Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/PeexqNSiQc99rcm_VoKyCbguMF0.roa
File: PeexqNSiQc99rcm_VoKyCbguMF0.roa (raw, json)
Hash identifier: GLq4kn4bA3gBXs0Ap/3MCi0/A7LBby848AD8TbEKj84=
Subject key identifier: 3D:E7:B1:A8:D4:A2:41:CF:7D:AD:C9:BF:56:82:B2:09:B8:2E:30:5D
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 018CC7958C2BE99EB741A7035F3DEB1F8531
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/PeexqNSiQc99rcm_VoKyCbguMF0.roa
Signing time: Tue 02 Jan 2024 00:31:55 +0000
ROA not before: Tue 02 Jan 2024 00:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 185.164.254.0/24 maxlen: 24
185.164.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8c:2b:e9:9e:b7:41:a7:03:5f:3d:eb:1f:85:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3de7b1a8d4a241cf7dadc9bf5682b209b82e305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:31:15:93:03:2d:39:27:93:33:04:ed:c3:
13:63:9c:75:f6:1d:bc:64:c3:62:22:7e:fe:98:e9:
ba:f3:ac:d5:c8:21:2b:7c:fa:b7:69:8c:8b:26:4f:
eb:d5:88:f0:de:26:f0:87:d7:af:ba:56:07:73:38:
5e:48:88:4b:b3:9a:99:b4:da:b0:77:93:b6:fc:ef:
7d:58:9d:55:a5:32:d4:d2:54:97:d1:15:82:8d:15:
ce:4d:f6:dd:df:a3:93:99:58:db:1c:06:0c:66:bc:
bb:a6:99:b0:b9:f9:6b:e0:c2:2d:26:6d:cc:4e:21:
eb:12:17:35:a2:1f:9a:33:67:0a:2f:65:9e:92:2b:
56:8e:01:ca:f3:65:98:a3:23:0b:72:b5:29:b3:bd:
e6:47:7c:b7:47:92:b8:d8:ee:dd:aa:64:d5:25:de:
a6:89:7c:05:4f:fc:ef:b9:8c:62:88:35:93:5f:75:
12:ee:51:f9:fc:4e:a8:87:4b:31:40:84:14:20:16:
91:2f:31:29:b9:78:50:78:25:b5:8c:3e:14:91:c4:
cc:61:73:c6:fe:a2:83:96:e7:8b:89:fa:6d:4b:83:
63:77:ba:87:06:24:1b:6b:de:05:dc:b4:c2:15:66:
58:0d:7a:30:db:73:8c:2b:58:0e:f0:b4:f8:2e:3c:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:B1:A8:D4:A2:41:CF:7D:AD:C9:BF:56:82:B2:09:B8:2E:30:5D
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/PeexqNSiQc99rcm_VoKyCbguMF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.254.0/23
Signature Algorithm: sha256WithRSAEncryption
95:4e:72:7c:d2:30:e6:e6:1d:5c:2d:b8:32:88:17:a0:be:2d:
55:c9:9b:78:99:57:4c:1f:22:9f:03:57:4f:10:6d:90:38:5a:
cd:d6:d6:0b:3b:1c:9d:28:5a:ec:50:70:b0:2b:51:67:a1:b4:
b5:dd:0d:7d:3a:c0:c0:0b:74:bc:8b:6f:ca:39:a7:d7:97:03:
a2:72:09:75:06:c9:d8:66:58:68:f4:13:e8:cc:bd:0e:54:f5:
00:8d:6a:8c:9c:b0:8e:8d:d8:fd:0c:f4:87:b9:cb:24:f1:86:
f0:98:f0:2c:12:6d:27:ad:61:80:e8:e0:db:48:c0:87:5a:e4:
ce:5f:09:cc:5b:04:eb:90:fe:9e:25:c7:12:4d:fd:76:52:4f:
c1:ba:0f:99:9d:93:2d:82:27:22:90:c4:a9:9c:d9:bb:fe:1f:
69:1c:8c:7e:89:e4:f8:df:0c:10:5c:bc:67:14:30:a8:ee:68:
30:1e:f5:c9:94:cc:05:72:87:21:54:9c:1c:0e:c6:49:06:ec:
e5:46:fe:52:d7:9e:65:1d:94:7a:33:52:6a:fa:62:2e:fd:85:
60:8c:7c:8f:14:2e:e7:e3:4a:cc:6e:71:ef:f1:d9:51:cf:d3:
39:52:8d:3e:ab:e5:cc:5e:a6:2c:b9:d7:d8:a2:27:8a:66:3d:
b0:32:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:59 2024 by rpki-client on console-ams.rpki-client.org