Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/PHZ3eoUoEH_-HSRm6e69cvTFwsk.roa
File: PHZ3eoUoEH_-HSRm6e69cvTFwsk.roa (raw, json)
Hash identifier: 83tx/q5xG++2kFtWc87MI3b8hxnLz68dVGUFEgEyCz0=
Subject key identifier: 3C:76:77:7A:85:28:10:7F:FE:1D:24:66:E9:EE:BD:72:F4:C5:C2:C9
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC5004D6897DBFCE35DA395A4BE10795A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/PHZ3eoUoEH_-HSRm6e69cvTFwsk.roa
Signing time: Mon 01 Jan 2024 12:29:40 +0000
ROA not before: Mon 01 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210677
IP address blocks: 217.113.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4d:68:97:db:fc:e3:5d:a3:95:a4:be:10:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c76777a8528107ffe1d2466e9eebd72f4c5c2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:fd:6c:0b:3d:7f:93:b3:79:c9:ab:6f:bf:
51:96:49:b8:2e:ca:5d:31:ae:27:86:65:f5:da:d7:
2c:a1:d4:9f:f1:3c:73:81:21:45:64:4d:d0:24:61:
a9:bf:b6:ef:9f:e6:2c:78:2d:81:44:4f:60:86:ec:
89:4e:c0:0a:9b:4f:84:c3:44:72:66:bc:9d:fe:fd:
a6:9d:63:c1:f4:2d:82:fd:7a:6c:4e:d6:99:2e:f4:
40:1e:71:99:d0:46:5b:ce:03:68:80:9f:f9:b2:ca:
a5:5b:4a:7a:d0:87:6a:60:92:5f:9a:38:21:fe:59:
76:55:9a:95:b2:89:47:00:81:26:71:48:8c:16:75:
bb:9a:3e:ec:c0:0b:46:a0:b8:10:4f:8f:0d:bb:9c:
3c:b1:0f:b7:b2:7e:08:cd:12:37:d8:e0:a6:21:47:
e3:8e:90:c8:af:92:c2:d3:ef:96:92:1f:08:92:52:
6f:2a:0f:42:3a:2f:e4:4a:d1:a1:b8:e0:bb:db:8e:
df:00:60:57:71:9d:d6:30:f8:b5:17:4d:cb:4c:eb:
23:4e:d0:98:e0:d2:f8:0d:cd:8b:51:4a:3f:aa:2a:
8e:59:e8:ab:77:d4:a8:b9:f8:f7:66:7c:d7:91:c8:
3f:64:5a:d7:94:ae:9f:03:3b:24:fc:66:7e:3e:7a:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:77:7A:85:28:10:7F:FE:1D:24:66:E9:EE:BD:72:F4:C5:C2:C9
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/PHZ3eoUoEH_-HSRm6e69cvTFwsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:31:38:c0:19:6d:6f:4c:66:1c:b9:83:c5:05:ff:c4:99:d1:
fa:ff:8b:18:f4:33:a4:03:ca:8e:66:7c:cf:91:50:27:51:4a:
56:46:f5:6f:df:32:a5:29:1d:1a:b9:f4:ca:11:81:67:91:f6:
cc:28:41:95:2f:f6:1c:f8:fd:34:ea:3d:01:03:02:e6:7a:b7:
90:fc:9d:36:43:0b:6a:81:c9:a1:65:78:e7:73:a2:bc:db:37:
56:45:8c:62:9f:72:bd:7c:fb:e7:db:dd:22:1e:f9:b1:37:0a:
f6:db:6a:c3:cf:4d:09:ee:7e:24:94:15:a1:89:c4:e0:1f:e3:
b3:59:4b:2e:3b:27:e8:39:c1:8b:d0:f3:ee:91:59:fb:d4:b2:
92:bc:af:cf:bf:95:ce:34:2b:fe:c1:26:ed:a4:db:19:ed:64:
d1:eb:41:56:cd:bf:07:03:d2:d9:7a:73:d3:a9:22:bf:00:54:
a6:07:ff:27:16:ad:9e:04:ed:be:1c:eb:c8:56:24:b4:87:88:
dc:87:15:6b:e3:2b:aa:5e:5e:24:19:30:86:a5:7d:39:12:b3:
41:da:35:ba:14:55:c8:82:08:e6:04:3e:4c:b2:d2:84:6c:e4:
98:7e:cd:96:f7:d9:65:12:5a:b6:fc:47:b8:55:e0:c0:ff:99:
38:02:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:37:08 2024 by rpki-client on console-fra.rpki-client.org