Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/pmuBgLn6GCY-3DVdVZHjYQNPrck.roa
File: pmuBgLn6GCY-3DVdVZHjYQNPrck.roa (raw, json)
Hash identifier: +hxvnHf9CAHfpZhpSFHdHIfb7tYSggV5MB239KbZ+Ic=
Subject key identifier: A6:6B:81:80:B9:FA:18:26:3E:DC:35:5D:55:91:E3:61:03:4F:AD:C9
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018DA7617A8300BB117F3ADD6F84D8468D44
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/pmuBgLn6GCY-3DVdVZHjYQNPrck.roa
Signing time: Wed 14 Feb 2024 11:29:59 +0000
ROA not before: Wed 14 Feb 2024 11:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:61:7a:83:00:bb:11:7f:3a:dd:6f:84:d8:46:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Feb 14 11:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a66b8180b9fa18263edc355d5591e361034fadc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:03:dd:29:1f:cd:40:f3:d0:b1:0e:3d:1e:
71:a7:91:69:ab:3b:25:56:59:cc:ff:70:3e:5f:2a:
51:3d:97:67:7c:4c:08:43:57:6a:4c:c8:32:3a:6d:
d6:1c:c0:f8:cc:fb:9b:7d:cb:f7:91:cd:02:10:70:
25:84:59:f9:a4:37:ce:08:40:01:fc:e1:ef:6f:f8:
e3:72:80:d3:e3:66:38:6a:5e:d1:8f:f1:90:49:16:
d5:cf:66:8b:da:12:a2:c5:97:53:d1:6e:3e:bc:83:
5a:47:62:e3:5e:23:4a:50:dd:1a:2b:1f:3c:cb:f6:
d9:f5:3e:d2:19:47:d9:5b:45:b6:28:39:f9:ed:d9:
b6:d8:31:a6:ec:28:7b:9d:d6:db:ab:cb:e8:a7:9a:
42:0d:a2:6f:f5:05:97:91:95:22:93:fa:e9:99:d3:
46:6a:52:e6:5f:b3:c6:ed:b3:2a:83:8e:09:d5:e9:
7e:09:f8:95:84:df:79:cc:93:1a:bc:d2:03:3f:b5:
06:45:ce:f1:60:7c:44:16:a4:f2:21:6b:8b:17:84:
bf:29:77:6d:2b:d8:e1:48:7c:21:e7:7b:ef:62:d0:
97:af:39:59:ba:c3:b1:b7:94:90:95:4a:f6:9a:cc:
66:aa:0b:e5:18:e5:4e:76:ba:77:aa:72:11:62:b6:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:81:80:B9:FA:18:26:3E:DC:35:5D:55:91:E3:61:03:4F:AD:C9
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/pmuBgLn6GCY-3DVdVZHjYQNPrck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
39:97:d4:b7:8d:8a:8b:10:59:13:e3:ac:a9:a9:be:8f:85:78:
3a:32:3e:ab:cb:d3:25:2a:d0:b6:7b:8a:31:d8:47:4b:1b:22:
e8:83:2d:80:77:e1:c0:43:a3:29:98:8f:03:0f:61:2c:83:d2:
3e:16:4d:e3:6e:2f:1b:25:d5:8b:8c:ef:c9:de:51:ab:30:2b:
f6:33:69:b2:2b:0b:d6:a8:75:d2:fd:43:48:3c:d7:d3:49:3a:
e8:b3:ae:2a:a0:97:cb:ca:e8:ec:e4:f2:0c:d4:1a:b7:e0:9d:
f6:92:7a:aa:e2:31:47:f0:9a:78:5b:4b:e0:1a:1f:27:29:ce:
c6:e6:57:ac:63:2f:34:a1:5c:bc:6f:2e:88:a3:20:ff:62:56:
17:60:79:02:ad:fe:6f:aa:cb:f1:04:8d:22:ab:79:d4:ed:92:
f2:ac:76:2b:48:8e:fe:c3:f3:c0:30:56:5f:25:e9:83:b8:73:
70:05:d8:5a:cb:1b:84:1d:f6:82:25:ae:00:ae:eb:4a:82:31:
66:33:06:86:71:20:7e:11:a5:fb:0f:de:fc:43:e0:c9:cb:24:
d2:18:2b:12:0f:6a:46:0e:55:2c:09:35:90:03:0e:05:1a:01:
80:fa:d9:ab:1c:11:98:9a:29:bc:5a:fc:01:28:36:29:23:d3:
48:77:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:00:49 2024 by rpki-client on console-fra.rpki-client.org