Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/PNmjV6f-v-5gZfYmDLEG6VXGGck.roa
File: PNmjV6f-v-5gZfYmDLEG6VXGGck.roa (raw, json)
Hash identifier: wd5Tgtn9oqe4cpgLGncnOwcjAzdY9hTBG7k9tHeZrr0=
Subject key identifier: 3C:D9:A3:57:A7:FE:BF:EE:60:65:F6:26:0C:B1:06:E9:55:C6:19:C9
Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial: 018CC64B58F64DCED9FB581A6183EDB7F67E
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/PNmjV6f-v-5gZfYmDLEG6VXGGck.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 193.32.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:58:f6:4d:ce:d9:fb:58:1a:61:83:ed:b7:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cd9a357a7febfee6065f6260cb106e955c619c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:cc:39:fd:ee:b4:ec:2c:68:b4:14:d6:e9:
01:cd:b7:73:b7:d1:55:62:b4:0b:f8:82:cf:ee:8d:
e9:c1:51:5a:35:d2:5b:fd:9e:d7:10:3b:7c:84:41:
85:c3:ab:de:50:43:9b:35:65:9a:48:0a:3e:c5:84:
76:1a:29:84:c6:53:63:85:47:ef:80:5f:36:b0:2e:
04:56:f3:51:f1:d5:83:96:72:ce:a7:65:12:0e:2e:
98:11:30:17:c3:ca:47:bc:f8:a9:89:99:d6:90:a5:
3e:e9:0f:4b:d1:eb:25:28:63:ce:5f:2f:de:a7:62:
14:ad:4c:ae:51:41:76:d2:a3:9e:d6:76:48:a5:15:
e0:bd:e7:51:6f:7e:ed:37:f8:68:85:4f:a6:81:87:
72:0e:0c:d1:e8:44:38:d5:13:c2:65:23:ff:06:ba:
1d:88:92:79:3b:d3:d1:ed:0d:42:dd:01:27:18:a0:
c2:28:34:40:e6:34:07:6d:ea:23:9b:df:73:33:60:
63:a2:25:11:03:ac:34:60:29:d0:cb:fe:ff:00:6f:
b1:d7:d5:da:d0:24:27:13:7e:73:e0:0d:3a:22:90:
cc:db:e9:fd:01:d8:1c:d1:44:79:51:e3:cb:d7:bf:
c0:b8:a6:2b:57:eb:bb:b9:e5:8c:3f:18:f7:50:bc:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:A3:57:A7:FE:BF:EE:60:65:F6:26:0C:B1:06:E9:55:C6:19:C9
X509v3 Authority Key Identifier:
keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/PNmjV6f-v-5gZfYmDLEG6VXGGck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.54.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d8:d2:69:f6:4a:06:45:a4:99:6f:eb:71:f9:68:1f:59:be:
b1:a1:0a:a7:b6:62:7a:23:9a:74:0f:3e:bd:8a:e6:fb:53:4d:
34:7b:a8:ea:32:01:3f:4c:89:55:a9:cf:94:a1:05:95:e1:91:
60:fc:52:7a:b1:af:73:0a:80:d3:62:58:34:94:81:99:4a:fb:
74:88:67:cc:ee:3e:4b:0f:83:a9:6d:89:0b:53:2d:3b:e2:5a:
e6:9a:a6:58:af:2c:7a:66:3e:a1:35:f0:e5:0c:7f:e4:ce:ca:
39:e4:02:6e:b4:30:f0:90:96:86:cf:2f:7b:76:9f:b1:3d:42:
87:4b:43:14:bd:9a:f6:e5:6b:76:14:ac:1d:ce:61:7d:b9:27:
0e:34:f9:33:8f:30:76:ec:c6:4d:8f:17:e8:78:5c:d9:f7:e8:
ac:7b:6b:bf:2e:e2:3f:07:00:0f:8b:5b:e3:66:15:83:7a:a2:
17:51:30:19:60:e0:a3:69:d2:23:41:80:42:2c:09:55:4d:65:
99:61:f7:80:72:a7:18:08:3a:74:0a:96:cf:11:d9:6f:a4:e8:
53:a9:da:32:a5:e4:c4:ba:29:ee:84:b0:ec:c6:09:ad:c0:99:
db:32:98:0e:2a:83:96:5f:3a:69:49:e7:f6:77:cb:ba:b2:24:
2d:d0:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:16 2024 by rpki-client on console-ams.rpki-client.org