Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/PCbglP5zdcMU1ETz46d45ssOfT8.roa
File: PCbglP5zdcMU1ETz46d45ssOfT8.roa (raw, json)
Hash identifier: 8BXRHLKCVpocEuZBY/NCApO1+kGwpB3FEEgSMtBdrRQ=
Subject key identifier: 3C:26:E0:94:FE:73:75:C3:14:D4:44:F3:E3:A7:78:E6:CB:0E:7D:3F
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 018CC9BC583EA3250F22ED6BFD7780969894
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/PCbglP5zdcMU1ETz46d45ssOfT8.roa
Signing time: Tue 02 Jan 2024 10:33:32 +0000
ROA not before: Tue 02 Jan 2024 10:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 86.106.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:58:3e:a3:25:0f:22:ed:6b:fd:77:80:96:98:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jan 2 10:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c26e094fe7375c314d444f3e3a778e6cb0e7d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:34:f1:95:3e:7c:5f:0d:9c:fb:ef:15:34:
6d:ef:40:0e:0c:a7:95:bc:a5:9a:60:2c:21:ac:bb:
ce:97:00:9b:b4:8d:dd:af:c3:7a:78:6f:32:5d:c5:
fc:a9:82:3c:58:0f:53:66:45:7a:a8:df:25:b3:bf:
2a:1d:00:f2:7a:34:e5:8b:46:55:02:3a:a1:23:e1:
ec:f7:76:0d:3f:ec:0a:5b:1e:79:8b:7b:f7:89:42:
89:ad:84:b8:f0:65:e8:ea:cf:6c:f2:68:3d:c8:10:
61:4b:f3:05:b2:44:ef:f1:e4:c2:87:d7:57:9f:b6:
57:92:ce:40:96:93:40:3b:8e:40:1d:56:c2:43:b0:
45:41:d9:ef:59:ce:f3:60:82:32:c0:06:b6:39:91:
ee:cc:bc:34:7a:cc:81:84:83:0b:1d:59:32:44:e4:
19:68:fd:74:96:70:18:9e:eb:55:9e:39:a9:7e:ab:
22:a3:7d:3d:02:d2:d2:78:9f:90:96:6c:24:45:82:
7a:3d:48:e8:fe:44:95:7f:84:34:26:bf:b1:4d:94:
44:8d:a8:6a:d1:b4:5e:d1:4a:2e:d5:e2:d2:df:cf:
42:ec:0d:35:df:22:bb:a2:98:6f:47:f6:ed:d5:bb:
57:7e:f2:b8:25:36:92:ff:a8:80:b2:c2:52:91:3f:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:E0:94:FE:73:75:C3:14:D4:44:F3:E3:A7:78:E6:CB:0E:7D:3F
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/PCbglP5zdcMU1ETz46d45ssOfT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
77:31:69:35:de:76:92:8d:11:65:18:07:40:ef:ba:42:cb:6c:
5b:1c:eb:27:c2:a3:fe:94:ab:b3:15:90:2e:22:bb:ba:b2:cd:
d7:6d:b7:a3:32:6f:89:f7:29:55:d6:1b:09:8d:95:e4:9f:e3:
e0:21:81:e7:ff:e9:fd:12:5f:59:31:2e:9e:2b:17:69:01:6d:
24:1f:c2:ef:7d:54:ed:ca:c6:30:dd:9c:c2:2d:a5:94:3d:f8:
15:f6:99:16:19:d2:35:55:4c:a2:e6:87:40:93:04:a2:85:47:
5b:1a:84:8a:9b:cb:99:3c:84:f3:65:0c:b6:2b:6a:80:db:aa:
02:47:72:75:bc:03:15:4f:cd:d4:71:38:15:1e:26:63:46:44:
26:4c:0f:bf:86:24:7a:76:55:a9:b9:d3:91:28:bc:bd:b4:b8:
c7:55:02:59:f7:83:2f:bd:49:c0:65:34:87:11:ed:26:c7:e5:
da:9f:29:3d:d5:e9:8f:02:c1:d5:f3:67:5a:f0:17:8e:8a:74:
c2:cb:91:b3:b3:8a:f6:f5:68:34:29:c7:de:1f:0c:0e:6c:06:
1b:42:8f:a6:ce:d4:22:5f:71:8a:28:aa:80:21:2d:18:51:33:
3d:dd:b7:e3:ce:6b:96:7a:e0:76:b2:72:f2:84:e0:ef:dc:7c:
d9:81:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:54:59 2024 by rpki-client on console-fra.rpki-client.org