Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/Pjv4bSUr0ex3RfblbEcGZ-IpRIk.roa
File: Pjv4bSUr0ex3RfblbEcGZ-IpRIk.roa (raw, json)
Hash identifier: GEKq1lQdtcVI0klUNT6eHZV5hYJBYriSxD5zGir3TRo=
Subject key identifier: 3E:3B:F8:6D:25:2B:D1:EC:77:45:F6:E5:6C:47:06:67:E2:29:44:89
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 019188C69AB12F7EC30B85D351059EF5376E
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/Pjv4bSUr0ex3RfblbEcGZ-IpRIk.roa
Signing time: Sun 25 Aug 2024 09:03:22 +0000
ROA not before: Sun 25 Aug 2024 09:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34798
IP address blocks: 193.19.120.0/23 maxlen: 32
193.22.104.0/23 maxlen: 32
2a0f:c640::/48 maxlen: 64
2a0f:c640:1::/48 maxlen: 125
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:c6:9a:b1:2f:7e:c3:0b:85:d3:51:05:9e:f5:37:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Aug 25 09:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e3bf86d252bd1ec7745f6e56c470667e2294489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:17:6b:a5:4f:bd:dd:25:bf:94:27:d5:fc:
90:fd:7c:88:44:f7:eb:d4:a7:c3:c1:ae:cc:42:d9:
07:c9:75:c0:84:c7:13:f8:f8:e9:f5:41:71:ae:30:
38:9b:93:63:ff:3f:13:c2:3c:d3:9f:f7:f2:51:8b:
62:b2:c9:b6:68:5d:88:a0:69:ca:52:f5:4d:84:d3:
c6:fd:bb:6e:1a:45:59:15:dd:b0:4b:22:b6:ab:99:
40:ed:01:33:d4:dd:f4:e8:77:8c:44:4e:76:80:b5:
92:27:d2:9c:c7:bb:a5:e4:4a:10:6d:3f:82:41:9f:
34:b8:4c:0d:fd:86:b9:23:cc:b3:d5:0e:cd:a2:1f:
c9:91:19:4f:c3:4a:c2:29:6e:b4:19:dc:fb:22:72:
af:70:98:5b:5e:ad:e1:50:61:d9:25:92:32:b5:03:
7d:1f:6b:4c:27:92:8f:e8:e6:30:eb:f3:58:e8:d0:
8f:12:2c:f2:2a:fe:60:0f:b6:21:73:20:0e:d2:d3:
4a:c1:e6:75:64:cd:99:ef:47:3a:d8:b5:7d:b7:7c:
e8:fb:10:09:73:9b:c2:ee:9a:27:d4:7d:4f:87:e9:
e0:c0:18:74:b6:dc:be:21:a2:60:35:9f:d2:92:8f:
b2:eb:b7:20:78:35:7a:fe:87:b2:3c:13:eb:97:b1:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:F8:6D:25:2B:D1:EC:77:45:F6:E5:6C:47:06:67:E2:29:44:89
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/Pjv4bSUr0ex3RfblbEcGZ-IpRIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.120.0/23
193.22.104.0/23
IPv6:
2a0f:c640::/47
Signature Algorithm: sha256WithRSAEncryption
90:07:c2:ca:8f:44:0e:c9:33:a8:11:ec:3f:96:1b:01:74:3d:
ba:db:d3:c6:f7:61:ad:ee:75:16:cc:91:b9:62:3c:6a:ba:f4:
44:c9:3f:4f:24:8e:aa:f4:82:ec:27:26:81:b0:ce:c1:90:02:
81:d3:2e:27:4f:57:4a:9b:a0:12:52:5a:21:7e:92:8e:ed:7b:
cf:17:fc:ee:05:90:b3:0a:a6:1e:33:3f:0b:fa:4a:b1:88:7f:
17:7b:db:94:b9:26:79:39:a1:2b:b1:59:c1:33:87:36:c4:10:
d6:55:b1:17:6d:0c:e4:af:50:1f:87:13:6f:54:d4:57:34:d1:
7c:9a:7a:0c:72:14:16:21:25:1e:36:51:f3:10:1b:e4:49:70:
ed:44:3f:e0:d5:6e:9c:f0:4c:ab:1c:13:1d:9c:d2:49:e3:10:
19:f4:7d:3d:55:6d:0e:46:4a:b6:cd:7f:96:9b:ab:31:1e:13:
7a:43:7b:8e:ee:14:3d:16:da:04:e7:10:a3:c4:e5:07:58:dd:
50:87:61:34:94:fa:da:71:cf:7a:97:38:63:4f:6b:98:6c:c1:
a8:3e:1f:f5:af:40:2a:bc:15:d6:80:e9:4d:45:d1:86:30:e1:
c9:d9:0e:17:53:b6:4e:fd:72:55:72:76:31:87:d6:37:6c:c1:
1b:94:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 22:30:45 2024 by rpki-client on console-fra.rpki-client.org