Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pdlg1ulWTpFSh8iV325ahxkQvQE.roa
File: pdlg1ulWTpFSh8iV325ahxkQvQE.roa (raw, json)
Hash identifier: XuRAh1JadCZOeEo3asEtFdr+bc5xnfRAVP+9Dqqdw38=
Subject key identifier: A5:D9:60:D6:E9:56:4E:91:52:87:C8:95:DF:6E:5A:87:19:10:BD:01
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018CC493982E46976EE9231723BEFD03D32B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pdlg1ulWTpFSh8iV325ahxkQvQE.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 217.67.68.0/22 maxlen: 22
91.200.212.0/22 maxlen: 24
85.255.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:98:2e:46:97:6e:e9:23:17:23:be:fd:03:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5d960d6e9564e915287c895df6e5a871910bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:da:da:6c:4a:14:0e:43:9f:e6:77:d3:ee:
b1:95:e4:b2:da:2e:78:c1:41:c7:a3:3e:7e:59:9f:
43:4a:c1:dd:b7:12:6e:cc:8a:3c:74:2d:dd:93:f1:
fc:5f:5b:ee:00:1e:43:21:14:42:2a:a7:2c:f7:b8:
c0:73:c1:1a:af:4a:8b:d1:76:e1:2a:b8:86:5f:9c:
eb:76:7e:a8:d2:f4:5c:e6:7b:cb:a6:9e:2c:9c:b5:
bb:13:e6:30:44:bb:2c:e5:63:3c:08:db:18:e2:c8:
cb:1c:16:4a:7c:82:76:f8:42:52:49:7b:37:45:ec:
f9:d1:12:eb:e7:94:6a:91:06:b7:40:82:ef:32:9b:
d4:f8:cb:c3:b6:88:f4:7c:e3:b9:3d:56:0f:27:a4:
c0:b1:5b:60:ab:07:0f:a4:0e:d2:dc:9f:94:f7:36:
75:e9:5e:a2:87:85:8f:a0:a1:5d:af:d8:4d:2c:d2:
24:6e:ea:7c:ff:e0:ab:90:8c:9a:35:69:05:ec:8b:
4f:18:76:40:ad:b7:67:a7:25:be:67:02:f3:bb:7c:
5c:c8:69:a6:d3:5c:d2:0c:a5:67:07:c7:36:33:b7:
35:75:a7:00:ff:87:be:5f:7c:3a:c2:2a:81:ab:fb:
5e:9f:3a:b0:ff:b0:c0:6c:f6:bf:98:b6:46:b0:d3:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:60:D6:E9:56:4E:91:52:87:C8:95:DF:6E:5A:87:19:10:BD:01
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/pdlg1ulWTpFSh8iV325ahxkQvQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.176.0/21
91.200.212.0/22
217.67.68.0/22
Signature Algorithm: sha256WithRSAEncryption
93:32:ac:ab:a5:81:28:04:15:50:b6:24:8b:d4:16:6a:52:56:
31:2c:f7:77:47:20:ca:e2:f0:15:bf:a2:96:49:22:55:1d:70:
1d:f3:ed:04:96:a6:33:6a:47:4d:48:26:87:3a:c2:1f:aa:3b:
94:05:1b:5f:55:37:39:c1:fe:46:ed:08:84:ba:65:e7:c0:8f:
08:ef:06:4d:4e:48:02:f6:fd:cc:2d:bb:5e:ee:e5:c0:7e:8c:
b9:e8:1a:2d:d7:e6:3f:17:97:91:c5:dd:84:e6:84:d1:a6:0d:
ef:58:d2:47:a0:93:23:e4:a4:02:cc:3e:de:24:53:eb:ad:df:
de:be:84:8d:2a:94:e5:4a:8c:07:eb:15:71:55:97:06:fd:b8:
97:b0:0f:ed:58:93:08:22:6d:4f:1f:51:47:80:95:b8:18:1c:
d5:b9:48:05:e3:71:46:fc:96:f4:2a:17:8b:b1:bf:e9:a5:5d:
4e:38:0e:03:1f:d2:83:b0:1e:b4:32:80:5d:99:06:50:5a:26:
f3:fb:bc:3d:b4:46:1d:a4:84:09:b0:e7:91:bd:f4:a3:33:b7:
58:6d:41:f1:da:91:0f:23:1d:b4:8b:4c:f4:13:f4:0b:d8:0b:
4a:dd:10:12:d3:ec:c7:25:fd:d2:ec:31:d5:28:ae:07:ca:f2:
c3:5a:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:17:24 2024 by rpki-client on console-fra.rpki-client.org