Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/pcg79x3xjTRecqQjm7Mv99kQi7U.roa
File: pcg79x3xjTRecqQjm7Mv99kQi7U.roa (raw, json)
Hash identifier: 07vQbUGqtSnVaLVwcqb2j8hOwmTq4gMID1FBvloo4oM=
Subject key identifier: A5:C8:3B:F7:1D:F1:8D:34:5E:72:A4:23:9B:B3:2F:F7:D9:10:8B:B5
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 018CC80190B75C6E203CA3E1A9886605361C
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/pcg79x3xjTRecqQjm7Mv99kQi7U.roa
Signing time: Tue 02 Jan 2024 02:29:54 +0000
ROA not before: Tue 02 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8544
IP address blocks: 185.141.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:90:b7:5c:6e:20:3c:a3:e1:a9:88:66:05:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c83bf71df18d345e72a4239bb32ff7d9108bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:eb:a9:b6:59:e0:96:f2:c0:1f:8a:dc:ea:
a4:4d:05:5b:fe:7c:e4:e9:85:cd:c0:14:8e:e4:a7:
ee:d2:c5:e4:35:84:b3:a8:6a:f8:7e:d6:b2:1b:05:
af:1e:44:36:43:1e:cf:27:8c:f7:e7:fb:17:98:e6:
6c:8b:e9:55:e1:2f:af:95:54:f6:db:95:26:82:35:
3f:c6:62:03:2d:29:04:16:58:fa:fd:9e:7f:7f:11:
f1:37:f5:66:e3:0a:e0:45:12:e6:98:89:88:80:76:
94:e7:eb:2c:e9:be:a9:dc:40:fd:c7:f0:7b:aa:8f:
b1:f0:72:4d:ac:de:2a:ec:39:86:1d:21:5e:f3:3a:
e4:1f:39:25:37:1f:31:ef:bf:37:3c:f6:df:67:97:
12:2d:4b:a0:26:1f:2c:30:d6:0b:13:fa:ff:6c:91:
02:95:52:be:b0:1c:83:34:bd:93:e9:c7:ff:4f:a5:
57:95:a2:d6:05:ee:f9:b1:0b:20:a9:06:90:4f:ce:
1c:31:f0:8c:b6:d6:e2:7f:7f:36:fd:a1:46:20:3a:
db:9c:f9:0b:e2:ae:91:f8:5e:12:92:89:c8:44:87:
49:49:69:ea:23:1d:0e:7e:96:df:34:f5:00:e1:c0:
86:21:12:92:c8:a4:92:16:67:67:9c:71:f2:fe:18:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:3B:F7:1D:F1:8D:34:5E:72:A4:23:9B:B3:2F:F7:D9:10:8B:B5
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/pcg79x3xjTRecqQjm7Mv99kQi7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.194.0/24
Signature Algorithm: sha256WithRSAEncryption
21:58:9e:6e:db:eb:12:31:83:e3:a7:57:b1:d2:d1:79:cc:c1:
25:64:db:02:96:43:e7:b1:f4:3d:5c:7e:7a:40:ea:80:45:fd:
e0:89:de:04:c4:53:79:d8:be:e2:3e:c0:ee:e1:02:26:f5:9f:
9b:61:a3:2a:01:4b:47:64:c1:5c:de:51:6a:05:19:6b:97:ed:
16:11:ca:19:fb:a3:2c:db:4f:98:74:c9:c4:f6:14:75:d1:bd:
78:db:eb:73:66:25:2e:c5:27:c3:53:cb:b9:e4:2f:dd:ad:ac:
81:c6:70:e2:a4:b2:c4:42:f8:dc:72:aa:97:51:86:3e:62:19:
90:ae:bc:83:7d:52:d7:81:31:37:f8:d5:a0:8e:e8:18:e8:b5:
d1:b8:e2:5d:12:b2:23:1b:26:65:84:09:9b:19:b6:7a:ff:ab:
55:a8:6b:d1:6d:a7:d5:7f:21:6b:bf:94:ce:c0:db:87:ae:2e:
b4:24:6f:f8:d7:8c:36:e0:2b:3f:1d:6e:f0:3f:85:40:85:f8:
0e:0f:1a:2e:db:a4:14:38:65:f9:22:e1:e7:2e:e0:34:26:a5:
34:c9:6d:80:4f:d1:21:9c:21:0c:d2:c4:de:83:bc:fc:12:14:
ca:71:a8:44:01:8e:04:a5:08:71:ba:03:c0:c7:40:d2:1b:64:
8b:76:92:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAZC3XG4gPKPhqYhmBTYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2
Zjg1NzMwHhcNMjQwMTAyMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM4M2JmNzFkZjE4ZDM0NWU3MmE0MjM5YmIzMmZmN2Q5MTA4YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6TrqbZZ4JbywB+K3OqkTQVb/nzk
6YXNwBSO5Kfu0sXkNYSzqGr4ftayGwWvHkQ2Qx7PJ4z35/sXmOZsi+lV4S+vlVT2
25UmgjU/xmIDLSkEFlj6/Z5/fxHxN/Vm4wrgRRLmmImIgHaU5+ss6b6p3ED9x/B7
qo+x8HJNrN4q7DmGHSFe8zrkHzklNx8x7783PPbfZ5cSLUugJh8sMNYLE/r/bJEC
lVK+sByDNL2T6cf/T6VXlaLWBe75sQsgqQaQT84cMfCMttbif382/aFGIDrbnPkL
4q6R+F4SkonIRIdJSWnqIx0OfpbfNPUA4cCGIRKSyKSSFmdnnHHy/hhC6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXIO/cd8Y00XnKkI5uzL/fZEIu1MB8GA1UdIwQY
MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt
YmYzNGQwMWY4YjBhLzEvcGNnNzl4M3hqVFJlY3FRam03TXY5OWtRaTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh
LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY3CMA0G
CSqGSIb3DQEBCwUAA4IBAQAhWJ5u2+sSMYPjp1ex0tF5zMElZNsClkPnsfQ9XH56
QOqARf3gid4ExFN52L7iPsDu4QIm9Z+bYaMqAUtHZMFc3lFqBRlrl+0WEcoZ+6Ms
20+YdMnE9hR10b142+tzZiUuxSfDU8u55C/drayBxnDipLLEQvjccqqXUYY+YhmQ
rryDfVLXgTE3+NWgjugY6LXRuOJdErIjGyZlhAmbGbZ6/6tVqGvRbafVfyFrv5TO
wNuHri60JG/414w24Cs/HW7wP4VAhfgODxou26QUOGX5IuHnLuA0JqU0yW2AT9Eh
nCEM0sTeg7z8EhTKcahEAY4EpQhxugPAx0DSG2SLdpI8
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:56 2024 by rpki-client on console-ams.rpki-client.org