Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/PMJ0ORugQHvJXdwuE_qSvs-SKzw.roa
File: PMJ0ORugQHvJXdwuE_qSvs-SKzw.roa (raw, json)
Hash identifier: k0xU8BRce334f+CtOV6GjsGQ2kLRRE+eTYqCqG0dzjE=
Subject key identifier: 3C:C2:74:39:1B:A0:40:7B:C9:5D:DC:2E:13:FA:92:BE:CF:92:2B:3C
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 018CC80149AEA63117E3BFC80FD8ADFAC865
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/PMJ0ORugQHvJXdwuE_qSvs-SKzw.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44049
IP address blocks: 91.199.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:49:ae:a6:31:17:e3:bf:c8:0f:d8:ad:fa:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cc274391ba0407bc95ddc2e13fa92becf922b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:8e:5b:fd:27:93:e6:1a:85:1b:98:9b:b7:
91:04:62:f7:bd:d5:50:a8:4e:05:b0:9a:9b:b5:9c:
20:ec:a8:5a:6b:2d:e9:e7:1e:4b:31:1f:c8:4d:2f:
36:0b:75:f1:86:bf:8c:6a:2c:c3:d5:97:ae:57:6f:
91:cb:01:dc:a4:7e:90:d4:ea:f4:05:c8:83:0a:17:
96:8b:b5:6b:ce:b6:05:55:90:5b:e5:28:59:29:50:
f9:95:a0:92:58:d9:bd:df:dc:4d:9e:28:e9:2c:09:
5a:f4:99:be:25:60:eb:69:58:31:04:d1:cf:0b:58:
59:44:89:a7:43:12:92:11:2a:39:36:5d:f5:d4:86:
20:9e:bc:b8:ba:77:29:72:c4:32:71:3f:a5:ed:55:
ce:f3:a4:dd:bc:de:a7:8b:74:20:a0:23:61:f8:ff:
cc:63:d3:e6:44:96:d6:e9:ad:cd:20:7f:ba:15:b2:
1d:9e:47:88:65:e9:42:e3:b8:02:5c:0f:d3:cc:fc:
53:10:20:56:ab:4b:d3:66:2a:0a:9a:a0:ad:cf:9b:
b4:48:e8:df:75:6d:70:ec:c5:28:3e:52:14:59:0b:
3b:3a:93:38:0d:bb:8a:78:39:17:fa:3c:c7:7b:7e:
1f:d7:96:d9:ac:d5:1d:39:82:9a:86:27:c5:72:0e:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:74:39:1B:A0:40:7B:C9:5D:DC:2E:13:FA:92:BE:CF:92:2B:3C
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/PMJ0ORugQHvJXdwuE_qSvs-SKzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.13.0/24
Signature Algorithm: sha256WithRSAEncryption
76:47:68:73:bb:eb:36:b1:6a:9f:cb:bb:4c:b6:91:0e:79:95:
a9:eb:c3:c0:eb:bb:af:dc:43:5c:d9:f4:bf:c8:ae:84:82:41:
d1:45:71:f3:b5:f1:13:9e:c4:74:e9:18:f8:77:20:b9:3f:72:
ad:15:d9:50:3d:5a:dd:0e:c0:1e:d5:71:b8:0b:30:4f:0b:74:
b5:f0:23:7c:9b:af:f0:42:d1:50:fa:92:e4:db:65:e2:37:02:
fb:20:21:ca:45:18:ad:00:f3:57:a1:62:b0:49:57:c7:07:93:
b7:a4:d3:67:86:16:8b:15:6f:6c:87:78:fd:51:11:b6:fc:81:
d0:31:26:54:e9:10:a2:20:5a:15:44:26:79:9b:c4:81:f5:05:
36:22:cf:ae:b5:c6:eb:86:97:3a:8d:cc:6b:e0:6c:bb:51:af:
e9:33:70:47:b6:c1:49:f8:2e:dd:6d:57:b2:a8:81:4e:19:5a:
da:f8:a6:31:f9:59:ad:6a:e3:4e:0e:f2:34:e6:55:a7:46:42:
98:50:db:07:c0:d8:9d:72:d3:e8:3c:2f:42:22:71:59:25:a9:
56:d9:f5:d4:f6:fc:04:12:f4:eb:2e:67:f2:8c:7e:31:6c:63:
4a:23:7a:6a:3f:0b:3c:ae:d0:61:b4:72:8e:a5:8c:65:f8:f8:
87:8c:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:44:49 2024 by rpki-client on console-fra.rpki-client.org