Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/PdsQFLpeXHxUa-ld_Nx20RxuEFY.roa
File: PdsQFLpeXHxUa-ld_Nx20RxuEFY.roa (raw, json)
Hash identifier: mMBbUEdhxkvDb6qMaDtLzJIXUNNsEqhIATcb52IxZ7E=
Subject key identifier: 3D:DB:10:14:BA:5E:5C:7C:54:6B:E9:5D:FC:DC:76:D1:1C:6E:10:56
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018E7AA1753D8F4CAB67526963B66E91737B
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/PdsQFLpeXHxUa-ld_Nx20RxuEFY.roa
Signing time: Tue 26 Mar 2024 11:59:45 +0000
ROA not before: Tue 26 Mar 2024 11:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208619
IP address blocks: 45.92.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:a1:75:3d:8f:4c:ab:67:52:69:63:b6:6e:91:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Mar 26 11:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ddb1014ba5e5c7c546be95dfcdc76d11c6e1056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:61:c6:c3:0b:53:7c:88:f2:74:f6:1b:f5:
ca:fa:06:ec:b6:1b:69:ff:97:6d:99:bf:82:10:a1:
54:e5:2a:96:9c:1c:6d:1b:50:e0:b0:76:ba:8a:d7:
d4:83:6b:f8:e8:20:d6:c9:6d:b6:75:c6:0a:d3:44:
dd:b4:af:8e:02:5a:4a:9e:81:39:30:40:4c:91:75:
0b:e7:47:29:66:c4:1f:2a:05:36:39:8c:21:6a:c3:
37:e8:39:86:40:57:41:d3:7a:35:cc:ba:37:67:b2:
28:58:45:cb:16:90:d7:27:ce:dd:99:89:ec:0a:74:
a8:69:82:77:1d:b8:52:a2:29:0f:1b:a9:8b:d4:4e:
ed:46:49:13:68:86:e0:0e:7b:77:81:3e:ac:4f:90:
89:ae:76:39:c0:4f:ca:f3:fd:2b:8a:c1:13:b3:a9:
68:b6:c1:39:c7:cc:6e:c8:04:62:c6:19:b5:b3:3a:
48:e7:ad:84:06:2e:97:d6:fe:aa:92:f7:55:63:c7:
fa:be:68:f5:e1:8e:b6:72:6a:69:6f:f3:e5:87:7d:
99:4d:88:7b:f8:0a:e1:a7:0e:e8:31:21:1a:c9:eb:
8d:d8:34:99:2a:b6:97:75:90:d3:78:77:02:62:6d:
7b:36:2d:fa:d5:12:88:c8:d8:73:ec:19:52:c4:45:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:10:14:BA:5E:5C:7C:54:6B:E9:5D:FC:DC:76:D1:1C:6E:10:56
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/PdsQFLpeXHxUa-ld_Nx20RxuEFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:63:74:17:fe:07:91:b2:24:8a:69:15:c2:48:be:d6:0a:92:
a4:5b:d3:2d:12:10:cf:c5:d9:b2:e7:0f:1c:52:69:ab:99:09:
cd:41:c2:b3:ac:87:2e:0a:71:64:80:f9:4d:ff:ba:a5:3a:0b:
06:e6:aa:dc:66:b8:b0:6b:a2:ff:1a:6a:5e:c3:d7:47:21:c4:
5f:0b:bb:b0:40:27:8b:9b:66:aa:55:6c:6d:8f:13:4a:2e:e9:
7a:87:ea:ec:f9:0c:33:62:5b:e2:df:05:b5:9c:b4:3e:fc:7e:
43:06:bd:f6:87:11:59:9f:e1:24:9b:0b:ba:ca:4e:80:02:1a:
d1:cb:1e:2b:8f:da:37:08:cf:a0:27:9f:49:db:39:47:c1:29:
72:4b:de:15:de:34:e9:cb:cc:f6:44:71:17:f2:13:0e:10:75:
20:5a:12:6c:5a:38:e3:ca:c3:2c:75:5a:dd:ee:be:96:cd:b2:
eb:f4:ed:77:8b:ab:66:b6:7a:29:95:96:e1:ec:14:e7:c4:3a:
06:79:1f:91:15:ca:4b:d0:4c:e9:a2:f8:63:57:96:99:fd:fb:
8d:39:d6:d4:e7:12:c6:66:d3:45:ac:26:71:8f:15:9b:9d:48:
bc:9b:b2:45:8a:8d:a7:8d:fd:58:bc:e8:69:d7:c0:a8:d6:95:
58:45:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:24 2024 by rpki-client on console-fra.rpki-client.org