Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pq_SKb0jtrrPt_mxov4RFeUYRDs.roa
File: Pq_SKb0jtrrPt_mxov4RFeUYRDs.roa (raw, json)
Hash identifier: +DgVMGThL5B/UHZIVvpDVecK7Isddc9TV2ofJICZ7kE=
Subject key identifier: 3E:AF:D2:29:BD:23:B6:BA:CF:B7:F9:B1:A2:FE:11:15:E5:18:44:3B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D40BF2549301D98187F4C266E961E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pq_SKb0jtrrPt_mxov4RFeUYRDs.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146993
IP address blocks: 195.178.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:40:bf:25:49:30:1d:98:18:7f:4c:26:6e:96:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eafd229bd23b6bacfb7f9b1a2fe1115e518443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:db:a4:58:87:ce:22:3a:11:16:3b:56:87:
b8:da:ed:20:54:b2:1d:2e:84:71:a4:46:05:94:e9:
59:af:41:82:60:eb:b2:84:6f:ca:9f:a2:13:af:01:
6d:08:71:39:4b:73:bc:c9:c2:8f:72:e2:3b:d9:86:
44:60:dd:da:20:14:fe:38:f4:cc:cf:18:59:5b:cb:
88:0d:2d:77:99:9c:2b:53:80:a4:79:40:60:a4:4e:
f1:de:d7:6f:42:09:89:7e:49:53:95:b6:d3:b8:03:
07:74:1c:92:2e:d4:a1:81:ef:5e:8c:28:cb:03:50:
76:60:0c:b4:88:4d:ff:f3:ee:d3:1c:de:c5:69:c5:
1a:40:07:a9:fd:3f:ec:21:24:07:35:49:1f:d8:f9:
ff:10:cd:bd:01:c7:57:18:cf:a0:5a:eb:53:b8:87:
c4:3f:83:03:c7:d0:05:8f:43:b5:7b:7c:f8:86:ad:
34:1c:7c:cb:24:46:20:71:74:3f:5d:ed:58:ab:98:
ee:56:e8:d5:46:49:52:0c:7c:c0:cf:49:9e:4d:08:
93:c4:18:a8:3f:86:e5:fd:62:48:f7:8c:53:5e:00:
e2:0c:19:6e:50:92:67:67:4f:85:7f:c4:cb:b5:0f:
21:c9:1e:5a:6e:aa:d6:78:8f:c0:de:8a:67:19:5c:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:D2:29:BD:23:B6:BA:CF:B7:F9:B1:A2:FE:11:15:E5:18:44:3B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Pq_SKb0jtrrPt_mxov4RFeUYRDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
37:c0:b8:36:03:0d:44:90:ec:f6:cb:32:ca:c8:f6:e2:a6:2c:
47:63:2a:c8:c1:45:01:27:bd:2b:9f:68:79:ef:90:1a:cc:fa:
25:38:61:9b:7a:c0:32:4b:29:56:3a:38:68:08:d3:3e:69:33:
6b:93:ce:c9:7b:99:fb:f3:cb:69:95:07:fa:4f:76:58:d0:d3:
44:65:20:22:e8:4c:25:cb:a1:c9:ab:cb:46:ed:6b:3a:d7:02:
16:dd:cf:28:50:7e:44:7e:b4:a9:95:9e:70:c5:b6:f8:a4:ea:
d2:c5:c6:4c:6e:f6:0d:e2:15:07:c1:f1:a6:80:dd:38:fa:9c:
1a:83:de:95:7d:20:dc:1f:d8:0e:55:58:e1:5a:86:fa:92:3c:
90:74:e2:11:6d:6b:e3:96:13:77:40:6d:f0:49:ed:44:29:a8:
c6:21:d5:81:6e:7e:d2:b5:a1:de:bd:48:3d:a0:e4:ca:d9:7f:
8a:a2:d7:0c:d7:b2:42:1e:9c:4b:12:a0:0c:e1:a9:ec:2e:53:
3e:a3:e3:77:5d:fc:cf:68:45:e3:f2:fd:09:1a:f8:34:81:7e:
05:ea:f9:79:f0:d4:9e:54:43:46:e0:00:ad:d1:3e:3f:0b:86:
65:6e:75:d4:04:f6:00:33:57:6b:f3:fe:c6:8c:26:2b:c7:f8:
88:8a:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 13:10:44 2024 by rpki-client on console-fra.rpki-client.org