Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/P_PSQT1ij1L8WEHykThVUOhnI9Y.roa
File: P_PSQT1ij1L8WEHykThVUOhnI9Y.roa (raw, json)
Hash identifier: RHXufzIIIbDV6+9nQ1JY8xrZwFYV2+CJDZs7Y/cHcUM=
Subject key identifier: 3F:F3:D2:41:3D:62:8F:52:FC:58:41:F2:91:38:55:50:E8:67:23:D6
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 018CC4933D3F80F2A5E26A6579027E232255
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/P_PSQT1ij1L8WEHykThVUOhnI9Y.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212052
IP address blocks: 91.228.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:3f:80:f2:a5:e2:6a:65:79:02:7e:23:22:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ff3d2413d628f52fc5841f291385550e86723d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:7c:1d:95:e8:b8:bb:67:c9:06:2c:41:17:
1e:d0:f5:89:54:bf:79:86:1d:d6:38:d5:10:f4:fb:
38:7b:e8:f8:2a:17:8f:62:2c:02:48:fc:44:56:6c:
46:5a:5f:01:07:9d:aa:45:d0:97:fd:42:9d:cf:22:
18:cd:af:de:37:69:13:d2:b9:0a:ca:0b:5e:d0:10:
3d:fa:19:a8:bc:b7:2a:5f:4b:38:91:25:2b:62:32:
f3:74:c6:f3:32:96:fc:88:6c:d4:c1:d4:8c:3e:09:
46:bc:94:00:e6:87:d3:13:8b:e2:a8:a2:d5:77:dc:
29:69:ad:24:5c:a1:fa:f0:d4:59:a3:83:8c:6e:86:
1c:92:45:ad:7a:f9:ab:93:ea:d9:e5:bb:d2:5b:f4:
c7:a6:43:68:66:7a:45:bc:ae:2c:73:9b:17:07:67:
79:a1:fa:e3:a3:3b:73:13:87:9d:90:49:70:21:5c:
3c:1a:19:c5:58:20:ca:50:cc:17:59:a0:a6:17:89:
92:ab:30:0c:51:f7:83:15:d2:66:8c:ec:34:77:eb:
da:8e:2f:85:92:5a:8a:83:33:69:42:62:e0:33:41:
48:70:fd:58:fa:af:37:a4:19:01:43:86:99:4d:93:
57:be:e8:25:bc:fa:6e:46:80:21:a4:74:06:a2:78:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:D2:41:3D:62:8F:52:FC:58:41:F2:91:38:55:50:E8:67:23:D6
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/P_PSQT1ij1L8WEHykThVUOhnI9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.203.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b3:6e:59:6a:7e:70:a2:2f:df:9a:f6:13:4c:3c:12:4b:c4:
86:23:69:68:9a:81:b9:67:65:af:17:e5:ba:3e:b4:e5:11:6d:
b0:4b:94:8d:9b:6e:45:8e:7b:3b:f9:1c:42:81:53:8f:3f:bb:
a9:83:ba:ac:99:70:eb:3c:49:19:6b:e2:df:ed:ed:dc:cb:db:
94:33:fc:d7:b7:95:59:58:38:4a:02:5e:99:66:8a:a9:2e:4e:
12:20:d0:77:c4:4b:1e:b8:ef:a2:ff:e8:1d:55:59:cd:f9:cd:
12:da:85:c5:aa:6f:35:fe:7e:eb:1b:8d:36:2d:34:22:5d:e7:
9b:65:06:4c:4c:d3:8b:c7:09:9e:97:34:cc:de:7a:13:99:ff:
e7:de:51:86:0c:9a:d1:48:6a:ea:3a:33:3e:44:a9:61:2a:c4:
f2:3a:54:3d:9d:d9:7e:75:3c:16:6d:84:3d:a2:eb:10:2e:e6:
ca:04:ab:c8:bd:be:fe:8b:d4:db:f6:c3:ea:49:be:4c:f9:d2:
bd:5e:bc:96:97:fa:f9:48:44:03:af:6a:74:4f:7f:dd:78:29:
c7:7d:1e:3c:da:67:61:50:60:a4:66:99:db:db:32:39:07:9b:
03:a5:c6:c6:79:b5:1c:35:aa:3e:02:22:44:76:40:c2:bc:b8:
61:d4:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:12:38 2024 by rpki-client on console-fra.rpki-client.org