Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/Pjo7RFjIYmTOzXloJmMjTDxjcFo.roa
File: Pjo7RFjIYmTOzXloJmMjTDxjcFo.roa (raw, json)
Hash identifier: J1v9uuH6adLIUx5fE1OtPPYwZ/UiuhWYlEzqH1kg6JU=
Subject key identifier: 3E:3A:3B:44:58:C8:62:64:CE:CD:79:68:26:63:23:4C:3C:63:70:5A
Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial: 018E0F5B8A8415403A5783E7CCC844BAB3D7
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/Pjo7RFjIYmTOzXloJmMjTDxjcFo.roa
Signing time: Tue 05 Mar 2024 16:04:01 +0000
ROA not before: Tue 05 Mar 2024 16:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201702
IP address blocks: 185.66.200.0/23 maxlen: 24
2a05:980::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:5b:8a:84:15:40:3a:57:83:e7:cc:c8:44:ba:b3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Validity
Not Before: Mar 5 16:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e3a3b4458c86264cecd79682663234c3c63705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:ed:df:c6:9b:dc:00:e8:45:56:66:e8:bc:
ed:03:dd:9d:15:b4:47:97:b6:ba:9d:ce:6c:3c:a3:
fd:31:41:bf:5a:af:89:fe:89:38:74:a5:7c:da:99:
5b:f1:ed:35:5c:04:90:27:d4:41:c5:ff:5d:cf:3e:
03:3b:30:1d:ed:4a:3b:7b:fa:74:ba:63:fb:00:63:
c9:3e:29:6e:9a:30:ca:8d:52:55:5e:c2:64:81:da:
0f:03:5a:4c:d1:be:6a:86:2a:e4:d4:34:7c:85:b3:
e0:84:4d:5a:25:c6:8c:59:95:c6:54:b2:dd:fe:34:
15:1c:f6:61:7d:4f:4f:02:7a:b6:74:5d:65:7c:30:
e7:c7:4a:17:f5:64:45:9f:9f:61:89:36:ce:6d:5f:
44:a0:f2:db:a8:db:94:30:8c:34:9d:83:9f:81:3c:
0e:c5:5b:08:a4:ea:c8:66:94:3f:9c:0b:7c:45:94:
b4:f6:d4:10:2b:e5:bc:09:cb:09:51:99:80:0a:d3:
87:e6:70:a5:fe:0a:85:80:c4:4f:c6:17:a9:e3:9f:
57:bc:43:c3:19:fb:b3:6f:e7:eb:fd:83:31:58:8c:
87:8e:0f:7b:d7:2e:32:0f:a2:7a:ca:82:ac:cc:4c:
32:5b:69:aa:1e:23:39:94:08:01:ae:76:47:e0:b8:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:3B:44:58:C8:62:64:CE:CD:79:68:26:63:23:4C:3C:63:70:5A
X509v3 Authority Key Identifier:
keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/Pjo7RFjIYmTOzXloJmMjTDxjcFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.200.0/23
IPv6:
2a05:980::/29
Signature Algorithm: sha256WithRSAEncryption
17:50:34:97:f1:c9:e0:90:f6:ae:3e:3f:b6:70:93:86:6d:1e:
cc:6a:cb:d2:d2:61:e0:2d:35:e8:9a:5b:d3:95:88:cc:5c:ec:
11:c1:32:0c:c0:c5:b1:28:6a:f9:c9:f2:78:67:70:90:0e:e9:
7c:1c:08:a7:d7:20:86:94:dd:d6:1f:88:31:cd:27:8b:97:94:
7c:5e:76:52:47:90:57:87:31:67:9c:6c:c6:a1:14:1d:74:be:
02:8e:69:76:dd:39:49:7a:23:5a:c0:c4:34:c3:69:5e:b8:70:
5e:4b:5c:ec:cc:0e:7e:35:0b:31:0d:bd:cd:e7:de:9b:9b:1b:
b9:fa:7e:e5:16:64:13:3d:1e:5b:c7:f2:e2:d2:56:d5:c9:b9:
a4:76:ee:40:cc:3d:a0:c7:9d:f2:bc:bc:a2:ed:c1:65:24:0e:
24:67:45:40:6b:e3:cf:9f:17:22:ad:29:be:13:0d:9f:5e:5a:
4a:21:e0:be:e6:20:3b:15:f5:52:28:e5:11:22:85:45:3c:bc:
6b:87:5c:53:b5:42:31:89:7f:fa:71:aa:a6:ca:5c:da:e0:a0:
af:6d:13:eb:df:e8:89:3e:62:1e:d6:ce:d5:8c:c0:c7:c9:27:
10:64:9e:cd:ad:1b:9c:b3:a4:2a:9a:dd:9c:a9:34:23:81:74:
8f:dd:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:41:45 2024 by rpki-client on console-ams.rpki-client.org