Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pnLawbumiASHK-pjp_EOmy8oJoU.roa
File: pnLawbumiASHK-pjp_EOmy8oJoU.roa (raw, json)
Hash identifier: 0up7yp+0nNxsSYfKZ1XfzJorGao+qb74jKN8CjpJOfY=
Subject key identifier: A6:72:DA:C1:BB:A6:88:04:87:2B:EA:63:A7:F1:0E:9B:2F:28:26:85
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0192E1E6559FDE0441F7AEB444F4C829FC2F
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pnLawbumiASHK-pjp_EOmy8oJoU.roa
Signing time: Thu 31 Oct 2024 09:27:01 +0000
ROA not before: Thu 31 Oct 2024 09:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58181
IP address blocks: 109.202.105.0/24 maxlen: 24
213.152.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:e6:55:9f:de:04:41:f7:ae:b4:44:f4:c8:29:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Oct 31 09:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a672dac1bba68804872bea63a7f10e9b2f282685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:5a:5e:66:a0:c1:0f:2e:d3:4e:6c:e2:a8:
ff:53:9c:9a:77:4a:ac:b0:e6:a9:d4:14:8c:dd:d4:
98:2a:59:8a:8f:45:98:cd:75:e2:ba:28:98:fd:46:
f7:42:d6:af:f9:cb:c0:1b:e7:58:df:45:8d:2f:7b:
63:05:e9:e8:2a:b1:99:d9:01:cc:48:21:47:c9:f4:
c4:57:e1:0e:f0:66:2e:27:72:75:6c:4a:c9:f7:75:
fa:df:27:d5:fa:3f:12:16:32:1d:d5:9f:6d:7b:d2:
ad:61:90:a3:ef:7f:e8:0a:f9:e6:5d:2c:12:98:84:
2c:f7:b7:f8:51:09:d1:82:3d:18:79:c9:bb:24:a4:
ea:61:9f:0c:0a:e9:56:4b:f6:78:6f:ad:c1:78:af:
09:83:09:d8:26:81:3a:01:3d:6a:ab:b0:16:a9:b2:
28:6f:10:e4:e2:e6:39:2d:65:83:98:61:ee:a3:6e:
31:08:6e:a0:28:3c:b8:17:6e:e5:9b:b8:71:9d:15:
37:b2:35:83:94:0b:54:22:73:99:f1:f2:5b:b1:9d:
ed:08:00:fd:5d:da:08:bb:24:9a:9a:1d:57:ab:23:
dd:67:21:b2:9b:b4:f2:68:dd:16:93:39:0d:4a:79:
2c:4a:92:77:46:2e:fe:fe:0a:49:a1:25:ca:85:d4:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:DA:C1:BB:A6:88:04:87:2B:EA:63:A7:F1:0E:9B:2F:28:26:85
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pnLawbumiASHK-pjp_EOmy8oJoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.105.0/24
213.152.175.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f1:1c:26:5d:60:ae:5c:bc:e2:48:7d:6b:fa:0c:34:aa:6c:
af:88:23:39:2b:42:c0:a1:69:0c:1c:a3:dd:d3:d2:98:76:fe:
94:3d:5a:15:55:07:12:8a:e2:9e:1c:66:70:46:0a:67:d3:62:
c5:2e:6d:2d:2a:89:39:64:77:db:6b:04:4a:55:37:e6:1a:34:
0a:06:b9:5c:84:fc:85:29:15:f6:6a:2b:6a:55:b7:3c:b1:a1:
90:11:f3:f5:d1:5a:94:e3:ca:fb:b7:a1:d0:de:4e:a9:11:5a:
ad:7a:58:34:bf:9a:95:0e:08:9b:c3:2a:12:de:7f:f1:ae:0a:
ad:76:6f:f7:cc:73:ce:11:74:6e:52:a5:be:3c:c0:0b:90:71:
16:12:4e:1b:3d:f2:c6:3b:68:e1:c6:45:72:b2:89:0a:4a:e5:
29:5d:02:15:f1:99:c2:25:e9:95:9e:b2:71:8d:bd:ed:2d:fc:
6f:0d:35:8b:2e:f9:01:f5:34:d5:7d:78:50:c3:a0:dc:cc:51:
86:e2:60:87:84:be:aa:50:b6:98:8f:12:02:be:14:d3:00:6e:
3a:59:87:b0:01:e2:3b:4b:5d:2a:82:a5:94:b7:36:58:6b:39:
89:67:1e:52:4b:f6:14:fc:35:08:39:cd:d5:2c:ff:33:93:d8:
7f:34:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:06 2024 by rpki-client on console-fra.rpki-client.org