Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/PvSeZFFc2j45kxInKSSd7p1J-nQ.roa
File: PvSeZFFc2j45kxInKSSd7p1J-nQ.roa (raw, json)
Hash identifier: 5MW4X2OHKnAFW0FN0/bG+74J+aF6Ly6X3iHGgxlfX4g=
Subject key identifier: 3E:F4:9E:64:51:5C:DA:3E:39:93:12:27:29:24:9D:EE:9D:49:FA:74
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 01921DA4BDCF909E645FA2C9B9FBBE059F5E
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/PvSeZFFc2j45kxInKSSd7p1J-nQ.roa
Signing time: Mon 23 Sep 2024 06:49:48 +0000
ROA not before: Mon 23 Sep 2024 06:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39421
IP address blocks: 185.44.80.0/23 maxlen: 23
185.44.80.0/24 maxlen: 24
185.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:a4:bd:cf:90:9e:64:5f:a2:c9:b9:fb:be:05:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Sep 23 06:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ef49e64515cda3e3993122729249dee9d49fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:3b:26:4f:e8:13:a2:35:5c:97:3d:8c:db:
28:89:a6:10:07:0a:94:66:08:b2:a3:c3:cc:dd:e6:
9d:bc:f4:e0:56:d8:4d:4e:9d:27:5e:3b:63:57:e5:
55:72:04:3a:06:02:d2:31:4d:0f:db:5d:9b:6d:8e:
fa:91:92:6c:4d:db:79:79:e4:42:e5:fc:9e:d7:fa:
69:b9:46:2d:fa:0e:43:5d:6d:c8:cb:16:5d:82:a7:
a6:52:2f:2e:21:8d:8f:d3:ba:9d:0b:d8:78:cb:58:
c6:4f:e9:13:21:29:91:41:dc:f5:9d:b2:29:82:02:
3d:5a:02:c8:40:87:71:2f:d7:c2:29:e4:d9:a3:f0:
f6:51:d4:0e:81:ee:70:68:72:4b:37:eb:c6:a8:b6:
9a:5a:32:07:34:b6:98:09:31:77:5a:c5:13:44:87:
10:80:a0:35:82:71:d0:87:e4:70:82:9a:8b:59:6f:
37:88:49:78:ca:b8:f2:d8:e1:96:3a:1a:10:45:b9:
f2:ab:59:84:cd:f9:1c:5a:86:fe:25:80:4f:c7:87:
b7:a5:51:c6:6b:3c:8e:6e:5b:b4:05:b1:19:de:fe:
98:77:36:b8:4c:c4:53:3c:92:b3:4d:87:e3:24:c4:
1f:5d:0c:77:d0:e9:bc:80:6b:4c:8c:65:81:8b:fe:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:9E:64:51:5C:DA:3E:39:93:12:27:29:24:9D:EE:9D:49:FA:74
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/PvSeZFFc2j45kxInKSSd7p1J-nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.80.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f1:9f:77:3c:9e:35:be:67:c6:e8:bb:15:62:b3:d7:93:f4:
9c:a8:5d:c2:dd:2d:3c:9d:cb:66:04:71:26:22:e1:8d:56:d4:
ff:4b:83:db:a8:9a:c7:36:01:29:0a:45:49:52:fb:d8:6d:28:
65:66:6e:6d:7d:41:69:e9:84:b9:06:7a:22:dc:26:df:f2:95:
30:bd:df:70:35:75:a3:2c:e0:5e:b6:c8:bf:09:c6:f5:dc:bb:
d8:6d:b3:58:b5:fd:7f:2f:3c:68:58:54:dd:e4:f5:61:9f:95:
ae:63:7d:8d:ab:d0:65:f1:b5:98:e2:d1:84:e7:4e:24:c5:7d:
7e:6c:3d:38:d4:75:3d:9e:45:92:de:f2:0e:09:21:b9:eb:b0:
fc:d8:ec:05:81:db:2a:2b:9c:b6:11:3b:c1:e7:78:c6:c7:dd:
5c:8f:fc:5d:df:02:6a:e1:e1:76:31:c6:98:e8:34:76:08:e0:
d8:68:9a:f0:d4:de:1c:7a:f0:f1:2c:f4:d7:28:ee:2e:eb:89:
c4:00:22:ae:2e:7d:9e:80:41:19:81:7e:d7:d0:43:c2:84:83:
cc:80:b9:c5:ca:87:75:d0:f3:e3:fd:24:88:bc:c3:1a:45:2a:
ac:a0:ad:ac:b4:dd:9f:82:36:10:a1:f8:82:9a:77:c2:e5:67:
ef:38:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:32 2024 by rpki-client on console-fra.rpki-client.org