Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/PPOc_HNxpvdgl_py9_ksf9RrVMQ.roa
File: PPOc_HNxpvdgl_py9_ksf9RrVMQ.roa (raw, json)
Hash identifier: MeGiJRL9Y9hmImUBGd0umSJNe24gb3OMRc4ksjj+RwI=
Subject key identifier: 3C:F3:9C:FC:73:71:A6:F7:60:97:FA:72:F7:F9:2C:7F:D4:6B:54:C4
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 018CC26D55BF52A1DA00AA65ADE90D564F0F
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/PPOc_HNxpvdgl_py9_ksf9RrVMQ.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50999
IP address blocks: 109.171.128.0/17 maxlen: 24
2a05:3280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:bf:52:a1:da:00:aa:65:ad:e9:0d:56:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf39cfc7371a6f76097fa72f7f92c7fd46b54c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:42:15:6a:bd:1c:ef:24:a1:fd:55:a4:90:
7c:5b:d7:43:c2:3f:27:1a:ae:f8:4f:f1:8d:10:67:
a3:29:6e:c2:0c:c0:b8:a8:8c:0a:ef:a5:15:1c:e9:
c3:a9:d9:35:a4:db:b0:dc:0e:12:9f:7e:e0:4b:42:
1d:c7:77:34:64:4f:bf:4a:42:90:9c:5b:39:28:77:
eb:7d:4a:6b:fe:f4:74:ad:d2:33:4d:7a:2d:29:42:
57:c2:5e:88:f1:20:3e:3e:ce:66:b9:cf:22:f6:da:
d6:4d:e6:fe:1b:72:0e:b3:66:3c:0f:96:cf:e4:16:
4b:7f:00:ba:d8:34:7b:e6:be:cf:9e:cf:cc:72:fe:
e9:34:77:24:ca:15:13:f7:a6:e7:33:6b:7f:77:2e:
9e:47:a3:c3:53:9b:e8:bd:ed:bc:0f:dc:45:96:41:
a3:49:03:87:32:61:67:8a:b7:fd:df:cd:e3:cb:e8:
d3:61:a5:17:d1:d1:67:cf:aa:9f:9b:98:62:21:44:
09:0c:22:30:58:86:22:1e:8a:7e:fb:f2:d3:6a:76:
f7:ad:a2:c5:0c:7b:61:b9:2a:10:de:7e:40:1a:78:
21:9b:c4:21:64:56:6a:76:87:70:c0:8b:16:9b:ea:
69:65:8e:21:97:36:22:e2:3e:0a:1d:88:6a:7a:33:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:9C:FC:73:71:A6:F7:60:97:FA:72:F7:F9:2C:7F:D4:6B:54:C4
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/PPOc_HNxpvdgl_py9_ksf9RrVMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.171.128.0/17
IPv6:
2a05:3280::/29
Signature Algorithm: sha256WithRSAEncryption
47:71:c0:3a:11:b1:c6:23:5f:ed:05:5c:c8:6c:f5:7a:6b:40:
1f:26:f2:75:22:59:c3:ed:77:45:6e:76:23:ed:44:17:7e:e8:
7a:51:06:c0:95:80:1a:48:af:6b:0a:c4:53:6a:7c:6d:53:b3:
95:0d:97:4a:3c:3b:c9:b9:3a:04:5b:35:00:8d:bd:c1:07:fe:
d6:24:63:70:e6:06:dc:4c:f5:45:07:29:0a:79:77:81:2e:d4:
62:81:57:3b:47:75:f2:72:79:c8:ba:e2:13:06:ae:86:46:c6:
49:67:2e:0e:bf:e3:91:48:c7:6c:54:0a:39:19:54:83:17:b1:
40:57:76:16:7d:15:cb:c0:54:b2:5b:f2:ca:e0:67:cf:72:c3:
11:bb:6d:d7:41:bf:e0:2c:0f:58:0a:6f:37:13:c3:56:86:5d:
9c:2a:48:e5:f8:b4:0e:8a:15:c9:cc:17:e6:94:b3:7c:11:4c:
73:fe:44:de:43:3c:a5:1c:86:de:e6:d1:06:80:bb:9b:54:3a:
2b:40:7f:e1:78:95:6d:19:7f:b6:52:bf:37:4d:52:56:cb:14:
6f:ac:4e:a4:a1:56:56:e1:07:58:0e:00:ef:08:2e:14:c6:3e:
ed:1f:47:f8:06:0c:78:7e:6a:8b:c6:3b:c9:63:89:6d:cd:18:
8e:3a:9f:e3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbVW/UqHaAKplrekNVk8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx
NzkxOTEwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2YzOWNmYzczNzFhNmY3NjA5N2ZhNzJmN2Y5MmM3ZmQ0NmI1NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qVCFWq9HO8kof1VpJB8W9dDwj8n
Gq74T/GNEGejKW7CDMC4qIwK76UVHOnDqdk1pNuw3A4Sn37gS0Idx3c0ZE+/SkKQ
nFs5KHfrfUpr/vR0rdIzTXotKUJXwl6I8SA+Ps5muc8i9trWTeb+G3IOs2Y8D5bP
5BZLfwC62DR75r7Pns/Mcv7pNHckyhUT96bnM2t/dy6eR6PDU5vove28D9xFlkGj
SQOHMmFnirf9383jy+jTYaUX0dFnz6qfm5hiIUQJDCIwWIYiHop++/LTanb3raLF
DHthuSoQ3n5AGnghm8QhZFZqdodwwIsWm+ppZY4hlzYi4j4KHYhqejNmCwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDzznPxzcab3YJf6cvf5LH/Ua1TEMB8GA1UdIwQY
MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt
ODZlNWE5ZWY4NjJhLzEvUFBPY19ITnhwdmRnbF9weTlfa3NmOVJyVk1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh
LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHbauAMA0E
AgACMAcDBQMqBTKAMA0GCSqGSIb3DQEBCwUAA4IBAQBHccA6EbHGI1/tBVzIbPV6
a0AfJvJ1IlnD7XdFbnYj7UQXfuh6UQbAlYAaSK9rCsRTanxtU7OVDZdKPDvJuToE
WzUAjb3BB/7WJGNw5gbcTPVFBykKeXeBLtRigVc7R3XycnnIuuITBq6GRsZJZy4O
v+ORSMdsVAo5GVSDF7FAV3YWfRXLwFSyW/LK4GfPcsMRu23XQb/gLA9YCm83E8NW
hl2cKkjl+LQOihXJzBfmlLN8EUxz/kTeQzylHIbe5tEGgLubVDorQH/heJVtGX+2
Ur83TVJWyxRvrE6koVZW4QdYDgDvCC4Uxj7tH0f4Bgx4fmqLxjvJY4ltzRiOOp/j
-----END CERTIFICATE-----
Generated at Sun Jun 16 16:47:53 2024 by rpki-client on console-fra.rpki-client.org