Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PJL4NuyGOKRe7tuKVOcNwA32hlI.roa
File: PJL4NuyGOKRe7tuKVOcNwA32hlI.roa (raw, json)
Hash identifier: CxR6962NBPXm2NuRhpk5ZenmgOmm9UmXgA1Fq0JO7/A=
Subject key identifier: 3C:92:F8:36:EC:86:38:A4:5E:EE:DB:8A:54:E7:0D:C0:0D:F6:86:52
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 018CC6B8E1111B1EFE006A94909D65F57989
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PJL4NuyGOKRe7tuKVOcNwA32hlI.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206559
IP address blocks: 194.105.132.0/23 maxlen: 23
185.183.36.0/22 maxlen: 22
2a0d:4980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e1:11:1b:1e:fe:00:6a:94:90:9d:65:f5:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c92f836ec8638a45eeedb8a54e70dc00df68652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:da:8c:60:0e:6d:fd:2e:55:7f:30:3b:7b:
6b:34:96:2b:5f:c8:8f:e8:5d:90:cc:b1:8a:64:25:
c5:bc:ea:91:d5:51:a1:f6:fd:61:94:e9:ba:7d:b1:
dc:1c:c1:4f:5c:48:4a:6f:c6:68:c5:6c:6d:99:e5:
80:01:72:3d:1e:fd:42:57:4d:da:c0:6f:49:b2:64:
08:6e:5c:f7:63:1c:09:47:b3:7d:6a:43:a8:42:20:
e8:b9:13:66:e8:02:7d:74:04:1e:ab:ab:4d:b3:7b:
fb:88:11:fe:21:08:70:52:5f:26:b1:6f:8a:c4:ff:
ef:17:9e:9c:95:a7:8a:7e:2d:a4:88:ca:3c:81:b1:
42:e0:a6:91:bb:9c:94:04:59:5d:cc:b0:ab:36:8c:
fe:5c:1f:98:e1:27:12:95:ca:f9:e1:66:df:89:ac:
93:b2:54:d6:83:ec:56:9b:59:62:c5:43:03:e2:82:
75:10:8e:39:d6:c6:e0:27:1c:5e:f0:55:18:71:58:
19:a3:a3:2f:ca:df:c0:c8:ee:f6:c9:e4:53:06:4e:
78:b9:a5:96:af:af:13:57:fb:ce:83:a3:bc:f5:8e:
69:a7:ec:fa:1f:d5:26:46:c2:33:5f:ef:1f:1d:2e:
46:ae:9f:5e:23:95:bc:a4:91:39:5c:4a:a2:1c:7f:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:F8:36:EC:86:38:A4:5E:EE:DB:8A:54:E7:0D:C0:0D:F6:86:52
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/PJL4NuyGOKRe7tuKVOcNwA32hlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.36.0/22
194.105.132.0/23
IPv6:
2a0d:4980::/32
Signature Algorithm: sha256WithRSAEncryption
a6:db:92:ab:8a:74:ac:14:8d:74:f2:59:42:c4:95:42:9a:31:
a4:2d:b5:40:27:bb:7a:45:14:0b:d6:9b:9b:6b:e4:a2:a5:32:
d2:94:0e:03:e0:8e:6e:c2:6a:df:39:cf:72:da:d3:68:60:16:
c1:56:98:6f:c4:ee:cc:90:18:e3:f6:f7:46:29:a2:d5:fc:e4:
93:44:c2:41:82:d1:f0:26:01:a0:47:27:6b:11:0d:de:3b:92:
93:3d:69:a9:84:e3:66:4f:cb:6c:64:64:3c:c9:bb:a6:72:14:
9a:af:06:25:13:2d:8a:c5:7e:17:52:9e:74:b4:5b:b0:2a:53:
a6:7c:6d:32:8d:f2:82:a8:f6:8d:41:21:a2:28:30:ef:f1:95:
aa:3c:6f:4c:cc:d5:2c:09:b1:68:27:cc:80:6e:ce:5b:43:fb:
89:bb:63:d0:82:aa:e8:40:43:18:5a:95:e8:da:a3:4a:d3:50:
aa:84:69:42:18:46:a3:31:46:60:a7:fd:2c:d2:ea:0d:00:71:
aa:16:4a:de:21:e7:b0:98:84:7b:b6:d4:d8:57:28:b5:75:58:
2d:8e:ec:4e:c0:df:e2:a0:da:50:ba:ff:05:fe:14:2e:a9:fc:
c5:a3:3c:60:3c:38:a0:a8:d4:e1:70:88:38:23:1e:f7:8a:95:
35:07:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:55:21 2024 by rpki-client on console-fra.rpki-client.org