Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/pNUZ4kFJeOE37iHxFUhk8_MMKns.roa
File: pNUZ4kFJeOE37iHxFUhk8_MMKns.roa (raw, json)
Hash identifier: BJteMFBDSqcx+N9fGCpDAhXn7GCssnwkVB09Ojly+wk=
Subject key identifier: A4:D5:19:E2:41:49:78:E1:37:EE:21:F1:15:48:64:F3:F3:0C:2A:7B
Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial: 018CC793714D8909A20A0BA939C095365722
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/pNUZ4kFJeOE37iHxFUhk8_MMKns.roa
Signing time: Tue 02 Jan 2024 00:29:37 +0000
ROA not before: Tue 02 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21413
IP address blocks: 185.217.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:71:4d:89:09:a2:0a:0b:a9:39:c0:95:36:57:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Validity
Not Before: Jan 2 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4d519e2414978e137ee21f1154864f3f30c2a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:41:b2:61:07:40:50:5e:9b:fb:11:69:1e:
34:b9:db:56:e2:81:ae:b7:6b:06:ac:a4:15:78:75:
a6:ac:a7:42:5a:aa:5c:3d:22:fa:4d:af:03:82:e9:
6d:22:62:b1:24:85:da:eb:42:d0:69:70:5f:cb:93:
60:be:1e:19:9a:a2:ee:0c:70:60:cc:3a:aa:39:95:
b3:f4:3f:5d:19:ac:b4:d3:98:18:4f:92:1d:97:aa:
30:76:9b:26:05:11:41:fb:cf:a3:92:df:00:b6:ad:
73:49:99:d5:50:80:dc:f5:2a:cc:7f:37:3a:45:fe:
15:42:b2:3b:f0:8c:4f:97:04:63:5d:0f:52:72:26:
79:54:c7:e2:26:14:47:c1:ba:54:fc:28:76:f3:bf:
14:27:71:9b:31:a8:fc:70:0d:b5:c8:91:24:ec:76:
67:56:52:6a:94:af:bb:91:de:fc:83:bd:ca:39:b9:
ef:7a:da:6c:de:45:59:8a:78:79:1c:1e:3f:f8:fe:
d5:57:95:4b:38:b2:2d:9f:a4:d3:69:39:df:6c:03:
da:23:4e:f5:ac:48:c9:ec:55:49:80:2c:28:da:0c:
16:6e:57:6f:c9:e8:9e:1b:67:99:4e:0c:4e:5b:08:
12:c1:7e:68:d0:77:c9:54:a0:fc:5b:ed:84:c0:82:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D5:19:E2:41:49:78:E1:37:EE:21:F1:15:48:64:F3:F3:0C:2A:7B
X509v3 Authority Key Identifier:
keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/pNUZ4kFJeOE37iHxFUhk8_MMKns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.176.0/22
Signature Algorithm: sha256WithRSAEncryption
54:cf:b6:37:13:8a:06:f5:ab:db:ac:ce:c4:df:d1:66:d0:1d:
36:08:07:fb:df:07:72:c0:4f:71:3a:fc:7c:d6:52:ad:05:80:
52:c5:29:0b:9f:ca:76:a5:00:75:33:47:be:e2:16:76:7d:91:
f9:fd:9f:4e:fd:5e:56:2c:f2:ff:90:36:21:cc:79:c2:94:c2:
64:01:c6:a7:23:17:5d:a0:32:f4:14:81:45:a4:b3:d5:9e:9a:
58:9b:66:9f:b0:9a:45:6a:e2:90:cc:c4:21:b9:4f:ed:3c:bd:
a8:8d:cd:b7:7b:0e:fd:3a:d5:b3:f9:44:28:8e:c4:60:7a:a9:
e5:3d:43:0b:53:3c:c9:b6:e5:1c:05:a1:bf:f5:d2:c9:36:7e:
43:83:6b:d0:2e:02:9f:7e:e5:de:ba:38:7c:e1:2a:e5:9e:9b:
86:b0:1a:df:e6:7a:f1:5f:00:b2:60:6a:4a:32:fd:92:1a:f6:
34:76:63:90:0a:11:74:03:13:9c:8a:2d:e0:23:63:4a:57:b2:
71:a9:5d:ac:ce:04:53:75:d2:f3:f5:59:60:f0:2d:52:eb:b3:
7c:54:16:d7:6f:65:2e:d5:81:2d:6d:fd:6e:60:c6:49:fa:1a:
3e:ab:c9:31:5a:d1:ca:8f:0f:52:06:4d:9e:a9:64:88:ad:49:
b7:83:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:37 2024 by rpki-client on console-fra.rpki-client.org