Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/PFvf11W3TV1gZzMsaF3vw81Swkk.roa
File: PFvf11W3TV1gZzMsaF3vw81Swkk.roa (raw, json)
Hash identifier: PVqNqbfYQQ8DwcLKLG/WxYmNZ2hihr69Rd8hwIVNUq4=
Subject key identifier: 3C:5B:DF:D7:55:B7:4D:5D:60:67:33:2C:68:5D:EF:C3:CD:52:C2:49
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 0192AD9AD095A64101AEA8C7CEED476F768D
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/PFvf11W3TV1gZzMsaF3vw81Swkk.roa
Signing time: Mon 21 Oct 2024 05:44:17 +0000
ROA not before: Mon 21 Oct 2024 05:44:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 192.66.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:9a:d0:95:a6:41:01:ae:a8:c7:ce:ed:47:6f:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Oct 21 05:44:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c5bdfd755b74d5d6067332c685defc3cd52c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:b1:67:b0:d4:96:59:17:d2:db:29:9a:66:
34:1b:6d:5c:3e:6a:4c:f8:07:27:bd:5a:37:7d:9a:
d8:cb:5a:fd:1a:1f:f8:62:e0:63:d7:88:50:91:ca:
b6:f8:42:34:8d:15:80:0f:06:79:e6:57:4a:eb:aa:
16:0c:ed:84:27:95:e9:29:1c:e0:c2:90:5b:c2:32:
5f:14:24:20:61:d9:2e:d8:36:ca:6b:55:3b:6e:af:
7f:11:d9:0c:64:e5:33:f4:21:ec:a2:a8:e9:72:48:
fc:d2:46:e4:6e:f4:ee:79:2d:47:ff:c4:da:65:7e:
14:cc:5d:77:66:94:fb:2d:3b:31:da:eb:db:00:49:
d2:1c:46:93:fd:6b:a1:23:72:28:cb:44:d8:e6:55:
d0:35:c1:8d:aa:cb:5b:fe:db:10:3a:8a:31:b0:1d:
b7:9a:f0:8f:96:37:bb:6b:af:3a:a5:b3:3e:79:bc:
fe:b5:75:de:55:f2:1e:9d:96:8d:83:30:40:31:c9:
7b:b0:55:d3:bb:54:56:c4:3e:a6:31:b2:6d:b8:51:
8f:65:64:c0:a3:c0:67:cc:ae:88:3e:f2:c2:da:4d:
d2:df:86:92:e4:29:96:69:27:dd:06:a5:ae:b6:3b:
2d:60:66:82:ae:6f:27:b7:30:37:0c:49:5a:25:cd:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:DF:D7:55:B7:4D:5D:60:67:33:2C:68:5D:EF:C3:CD:52:C2:49
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/PFvf11W3TV1gZzMsaF3vw81Swkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.66.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:d6:cb:87:ba:5e:6d:30:b8:09:bf:e3:b5:e7:3a:d5:e2:ae:
5e:00:e4:dd:32:49:51:20:96:ac:4c:17:2f:c3:27:4d:ec:12:
e0:1e:01:b3:7a:33:5a:2a:fa:d0:c3:2d:10:a5:15:74:d1:bb:
4c:ec:1d:39:da:9e:72:ce:2f:f3:97:89:92:49:3a:13:f9:42:
6d:7e:23:82:8e:75:75:64:69:09:be:ba:c0:fb:b2:a7:5a:1a:
ef:17:2c:8c:6d:7e:4d:6e:29:7b:0d:8b:55:2a:c0:75:a4:eb:
28:7c:e5:06:59:bd:6d:6c:3f:d4:a5:e3:81:cd:1a:ce:22:b7:
9e:ba:e7:b8:fb:ea:ec:07:0b:1e:f7:3b:41:ad:2e:f0:0d:3d:
b3:8a:2c:c1:b1:86:4a:a6:27:2e:f6:eb:ba:9c:a0:44:82:b2:
d6:e0:05:ed:76:0e:84:b2:b5:51:6a:6b:65:c0:be:bb:6c:01:
fb:6a:82:45:f1:05:13:da:8a:06:ef:5a:6f:d5:20:d6:fb:94:
72:4e:a2:72:57:b4:3e:2d:3c:93:0c:a9:4e:99:2f:f7:69:6a:
00:b4:03:b5:9c:1d:6c:33:07:2f:9c:96:9c:dd:e8:e9:94:df:
60:fe:b7:c2:b7:7b:21:27:e4:b1:34:3b:d2:d1:d1:f1:56:1f:
8a:c1:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:20 2024 by rpki-client on console-fra.rpki-client.org