Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/P0gNCFOUdZYfp0JVQ96n3a-84Ic.roa
File: P0gNCFOUdZYfp0JVQ96n3a-84Ic.roa (raw, json)
Hash identifier: VtnWGljyuC+deMR8Y+Qq5JyfKvZuxB/P9H2tkPGXEnQ=
Subject key identifier: 3F:48:0D:08:53:94:75:96:1F:A7:42:55:43:DE:A7:DD:AF:BC:E0:87
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 018CC49376EA418E700668A93A102D11F9D9
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/P0gNCFOUdZYfp0JVQ96n3a-84Ic.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47195
IP address blocks: 79.110.80.0/20 maxlen: 24
194.187.16.0/22 maxlen: 24
2001:67c:31c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:ea:41:8e:70:06:68:a9:3a:10:2d:11:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f480d08539475961fa7425543dea7ddafbce087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:2f:5f:9e:1e:f8:d9:0e:7d:2a:7c:70:c4:
f6:74:9c:69:dd:2f:64:a2:aa:66:3d:e8:c1:ef:ba:
14:60:1b:03:8e:2d:e4:71:08:ab:fd:46:e5:83:15:
33:e8:50:19:3c:6a:38:54:5a:6a:61:9d:97:8b:fa:
d5:1f:90:c6:0b:27:47:b8:ac:8d:10:89:d1:6a:9f:
3d:1b:9d:13:f5:c2:8f:85:72:4a:b1:19:d7:b6:2e:
4d:ff:3a:f5:da:8c:fb:e7:73:3f:d7:17:41:d5:9f:
ca:fd:71:82:5e:0f:65:9e:7d:ec:9e:5d:cf:7f:e0:
c8:8f:83:a1:9c:a1:e4:cc:b7:f6:9a:f5:c4:cd:35:
b3:f9:d2:9b:d9:6b:c3:4e:98:4a:76:d1:74:9b:0d:
ae:bf:28:ed:aa:77:82:c4:73:e7:c5:2b:f8:d5:9a:
fd:25:73:73:a5:98:1d:df:c9:bf:61:80:e8:1a:98:
d2:87:60:23:d4:40:de:d6:cb:a3:e0:cf:c6:2c:82:
67:c6:83:ac:6f:c0:d6:a3:2d:95:95:2d:61:e3:af:
a5:24:2d:62:2c:0c:d9:e7:97:9c:3c:24:74:fc:ca:
70:8f:c2:de:14:7b:9a:81:e3:d5:bb:55:29:24:0b:
27:96:91:cb:a4:87:1d:0d:9f:1f:99:33:7d:c1:6a:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:0D:08:53:94:75:96:1F:A7:42:55:43:DE:A7:DD:AF:BC:E0:87
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/P0gNCFOUdZYfp0JVQ96n3a-84Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.80.0/20
194.187.16.0/22
IPv6:
2001:67c:31c::/48
Signature Algorithm: sha256WithRSAEncryption
71:1a:2c:d3:c3:ae:2b:d3:fe:a0:c0:7b:9e:ca:a0:46:09:46:
35:29:8d:a4:e0:2d:00:5c:44:69:52:30:97:86:d2:20:f8:dc:
0f:10:17:df:f5:a8:8d:9c:64:d0:f7:14:2f:04:f5:07:2b:ed:
d5:99:fd:42:4b:52:91:47:5d:f8:9b:f7:16:f9:7b:2b:2c:e6:
a3:43:79:55:69:9c:5c:de:30:02:3f:d8:20:32:0b:82:43:aa:
45:d6:19:08:bf:0b:d7:d2:f2:8e:e4:e7:ae:76:af:e3:00:8d:
88:85:96:d1:4d:6f:2b:49:e5:7d:11:b5:e0:ce:70:8b:18:01:
c7:62:1a:9a:c4:31:a7:db:6a:06:99:80:53:05:9c:ae:6f:9e:
1b:a6:78:17:a0:cc:cb:48:35:cc:af:d4:6f:df:88:db:11:cd:
79:9b:5a:ef:d5:76:0d:40:23:26:bc:3a:f0:45:82:25:db:62:
10:80:ff:6d:0f:fc:65:74:6c:ce:89:8a:e7:9f:f7:23:a0:18:
1e:57:88:fd:95:34:4c:47:7e:69:7b:1a:a9:9f:08:b7:43:11:
6d:90:bf:d3:9c:8e:c3:ec:20:fb:17:2e:cf:45:f0:c8:59:8a:
45:5c:79:64:9f:a0:7e:fe:b4:88:fe:1a:b6:c0:98:6f:07:64:
cc:ee:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 05:39:25 2024 by rpki-client on console-fra.rpki-client.org