Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/pjo_cDOOq6Z0EodmsdfcPdffXPI.roa
File: pjo_cDOOq6Z0EodmsdfcPdffXPI.roa (raw, json)
Hash identifier: 0PYwlcJAr20IVZA7CTNFirAsFoOtksCPJDlJ+zwar1I=
Subject key identifier: A6:3A:3F:70:33:8E:AB:A6:74:12:87:66:B1:D7:DC:3D:D7:DF:5C:F2
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 018E1D39099A2A4856F6AA279158C7CA5929
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/pjo_cDOOq6Z0EodmsdfcPdffXPI.roa
Signing time: Fri 08 Mar 2024 08:41:01 +0000
ROA not before: Fri 08 Mar 2024 08:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61330
IP address blocks: 185.141.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:39:09:9a:2a:48:56:f6:aa:27:91:58:c7:ca:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Mar 8 08:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a63a3f70338eaba674128766b1d7dc3dd7df5cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:e6:bc:e1:eb:de:7d:92:eb:33:b0:2f:7d:
59:30:0a:b4:36:a9:eb:0a:48:b5:d6:c8:50:1b:90:
eb:91:9d:18:89:92:b9:40:1c:de:eb:af:6a:ba:87:
82:c4:c4:86:d6:c5:e1:91:05:7f:1c:20:e4:73:e6:
b0:75:79:2e:ec:e0:5c:67:57:88:6f:a4:6d:fb:3a:
97:cb:79:b0:78:45:8a:0c:05:f8:31:34:ec:8c:6a:
7f:60:14:72:ba:4c:e3:c5:87:d7:d5:f2:f7:4b:85:
33:61:bd:16:1a:7b:1b:3b:77:ae:22:99:b3:46:fc:
30:bc:c5:a5:13:e5:b7:72:8a:29:4a:41:78:12:f5:
84:c7:13:ef:4a:5b:0d:26:4a:db:be:62:9d:ce:9d:
30:a8:93:0e:ee:f7:31:35:ec:02:91:a6:fa:65:fc:
4f:1c:d0:99:96:e3:3a:5e:d4:e9:fa:2d:78:2f:ed:
60:cd:72:78:16:e6:b6:9f:e9:f2:1e:50:2d:c5:2c:
d0:18:36:da:f7:d6:f7:88:88:71:30:ea:08:c4:e8:
dc:51:cd:4d:28:80:20:af:3c:b0:45:12:1e:77:22:
da:3a:48:28:67:b0:6c:74:1d:14:aa:fe:c1:67:fc:
fc:79:ca:18:e7:37:c2:e6:e2:49:86:f0:14:9f:a5:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3A:3F:70:33:8E:AB:A6:74:12:87:66:B1:D7:DC:3D:D7:DF:5C:F2
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/pjo_cDOOq6Z0EodmsdfcPdffXPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9b:9b:f0:75:07:c3:06:98:99:ae:af:a1:8d:46:88:14:6d:
2b:9b:3e:f7:9f:df:e1:bd:9c:1a:e3:89:40:d8:03:98:8e:b9:
44:c8:e9:09:2b:f2:dc:83:33:6a:52:d0:1b:88:d7:f5:ac:b8:
cf:d8:08:1e:83:90:fa:27:4d:ba:00:d6:6e:7e:1c:1f:30:3f:
34:9c:a1:d0:10:bd:b4:d0:09:a9:c4:75:6d:34:5c:17:32:de:
b4:40:b9:a4:eb:8c:72:7b:06:77:12:d0:65:88:a3:5a:16:74:
84:2f:f2:f9:10:5a:55:e8:5e:df:98:f9:c1:cf:66:d3:ff:a7:
6b:c6:0e:0d:0e:c1:14:ca:5a:a3:2a:c5:2c:b9:43:d9:7b:03:
6a:b6:b7:c5:41:3f:d5:15:60:c9:15:b9:ba:d6:ea:5c:41:27:
72:e6:cf:1c:f7:66:67:55:7d:99:b4:38:f6:33:a2:3d:0a:ad:
04:b7:b0:ba:36:eb:9c:db:9d:91:51:f8:54:4f:a0:7d:52:48:
a0:a5:6c:7f:24:c7:b7:2d:16:3e:14:71:d2:2d:ca:cc:5a:9d:
2d:a7:fa:9f:c1:72:80:37:b1:c8:fc:85:6e:6e:26:af:47:bf:
2c:e6:a4:ee:0e:c4:9b:47:d3:26:67:d9:3f:a6:e6:45:93:ba:
37:47:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:02 2024 by rpki-client on console-fra.rpki-client.org