Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pgo079B64VWqbkrQWiT2zYYrO90.roa
File: Pgo079B64VWqbkrQWiT2zYYrO90.roa (raw, json)
Hash identifier: T8htDdR8nW5KG/8RV3161Jg8q7heLnSSamsQgNeakqk=
Subject key identifier: 3E:0A:34:EF:D0:7A:E1:55:AA:6E:4A:D0:5A:24:F6:CD:86:2B:3B:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192C03E8A84CCD8887945DCCBA689E7F0DC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pgo079B64VWqbkrQWiT2zYYrO90.roa
Signing time: Thu 24 Oct 2024 20:36:16 +0000
ROA not before: Thu 24 Oct 2024 20:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401152
IP address blocks: 185.216.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:3e:8a:84:cc:d8:88:79:45:dc:cb:a6:89:e7:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 24 20:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0a34efd07ae155aa6e4ad05a24f6cd862b3bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:46:87:d7:0b:4d:9e:88:36:27:56:59:74:
0b:e9:fc:4f:a6:09:47:5f:89:da:21:bf:30:11:2f:
d4:fc:6f:04:d4:1b:98:13:2e:25:c9:a0:fd:2a:a3:
57:68:8d:3a:f4:1b:bb:29:26:70:04:89:6c:aa:69:
f7:a9:4e:2f:55:e5:bc:aa:12:5c:5e:84:92:87:a4:
b3:6e:c6:a2:c8:92:ed:6c:47:0c:ec:87:0c:25:1e:
be:f8:02:7f:f1:2e:00:76:69:f2:fa:36:56:5f:3a:
50:66:df:50:9d:1f:59:ec:c6:7e:71:6b:ba:1d:cc:
64:0d:cd:26:ed:e2:5c:1c:cb:0b:ee:97:1a:03:07:
f5:6f:96:a7:16:4c:59:b3:99:42:f7:6b:da:a9:22:
d1:30:02:57:9e:e4:2e:17:5c:9a:b7:e2:54:2f:9f:
65:63:18:88:54:30:aa:80:fa:34:20:d1:cc:8d:cc:
e4:20:05:4f:ce:c4:d9:5a:f9:32:41:8f:bd:4a:79:
61:85:f4:b9:7d:4c:13:ee:c4:78:69:95:5c:a4:f7:
90:d8:6f:e3:99:0e:10:8d:0a:3a:af:7a:b3:8d:92:
93:60:41:b4:a5:92:02:a7:ed:5c:34:31:e8:53:f6:
9b:e5:24:91:60:98:14:29:8e:47:63:a8:28:4b:ee:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:34:EF:D0:7A:E1:55:AA:6E:4A:D0:5A:24:F6:CD:86:2B:3B:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pgo079B64VWqbkrQWiT2zYYrO90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
35:52:69:8b:dc:58:cf:2a:80:0f:b3:ec:d0:a3:4b:ad:f7:e0:
07:46:34:c2:83:81:4d:e1:ab:6d:86:6e:d5:09:9c:57:7b:9b:
b0:08:ae:f9:58:76:0c:6d:27:89:7b:9d:7a:7d:65:dc:59:20:
98:d6:02:a6:77:8e:6a:d1:6b:ff:be:48:9c:d0:5b:3a:6e:21:
57:da:fe:80:5a:94:6d:19:cc:5a:11:17:12:ae:f3:c0:4d:c1:
c3:a5:52:85:5e:98:99:52:af:1e:40:fc:81:3e:f8:0b:45:27:
13:6a:0f:38:aa:84:99:84:62:61:6d:9d:4d:d4:7b:de:37:76:
ab:43:6a:48:91:66:2c:a3:c9:8a:38:2f:ec:ba:c0:b5:2a:75:
d1:68:b6:6c:ba:5d:09:a3:88:ec:91:c8:78:8d:15:d5:65:b3:
2e:17:80:94:70:be:12:a0:b6:75:fa:8f:9c:ba:90:25:68:7b:
79:29:ec:c6:a9:ba:c0:83:af:9e:b9:c6:53:bc:2a:c7:b1:04:
97:b5:5e:5a:54:30:fd:94:c3:18:0c:54:03:bf:08:61:03:43:
67:ff:5a:fa:62:dd:46:2a:26:9f:9b:ae:83:ba:30:89:ab:fe:
ec:1f:bc:66:7d:56:f4:2f:d2:59:16:e7:3c:00:df:35:d7:5b:
37:a7:4d:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLAPoqEzNiIeUXcy6aJ5/DcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQxMDI0MjAzNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTBhMzRlZmQwN2FlMTU1YWE2ZTRhZDA1YTI0ZjZjZDg2MmIzYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicNGh9cLTZ6INidWWXQL6fxPpglH
X4naIb8wES/U/G8E1BuYEy4lyaD9KqNXaI069Bu7KSZwBIlsqmn3qU4vVeW8qhJc
XoSSh6SzbsaiyJLtbEcM7IcMJR6++AJ/8S4Admny+jZWXzpQZt9QnR9Z7MZ+cWu6
HcxkDc0m7eJcHMsL7pcaAwf1b5anFkxZs5lC92vaqSLRMAJXnuQuF1yat+JUL59l
YxiIVDCqgPo0INHMjczkIAVPzsTZWvkyQY+9SnlhhfS5fUwT7sR4aZVcpPeQ2G/j
mQ4QjQo6r3qzjZKTYEG0pZICp+1cNDHoU/ab5SSRYJgUKY5HY6goS+7s9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4KNO/QeuFVqm5K0Fok9s2GKzvdMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUGdvMDc5QjY0VldxYmtyUVdpVDJ6WVlyTzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudhoMA0G
CSqGSIb3DQEBCwUAA4IBAQA1UmmL3FjPKoAPs+zQo0ut9+AHRjTCg4FN4atthm7V
CZxXe5uwCK75WHYMbSeJe516fWXcWSCY1gKmd45q0Wv/vkic0Fs6biFX2v6AWpRt
GcxaERcSrvPATcHDpVKFXpiZUq8eQPyBPvgLRScTag84qoSZhGJhbZ1N1HveN3ar
Q2pIkWYso8mKOC/susC1KnXRaLZsul0Jo4jskch4jRXVZbMuF4CUcL4SoLZ1+o+c
upAlaHt5KezGqbrAg6+eucZTvCrHsQSXtV5aVDD9lMMYDFQDvwhhA0Nn/1r6Yt1G
Kiafm66DujCJq/7sH7xmfVb0L9JZFuc8AN8111s3p01n
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:45:53 2024 by rpki-client on console-fra.rpki-client.org