Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/PfB8DKIndqM4MZlOUiyN0Kjpe7k.roa
File: PfB8DKIndqM4MZlOUiyN0Kjpe7k.roa (raw, json)
Hash identifier: NR1HiulhkPbZJMTvYMaqVHjgAXFs5Jn4MvnAroe6Aak=
Subject key identifier: 3D:F0:7C:0C:A2:27:76:A3:38:31:99:4E:52:2C:8D:D0:A8:E9:7B:B9
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 018CC64B73349D27E84CEAA7C64A341F0EF0
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/PfB8DKIndqM4MZlOUiyN0Kjpe7k.roa
Signing time: Mon 01 Jan 2024 18:31:22 +0000
ROA not before: Mon 01 Jan 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2852
IP address blocks: 192.108.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:73:34:9d:27:e8:4c:ea:a7:c6:4a:34:1f:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df07c0ca22776a33831994e522c8dd0a8e97bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:79:a5:9d:87:6d:b8:75:e7:90:74:b8:67:
a7:75:b0:53:bf:ee:b8:69:26:ed:7c:e7:72:ad:d0:
bb:1f:2a:e0:ac:43:da:12:fb:e1:83:63:f9:84:0e:
97:59:d3:fa:bc:94:74:a9:28:95:0a:ce:5b:43:6d:
ad:ee:cb:e9:d0:8a:d2:bc:27:0c:0d:9c:09:1e:13:
4d:1e:ea:8d:29:c5:1c:91:de:50:93:fa:4e:9c:7d:
86:2b:1c:9a:c3:5f:5e:05:01:cc:a0:f7:e6:22:04:
dc:a0:56:e1:c6:bb:99:3f:39:6e:ef:f2:31:3d:17:
3b:da:90:c3:9c:f3:cd:1b:be:32:9e:fd:cc:6c:ea:
5c:b8:6c:8a:8a:c0:92:f9:2d:75:a4:b7:bf:19:20:
bf:d2:ce:90:7e:74:8e:33:60:d7:82:4a:7b:c5:aa:
b4:70:59:2a:e8:9c:51:d5:ab:96:8e:3e:48:f8:a1:
84:68:45:44:af:b4:e7:2e:d5:01:a0:d5:c2:3b:8f:
62:ad:1c:cd:68:48:34:9a:7a:6e:f2:2b:bd:3c:05:
06:10:85:41:80:41:44:6b:78:05:57:f0:b3:96:53:
cc:39:d8:b0:42:53:33:d2:85:dc:ee:31:47:bc:5d:
d9:bb:df:ba:66:db:91:a0:e9:65:1b:c9:74:ff:be:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F0:7C:0C:A2:27:76:A3:38:31:99:4E:52:2C:8D:D0:A8:E9:7B:B9
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/PfB8DKIndqM4MZlOUiyN0Kjpe7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:88:30:c8:94:f3:dc:4f:ca:7b:76:c6:04:f8:d4:16:8c:91:
d0:8f:b8:0a:74:59:ea:34:67:e0:d0:6b:f5:7b:9f:29:30:c9:
93:f9:6c:ab:f2:3d:f8:42:dd:47:da:d5:a3:11:c3:c8:50:54:
15:80:42:cc:14:b8:07:d1:c1:82:1c:4a:cc:46:a7:98:40:b9:
25:e0:ad:8d:1f:5c:35:f4:df:d7:cf:54:c5:97:81:38:d7:08:
03:be:a1:3e:1d:f3:0c:d6:63:ca:a1:0d:24:be:68:a2:73:fa:
df:32:77:7f:d8:9c:29:66:89:81:d8:b4:f7:2b:09:01:d6:f0:
3c:de:2b:d1:a1:37:45:a3:a3:4f:41:7f:a5:f8:22:01:b1:ed:
d0:0b:c7:ea:e5:09:26:6a:e7:01:ed:f3:c6:3a:f0:9b:c4:b0:
71:65:cd:69:ab:72:ee:87:ef:1e:e9:98:fa:05:35:9a:40:53:
a1:6d:9d:43:d6:d8:9c:fe:27:83:98:27:6b:4e:15:78:5d:e7:
6e:d0:43:89:50:f9:5c:ec:c4:b2:ae:a9:7f:02:4d:09:a5:a3:
c8:b1:7b:30:92:e1:22:75:d1:99:bb:38:6c:29:0f:13:05:b5:
44:75:a4:a6:a0:a1:4f:4e:af:9d:ba:5a:4c:7f:31:11:c3:97:
c2:fc:07:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS3M0nSfoTOqnxko0Hw7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjQwMTAxMTgzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGYwN2MwY2EyMjc3NmEzMzgzMTk5NGU1MjJjOGRkMGE4ZTk3YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtZ5pZ2Hbbh155B0uGendbBTv+64
aSbtfOdyrdC7HyrgrEPaEvvhg2P5hA6XWdP6vJR0qSiVCs5bQ22t7svp0IrSvCcM
DZwJHhNNHuqNKcUckd5Qk/pOnH2GKxyaw19eBQHMoPfmIgTcoFbhxruZPzlu7/Ix
PRc72pDDnPPNG74ynv3MbOpcuGyKisCS+S11pLe/GSC/0s6QfnSOM2DXgkp7xaq0
cFkq6JxR1auWjj5I+KGEaEVEr7TnLtUBoNXCO49irRzNaEg0mnpu8iu9PAUGEIVB
gEFEa3gFV/CzllPMOdiwQlMz0oXc7jFHvF3Zu9+6ZtuRoOllG8l0/74ttwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3wfAyiJ3ajODGZTlIsjdCo6Xu5MB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvUGZCOERLSW5kcU00TVpsT1VpeU4wS2pwZTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGyAMA0G
CSqGSIb3DQEBCwUAA4IBAQAviDDIlPPcT8p7dsYE+NQWjJHQj7gKdFnqNGfg0Gv1
e58pMMmT+Wyr8j34Qt1H2tWjEcPIUFQVgELMFLgH0cGCHErMRqeYQLkl4K2NH1w1
9N/Xz1TFl4E41wgDvqE+HfMM1mPKoQ0kvmiic/rfMnd/2JwpZomB2LT3KwkB1vA8
3ivRoTdFo6NPQX+l+CIBse3QC8fq5QkmaucB7fPGOvCbxLBxZc1pq3Luh+8e6Zj6
BTWaQFOhbZ1D1tic/ieDmCdrThV4Xedu0EOJUPlc7MSyrql/Ak0JpaPIsXswkuEi
ddGZuzhsKQ8TBbVEdaSmoKFPTq+dulpMfzERw5fC/Ac/
-----END CERTIFICATE-----
Generated at Tue Jul 2 02:52:02 2024 by rpki-client on console-fra.rpki-client.org