Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/PW0ptNWYyiHTNccs_QgxDEOQM90.roa
File: PW0ptNWYyiHTNccs_QgxDEOQM90.roa (raw, json)
Hash identifier: oZLXXV1RYjmCNAvrffIMNFJySyrC+99lnApmqitlH/Y=
Subject key identifier: 3D:6D:29:B4:D5:98:CA:21:D3:35:C7:2C:FD:08:31:0C:43:90:33:DD
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0190B51A8CBF9A609B0FC83D1E35CCD34B77
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/PW0ptNWYyiHTNccs_QgxDEOQM90.roa
Signing time: Mon 15 Jul 2024 06:35:34 +0000
ROA not before: Mon 15 Jul 2024 06:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 94.228.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:1a:8c:bf:9a:60:9b:0f:c8:3d:1e:35:cc:d3:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jul 15 06:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d6d29b4d598ca21d335c72cfd08310c439033dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:5f:2e:72:c0:c3:31:7c:fa:7e:86:1f:53:
c3:f9:a1:fb:12:77:a1:54:10:00:8c:47:59:4c:32:
ea:f0:f5:07:83:36:81:1d:6c:7f:6f:d1:d8:59:83:
c4:9d:33:83:ee:ca:78:5e:61:79:f7:1c:87:67:4a:
91:ea:a0:be:28:d1:a5:2b:54:e2:91:69:15:24:3f:
0f:03:11:80:87:54:cd:7a:9a:cd:46:16:17:94:b1:
5c:6d:bc:f1:7c:53:e6:92:26:63:0c:df:19:d5:9d:
9e:83:51:58:cf:a2:ec:27:0d:33:f3:96:31:86:a7:
c0:63:ad:79:bc:d2:6e:61:4b:01:54:a8:7a:d9:10:
6a:16:1f:ac:d9:ce:b2:36:79:1e:c5:af:dd:63:5d:
11:55:07:f7:cb:f3:08:de:85:b1:18:dd:d9:3f:2c:
bf:cc:73:b5:1c:97:0c:45:a2:28:6b:21:69:7d:e7:
86:11:52:02:84:9f:c1:3b:4b:ea:f1:a3:0e:14:1d:
b4:0f:cc:4e:b7:54:64:97:ef:a5:05:3d:21:8c:9d:
4f:9e:03:e2:55:65:54:1e:27:7d:46:f2:4f:a2:cd:
33:d4:cb:ec:43:af:02:0c:34:b3:a6:92:a7:37:e8:
5d:26:8c:cc:f5:ad:6f:4b:bf:b1:a9:ca:ca:ba:bc:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:29:B4:D5:98:CA:21:D3:35:C7:2C:FD:08:31:0C:43:90:33:DD
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/PW0ptNWYyiHTNccs_QgxDEOQM90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:79:7e:42:c1:59:cc:2c:bd:80:ff:41:79:8c:c6:89:de:d8:
54:e0:af:3f:a8:93:2c:72:de:ed:e6:85:f5:d7:cb:74:56:cd:
c4:ea:49:08:f2:01:ec:58:e9:14:77:d8:11:1b:65:76:cb:35:
c4:9e:a4:29:43:46:16:cd:a4:c6:48:75:fb:11:fb:ec:f7:1d:
29:87:86:15:13:cd:79:ee:08:e8:d4:34:3e:0c:98:5b:fe:6c:
b1:db:39:e4:bb:84:71:6c:69:52:f5:83:ce:86:f0:21:55:64:
03:20:26:24:20:08:bd:c8:13:95:f5:c9:ed:b3:64:79:8c:65:
34:6e:51:c9:92:5b:7c:e3:f4:69:6b:9f:10:4d:0a:c6:e4:73:
4e:ad:aa:ad:78:a8:85:3e:e5:b7:ba:ac:a9:42:a3:83:5e:a3:
52:b6:90:7b:20:fd:c6:9a:1c:9a:44:a4:4f:45:ad:ed:4b:90:
45:40:0e:3e:1f:29:a6:92:24:3d:32:26:6f:2b:6a:2e:b0:05:
06:08:0a:63:6b:67:98:5b:61:5c:01:0b:45:d3:1d:11:8a:95:
c8:4f:93:c4:a8:40:a6:69:2c:9a:85:d2:46:c3:50:0d:53:58:
32:d1:f4:6d:6a:75:3e:72:a3:09:c3:3b:f3:61:3e:2d:6c:00:
60:6a:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-ams.rpki-client.org