Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PvTAOXLhIgdcyYrp0ui4UWq_TyA.roa
File: PvTAOXLhIgdcyYrp0ui4UWq_TyA.roa (raw, json)
Hash identifier: +P6FbUoKUtYnHy+08VwLGQSlei1OZS0UcR3NHE7GK2E=
Subject key identifier: 3E:F4:C0:39:72:E1:22:07:5C:C9:8A:E9:D2:E8:B8:51:6A:BF:4F:20
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68E09E37CD89ADAF374CA4F097617
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PvTAOXLhIgdcyYrp0ui4UWq_TyA.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212414
IP address blocks: 93.179.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8e:09:e3:7c:d8:9a:da:f3:74:ca:4f:09:76:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ef4c03972e122075cc98ae9d2e8b8516abf4f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:94:f5:4c:ff:e4:fa:34:45:3c:c4:95:c2:
97:9f:b6:24:2f:29:da:fa:c0:a4:39:fa:51:44:ea:
89:59:ea:54:9f:40:ac:22:21:7f:4e:4d:9e:be:b2:
86:72:29:57:15:2f:46:73:be:ad:2b:bf:be:cf:92:
bf:f6:3f:93:e1:ee:bb:fd:d9:97:10:a7:7b:71:f2:
a0:d8:47:76:69:28:59:8a:51:c1:c2:bc:8d:d2:1e:
b1:ab:c5:6f:1b:81:3d:19:fe:8f:db:97:8c:6d:aa:
1b:6d:58:47:35:4a:c1:71:70:5e:c0:db:95:c2:4c:
54:50:ff:ae:09:20:fd:38:b1:0f:1b:8f:d9:5b:cb:
b4:55:66:74:80:55:10:f5:a7:01:9e:94:f9:92:28:
7b:92:92:8b:41:99:1b:11:26:b6:21:01:12:1f:2d:
7a:07:49:71:ad:34:c4:01:a6:42:13:f6:68:5e:e5:
d4:31:c5:ee:2f:45:bb:2d:10:8e:97:16:22:37:8a:
a9:cf:f7:ae:4f:fc:33:9b:6e:b5:ad:53:0f:72:88:
e9:d5:ce:2b:c2:49:16:dc:ee:50:b4:0e:2c:a2:44:
28:7a:e6:4e:44:fd:56:65:6b:04:05:d1:ab:67:88:
26:d2:87:d4:46:c8:d8:9a:cf:c9:ba:7e:12:32:7e:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:C0:39:72:E1:22:07:5C:C9:8A:E9:D2:E8:B8:51:6A:BF:4F:20
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PvTAOXLhIgdcyYrp0ui4UWq_TyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.64.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:5f:b7:bc:33:c9:f9:32:f6:fd:25:cd:8e:61:f4:5d:86:30:
03:77:ca:d2:48:41:03:e1:17:f8:b3:e4:45:03:8a:fa:f2:25:
f5:61:1b:6a:a1:26:6a:9b:2a:f3:d8:42:ec:bf:69:55:2d:29:
9d:f7:89:22:c1:68:bd:b4:f7:af:61:60:d6:10:8d:5a:22:4e:
63:90:6c:19:b1:fa:49:a1:35:42:32:19:7a:1f:d1:ab:65:48:
b5:70:ba:a1:d6:8a:41:a2:01:e8:af:18:fe:78:46:c6:72:91:
6a:0a:db:52:55:e5:6d:3d:c8:85:84:32:78:6f:24:9e:df:20:
d5:be:66:fd:af:47:9d:38:fc:3b:f7:c2:92:f7:bd:a4:ef:3c:
01:a0:3e:fd:39:54:df:69:f2:ad:d9:49:74:96:60:bf:24:be:
5b:09:8c:67:ab:48:c9:0a:39:20:99:21:a0:04:4c:67:9b:aa:
c7:c2:ac:5a:55:b4:61:9a:2e:9d:80:87:1e:4d:b8:b7:2c:98:
3a:74:75:47:42:5c:53:c1:de:a4:2b:29:46:53:8a:d3:82:12:
ba:e4:bc:6c:8c:78:e5:77:0c:71:cb:01:d7:c2:4b:55:c6:57:
93:dc:0a:d7:e9:49:2c:22:02:a9:4e:49:fe:cb:1c:15:67:58:
0c:9f:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:52 2024 by rpki-client on console-fra.rpki-client.org