Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/PCdukw-JvVX1FynLGOG3nN8ymx8.roa
File: PCdukw-JvVX1FynLGOG3nN8ymx8.roa (raw, json)
Hash identifier: VUEmvkQZON+5usYPOzSWGJCQ90VypnHNjSOoSdjD46U=
Subject key identifier: 3C:27:6E:93:0F:89:BD:55:F5:17:29:CB:18:E1:B7:9C:DF:32:9B:1F
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 018CC2DB47C4BDC72CF352BEFAB91188A21E
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/PCdukw-JvVX1FynLGOG3nN8ymx8.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197177
IP address blocks: 109.106.4.0/22 maxlen: 23
91.223.52.0/24 maxlen: 24
81.161.100.0/24 maxlen: 24
185.174.12.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:47:c4:bd:c7:2c:f3:52:be:fa:b9:11:88:a2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c276e930f89bd55f51729cb18e1b79cdf329b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:a4:cd:01:5b:41:74:5d:53:5f:46:e6:34:
6b:b3:8a:d7:7b:f5:ec:23:af:22:8e:53:0c:83:db:
25:0a:28:0d:6f:c1:4c:8e:af:63:6a:48:16:fa:e1:
cd:9a:55:d5:b8:72:c1:d5:2a:5f:7e:71:91:2e:62:
03:00:d1:4c:67:43:30:c9:db:5b:dd:5d:bf:cb:30:
d5:0c:5b:73:0e:22:c1:d6:36:7f:c6:85:a5:ea:c2:
97:06:1b:66:07:52:85:23:93:ae:24:33:a0:9d:c7:
9d:d3:ba:08:0b:ca:c4:4a:f2:fa:22:ff:c4:b2:c4:
4e:49:1e:7b:a2:02:57:5f:ea:48:55:36:3b:59:11:
1e:bb:94:6b:bc:09:0d:47:dd:e1:90:cb:4f:d3:0c:
c9:72:13:33:4f:0b:7c:87:95:64:e8:dd:ac:3c:1a:
f6:51:9b:7e:e6:37:1f:f6:cd:aa:75:2d:9f:91:e7:
60:f2:94:37:eb:7c:63:b9:53:0b:48:32:bb:46:d1:
7d:c0:6c:11:20:ff:71:0a:d0:b8:66:27:42:44:41:
88:20:90:99:57:b0:7f:4c:42:5b:1b:08:ab:97:f7:
41:fa:51:d5:8d:fe:1c:c9:27:c8:02:85:5c:d8:e9:
31:2d:d1:33:b0:99:5f:ef:7a:79:6b:a3:8d:de:c3:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:6E:93:0F:89:BD:55:F5:17:29:CB:18:E1:B7:9C:DF:32:9B:1F
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/PCdukw-JvVX1FynLGOG3nN8ymx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.100.0/24
91.223.52.0/24
109.106.4.0/22
185.174.12.0/22
Signature Algorithm: sha256WithRSAEncryption
66:64:c7:f5:54:c0:5f:b9:55:99:12:71:78:f6:5e:36:26:4f:
91:a7:b8:27:8b:8c:27:8f:96:de:e6:9b:44:30:ce:ac:7d:a5:
9e:e5:71:8a:68:e4:01:bb:a0:7b:8f:5f:6a:49:5f:1b:82:b3:
5f:b8:8a:79:aa:69:78:e8:9c:e0:e4:b4:97:3b:e7:51:75:60:
16:c1:bf:d7:6b:b9:fb:bf:98:e2:de:d5:f2:e0:6e:79:21:71:
7e:46:00:1a:d5:e9:e5:43:58:71:5e:70:f9:22:87:64:a9:d5:
73:b1:fb:23:3c:fe:df:43:4e:02:0a:3a:1d:ca:07:9a:b5:1d:
98:e0:bd:04:cd:9e:e8:aa:6c:37:c8:f3:ab:71:24:96:50:5c:
8a:2b:06:7e:7a:ff:2a:ad:f8:4d:05:f5:99:9a:de:d7:c5:f7:
58:eb:5f:68:a2:13:18:6f:3a:64:b9:83:3a:eb:ad:55:13:a8:
c1:96:cf:90:9e:5f:67:2d:d2:29:2f:95:9d:08:be:30:a4:dd:
f7:00:4e:08:fd:34:3d:f0:2a:48:04:fa:74:66:d8:6c:f6:65:
fb:51:8a:ed:00:ef:b5:c7:ae:87:2f:80:10:56:ef:14:9e:40:
77:e2:33:3e:06:c4:c3:17:3c:e7:fe:84:b3:a7:69:9f:6f:81:
a9:c9:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:07:09 2024 by rpki-client on console-ams.rpki-client.org