Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/PC5XeyNCvMvK2WqOSgikmlVUqhY.roa
File: PC5XeyNCvMvK2WqOSgikmlVUqhY.roa (raw, json)
Hash identifier: XmS9oVtxdaLjmoboJDMGMa2bVZYR5Us0cTxs7aJfh1A=
Subject key identifier: 3C:2E:57:7B:23:42:BC:CB:CA:D9:6A:8E:4A:08:A4:9A:55:54:AA:16
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 018CC9BC9AD1C7E25D4F7C1144BFC8A1B331
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/PC5XeyNCvMvK2WqOSgikmlVUqhY.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42573
IP address blocks: 91.199.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9a:d1:c7:e2:5d:4f:7c:11:44:bf:c8:a1:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c2e577b2342bccbcad96a8e4a08a49a5554aa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:df:66:c1:a9:73:03:59:f9:f1:b0:e5:ad:
5d:e5:85:0c:c4:45:0c:c2:10:81:66:8f:18:88:1c:
6e:66:46:df:c5:8d:5b:0b:0f:fb:52:7f:a0:d8:1f:
1b:2f:f1:20:4b:97:d2:29:ee:2a:07:97:21:fc:7a:
07:1a:dd:bb:70:ba:67:f3:c7:4a:2c:71:f9:4b:cc:
36:10:12:da:3f:47:e0:52:de:61:61:c1:c9:80:e7:
91:b8:0a:bc:d2:6b:85:02:be:cc:75:a1:ca:63:cf:
f4:ec:2a:da:ea:e5:cd:8b:ea:42:8a:1e:2d:b3:02:
35:c4:6e:08:b4:29:32:52:b6:ad:f4:6e:1f:3d:41:
08:50:52:6f:86:12:d4:45:b9:96:9d:02:1c:45:88:
14:50:87:0a:c7:c6:0b:f5:98:c0:da:05:5d:97:e3:
8b:a3:8e:aa:20:31:78:21:2a:f2:9e:51:97:2a:96:
54:94:a3:e4:47:6a:6d:35:ef:6e:f0:70:87:88:a4:
32:37:df:46:fd:f0:be:62:ff:1b:ae:1b:7e:6f:d9:
4d:33:67:e4:55:be:66:43:8d:74:f2:a2:02:5d:78:
15:ef:db:92:2e:05:1f:ad:ac:8c:fa:a4:6f:0d:d6:
23:4b:b0:1d:c2:84:3e:b5:c2:53:45:b1:aa:29:2e:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2E:57:7B:23:42:BC:CB:CA:D9:6A:8E:4A:08:A4:9A:55:54:AA:16
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/PC5XeyNCvMvK2WqOSgikmlVUqhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
93:68:19:bf:f1:a8:21:46:8a:1e:c9:92:01:fb:62:cd:e7:d1:
bf:03:1a:3b:39:42:bb:64:b7:c0:b6:b2:fb:73:c5:f4:3f:20:
36:49:fe:59:e3:9c:ae:77:fd:e9:5a:27:0f:13:cc:aa:e7:b3:
8b:81:e9:bc:56:7c:3f:c0:b4:9e:77:38:ab:fc:e8:34:3e:78:
d1:f3:ea:36:1a:0a:04:e4:e2:a4:a1:56:5d:12:a6:63:b6:b3:
97:d0:24:46:10:7d:e6:47:20:bc:b3:93:91:44:ae:ca:34:0a:
fc:c1:59:61:2f:eb:fe:aa:b5:72:29:4b:86:1c:75:8f:81:f1:
f1:62:cb:cc:f3:1e:c2:12:19:4a:56:33:00:03:10:08:55:0d:
86:4c:7f:41:57:4d:4a:9f:bd:8f:82:51:1e:e5:28:74:c6:bf:
96:dc:2b:40:36:3b:d7:d2:00:89:3b:98:03:e5:72:d6:0d:84:
13:2d:ef:0a:e2:81:26:2c:43:e8:51:1d:c5:58:f0:3c:a1:e2:
14:a2:e3:d4:23:8a:ee:fa:86:ca:50:95:f5:ba:4a:4c:c9:50:
da:db:ca:97:54:95:a0:80:f1:57:e8:ad:16:bd:e8:cb:37:4c:
7a:d8:be:a6:b4:76:94:c8:a7:b8:79:4c:c6:64:25:8b:b6:d7:
d5:de:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:17:41 2024 by rpki-client on console-ams.rpki-client.org