Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Pgdhz7m0ZmPnOPLYaw60TdQQvzM.roa
File: Pgdhz7m0ZmPnOPLYaw60TdQQvzM.roa (raw, json)
Hash identifier: HTPpMobh/U4ImyOaM0QCwvZNVuMSGN1bEvD1+UkEmkE=
Subject key identifier: 3E:07:61:CF:B9:B4:66:63:E7:38:F2:D8:6B:0E:B4:4D:D4:10:BF:33
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DACE1C67C5B24C01DAFB2FFE8BBD31
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Pgdhz7m0ZmPnOPLYaw60TdQQvzM.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35281
IP address blocks: 193.223.0.0/24 maxlen: 24
195.136.199.0/24 maxlen: 24
195.136.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ce:1c:67:c5:b2:4c:01:da:fb:2f:fe:8b:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0761cfb9b46663e738f2d86b0eb44dd410bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:99:09:50:a8:dd:40:ab:01:96:85:5e:2b:
08:8f:65:5f:13:ee:f6:07:8c:c7:ec:a2:78:41:25:
eb:4c:63:7c:ed:bb:5e:09:3a:96:3b:e4:70:49:8c:
e9:6e:b9:5a:98:ac:82:c3:db:fb:3e:53:38:30:40:
11:40:cd:d7:21:3f:a5:f5:3e:25:41:4f:42:1e:be:
e4:e2:05:23:a8:2f:93:f9:68:69:3f:89:a9:e3:ab:
29:4c:2d:f7:c0:df:7d:ed:c7:68:32:f8:05:9e:23:
68:65:0f:09:13:ed:be:e8:9d:3d:51:32:16:6e:27:
2b:d7:7a:79:6f:96:14:14:42:91:92:a3:97:64:ab:
5f:e9:f1:c2:9c:83:67:8d:fb:dc:76:4e:71:46:11:
53:33:47:17:e1:9c:ff:3a:cb:c5:77:d9:fb:f7:5f:
90:3f:eb:96:ce:f4:41:9b:6c:4b:4b:0b:f1:b6:83:
a5:6f:4d:ce:10:46:63:4c:47:04:6d:49:08:1f:d7:
70:8c:96:cc:df:9b:e0:b8:bb:17:b8:80:62:39:10:
eb:93:18:32:fd:96:19:aa:30:14:8d:a3:58:26:da:
b4:c1:18:ef:f1:67:c1:03:8f:16:12:c8:15:33:bb:
ac:f3:1e:7e:b4:93:df:56:8d:d7:0b:b6:4a:f7:7d:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:61:CF:B9:B4:66:63:E7:38:F2:D8:6B:0E:B4:4D:D4:10:BF:33
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Pgdhz7m0ZmPnOPLYaw60TdQQvzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.0.0/24
195.136.198.0/23
Signature Algorithm: sha256WithRSAEncryption
61:eb:1f:86:d4:32:4c:d7:f1:a6:64:ce:04:d4:a9:0c:50:e9:
e8:8c:f7:1a:1e:e3:7f:ba:ab:09:cb:bc:81:66:b4:c9:26:60:
e2:2f:5d:1b:1a:f5:41:a3:bc:07:53:ee:b3:31:ae:95:76:ef:
72:67:f3:a9:59:de:d7:f1:75:a2:75:45:53:06:d8:44:5a:44:
b1:3d:76:14:62:bd:0b:35:e3:9c:f5:b8:80:55:57:d9:0f:9a:
5d:3c:6b:af:1b:53:d8:73:f5:47:26:7a:fb:63:e6:15:f9:88:
42:5f:0e:39:41:3d:cb:47:d6:0b:92:78:d1:ea:a0:fc:7a:a3:
ec:32:87:0c:95:0f:d6:ca:c5:bb:8b:74:b2:51:eb:2b:b0:81:
96:2d:b9:aa:c7:33:12:82:38:0e:75:7f:3b:24:99:5b:b1:aa:
80:5c:0b:c5:60:be:83:0c:e5:88:82:53:cb:36:40:fc:b1:74:
39:d2:c6:57:93:e8:50:15:e5:a4:7e:c8:ac:0b:4a:e2:e3:09:
64:52:05:05:51:8b:85:f6:75:1c:15:91:b4:45:e9:f7:51:ea:
2a:42:c5:a3:72:12:f0:35:32:62:91:35:e1:71:19:01:de:8a:
cc:44:1a:59:d7:60:e5:82:f1:23:f3:10:fa:21:32:ae:40:31:
5b:72:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:44 2024 by rpki-client on console-fra.rpki-client.org