Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/pJppu3x2dUbfRtPwC52P13uxsOg.roa
File: pJppu3x2dUbfRtPwC52P13uxsOg.roa (raw, json)
Hash identifier: 4IIOGDB5OB1G++WM9k9/fJkV+2lpUBjCefUIWNE4Y40=
Subject key identifier: A4:9A:69:BB:7C:76:75:46:DF:46:D3:F0:0B:9D:8F:D7:7B:B1:B0:E8
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 018CC6B78DC538B600CDB7816B790B693447
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/pJppu3x2dUbfRtPwC52P13uxsOg.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 213.171.3.0/24 maxlen: 24
213.171.4.0/24 maxlen: 24
213.171.8.0/24 maxlen: 24
213.171.9.0/24 maxlen: 24
213.171.10.0/24 maxlen: 24
213.171.5.0/24 maxlen: 24
213.171.6.0/24 maxlen: 24
213.171.7.0/24 maxlen: 24
213.171.15.0/24 maxlen: 24
213.171.12.0/24 maxlen: 24
213.171.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8d:c5:38:b6:00:cd:b7:81:6b:79:0b:69:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a49a69bb7c767546df46d3f00b9d8fd77bb1b0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:9e:fb:a7:bf:ae:00:08:74:b7:e2:e1:30:
16:67:d8:e4:e8:9c:01:9b:10:32:da:d2:fb:09:5d:
44:18:25:49:3c:cd:bf:cb:d3:b7:28:cf:2c:52:73:
1b:b7:39:29:79:de:f6:2c:b8:d2:45:8d:98:00:86:
d9:f4:69:fb:bf:44:43:a9:35:a3:34:ba:d7:5f:cf:
d9:ac:28:12:5c:d6:46:2f:cd:be:1c:40:ee:df:ab:
92:e8:4a:0e:ab:ed:f3:9b:bf:b1:d3:87:7c:2f:45:
cf:ea:66:8f:0e:36:df:b9:c1:03:ec:06:a7:bd:f3:
17:aa:44:6b:81:c1:d4:b8:24:29:57:d2:26:34:4c:
45:37:ed:9e:e9:88:a3:f8:2e:21:54:04:a1:7d:33:
ce:bb:87:9a:86:88:a1:2f:6a:16:fd:4d:8d:20:36:
06:a8:99:5b:24:90:51:d0:52:89:e2:bb:ea:f2:bd:
45:48:35:c6:11:91:44:e7:0b:e2:96:a4:1a:65:e6:
0e:13:bd:a0:8a:4f:45:21:17:a9:7b:54:eb:37:11:
4b:3b:df:e9:bd:c7:50:60:84:a6:00:c1:75:c6:dd:
70:ac:a9:ad:cd:d3:36:e0:7c:da:33:3f:40:a6:2f:
bc:ea:7e:1c:7f:c3:9b:c1:20:e5:11:63:90:a5:a8:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:69:BB:7C:76:75:46:DF:46:D3:F0:0B:9D:8F:D7:7B:B1:B0:E8
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/pJppu3x2dUbfRtPwC52P13uxsOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.3.0-213.171.10.255
213.171.12.0/24
213.171.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:1a:2e:a3:95:b7:e0:d2:d0:fb:c5:79:98:10:b0:0a:be:0c:
bf:95:c5:cf:b9:ed:9e:1f:ab:6b:37:f2:79:06:93:95:f1:fa:
3e:7a:ee:89:6c:0f:f4:9a:5a:a9:db:0e:06:25:ba:21:5a:7a:
af:a2:a4:bf:56:20:98:60:4d:45:36:b0:4d:74:be:cb:ef:d5:
9b:ea:80:b0:36:81:a7:46:b2:ce:e0:7b:64:22:62:3e:31:e2:
df:c2:2e:d9:1a:39:98:85:35:4c:ea:12:55:3a:09:6c:29:1a:
17:a7:8c:be:de:65:00:78:ff:5b:44:7c:b9:2c:51:c7:45:9b:
3b:a7:a8:fe:2e:76:37:88:d4:1f:fa:d8:00:72:e5:3e:e4:74:
ce:d3:3c:70:c3:33:65:b0:25:cd:90:01:87:f7:d4:eb:d8:d0:
b1:49:f0:67:9e:e1:fc:c1:6b:26:ae:31:64:04:3a:ce:0f:d7:
d1:5c:ef:40:0b:2c:77:08:27:e7:4d:a1:be:df:01:94:0b:82:
5b:a8:69:10:23:5d:9d:a5:66:4f:dc:c6:1b:cc:06:4b:14:c9:
3f:49:3b:aa:4a:5b:a5:f8:7d:0b:f1:31:d0:b3:36:3e:06:bb:
98:5c:28:6b:40:f4:da:d8:9c:ef:e6:99:b6:11:b0:d2:ea:dc:
7d:7f:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:51:58 2024 by rpki-client on console-ams.rpki-client.org