Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/PcIJVOX03_X0_HtEwXUVAlt0c9c.roa
File: PcIJVOX03_X0_HtEwXUVAlt0c9c.roa (raw, json)
Hash identifier: 3L/t25cCH5a4oXC6pgwSSeLykCsACu/3IVbVLkiiUr0=
Subject key identifier: 3D:C2:09:54:E5:F4:DF:F5:F4:FC:7B:44:C1:75:15:02:5B:74:73:D7
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF4271D4E66F3BBCC9A8E22FEA897
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/PcIJVOX03_X0_HtEwXUVAlt0c9c.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198497
IP address blocks: 85.153.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f4:27:1d:4e:66:f3:bb:cc:9a:8e:22:fe:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc20954e5f4dff5f4fc7b44c17515025b7473d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:6f:8c:da:f8:f0:eb:b2:ee:e8:cb:11:bf:
db:03:b9:34:8e:69:dc:1b:34:b9:c9:d7:0c:79:f8:
ad:e5:07:21:08:ee:dd:81:4b:2a:f7:d0:d0:53:0f:
2d:2c:70:f9:6d:bb:b9:cd:26:80:fb:c3:cc:a1:a6:
7e:fa:45:cf:db:06:4c:e5:86:34:cf:4a:39:b5:66:
86:45:eb:d0:10:e5:fd:55:c4:f9:8e:25:1b:6f:e4:
80:47:8e:1c:bb:3e:7b:fa:62:55:e3:dd:61:b5:37:
3b:86:61:aa:0e:6c:8d:d4:93:36:f7:d9:b6:5c:30:
03:af:e5:a8:d0:70:cd:fc:93:cf:1c:a4:63:fe:7c:
ff:08:bf:2d:61:79:9b:78:95:fd:97:1b:53:21:6f:
c6:7c:8f:92:bd:d5:de:81:0e:fd:79:cd:86:a5:36:
86:7f:11:4b:11:88:d9:84:04:26:23:97:22:f6:51:
54:db:8e:d6:26:ad:c9:75:b6:ce:c8:7f:be:02:16:
7a:0a:2c:df:45:b5:45:55:75:d7:69:33:22:ab:90:
bc:8f:3f:fe:8a:20:c1:99:65:d9:55:58:00:3b:1d:
34:3a:f7:83:4e:b6:a2:ce:94:cd:12:4d:9d:7f:37:
de:20:8a:81:42:85:25:16:1d:37:d8:f0:27:43:ca:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:09:54:E5:F4:DF:F5:F4:FC:7B:44:C1:75:15:02:5B:74:73:D7
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/PcIJVOX03_X0_HtEwXUVAlt0c9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.178.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c2:c9:5e:87:a1:c5:76:82:36:ee:07:dc:ae:e5:58:ce:23:
3c:a7:0b:58:ec:44:78:0f:c6:b4:18:9c:00:dc:7d:c5:27:01:
48:1f:59:1d:f4:cd:fb:98:6d:f2:06:5c:ad:69:78:18:6e:85:
c3:33:bc:9d:01:15:60:1d:dd:91:ef:ee:16:a7:3c:57:15:d5:
b9:76:be:2c:1b:e1:11:42:57:dd:28:9f:5c:c6:81:56:99:ae:
78:a6:96:83:81:68:54:ce:a9:67:39:88:24:84:5c:0e:da:be:
c5:62:ba:a8:67:8c:0a:f1:40:8a:64:a3:21:58:2b:c1:82:d7:
e2:e8:63:2a:4f:6d:3b:b5:75:34:3d:e1:ef:b5:c8:f6:d6:55:
a4:45:93:92:54:c3:48:a2:de:49:c5:4a:b3:72:46:3d:84:3a:
a0:7b:d1:60:48:6c:fd:ef:5f:4e:62:7a:77:36:44:25:bf:ef:
45:45:cd:e2:04:3b:72:57:7b:79:57:3d:d0:85:77:5d:6c:e1:
3e:41:c4:6a:8e:f9:fb:69:3c:92:f0:f0:6e:41:7a:e1:14:4a:
7a:5e:1e:22:01:a1:86:78:47:92:71:1f:88:66:0b:0b:cb:94:
6e:3b:19:a7:a0:c6:c0:bd:d4:c6:3c:da:67:04:ce:b2:f7:26:
80:6c:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:09 2024 by rpki-client on console-fra.rpki-client.org