:34:CB:BA:A4:6B:FC:39:08:C8:D5:B8:68:F9:8D
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/PSFVOP_hNMu6pGv8OQjI1bho-Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.240.0-91.143.245.255
Signature Algorithm: sha256WithRSAEncryption
6e:b4:d0:97:05:6b:08:da:d1:36:5f:e3:de:f3:4d:63:54:86:
b7:ec:1a:10:2e:dc:09:59:19:f1:ec:69:44:21:bf:12:dd:af:
9b:56:fa:57:c5:aa:df:80:c6:c4:06:9b:fd:69:1b:e9:dc:7f:
f9:5e:f7:11:7b:7c:16:79:3f:96:d1:f8:b9:1d:48:96:06:d5:
ea:8d:5b:e3:f2:ec:57:54:d2:b4:47:5f:4b:8e:6c:3f:d8:c8:
75:18:2d:2a:7f:da:f0:aa:6b:78:e8:12:61:46:b4:a0:20:6a:
ed:1f:d0:8b:21:65:0b:db:20:05:1e:de:4e:66:b1:4f:c4:d2:
57:a9:e9:b1:5b:0e:95:9a:52:7d:4a:ac:ed:5f:5e:00:71:f0:
ce:0d:54:07:de:72:e7:d7:ea:cb:ff:e0:77:a2:56:0a:fc:48:
9e:1e:c8:1c:4c:67:a2:a7:65:37:71:83:a9:4c:8c:ff:a4:03:
f4:f6:f9:a2:60:a7:62:fe:45:d7:d0:f7:d2:db:f8:91:f4:5c:
9e:d3:59:42:8a:f6:ee:06:5c:96:2b:15:b9:53:af:37:51:16:
af:7f:f6:86:9f:a3:fd:a4:68:10:17:de:a7:1f:64:a6:cc:79:
d7:61:95:07:aa:84:b4:0a:b0:aa:4e:22:d0:03:ef:5d:dc:a8:
6d:02:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:59 2024 by rpki-client on console-ams.rpki-client.org