Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/PUiTUdMOVm6oO7BGxVXZZbjad4g.roa
File: PUiTUdMOVm6oO7BGxVXZZbjad4g.roa (raw, json)
Hash identifier: ObaXlLRJIu7XGk0dFC51HnPiEaho+p5JGWOYkBoMKQw=
Subject key identifier: 3D:48:93:51:D3:0E:56:6E:A8:3B:B0:46:C5:55:D9:65:B8:DA:77:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 018CC2DB51AAE8BA0F3F8AD8CB80BE6DF80D
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/PUiTUdMOVm6oO7BGxVXZZbjad4g.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25545
IP address blocks: 217.15.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:51:aa:e8:ba:0f:3f:8a:d8:cb:80:be:6d:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d489351d30e566ea83bb046c555d965b8da7788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:3c:8d:6e:09:ed:db:d1:84:19:00:da:1f:
9d:ca:71:c9:7c:b8:ed:40:56:b5:6e:d9:37:91:48:
92:9b:d8:2a:12:97:b1:c2:2c:fd:25:e8:4e:98:e8:
1c:24:f9:e1:bb:21:52:97:a2:e4:89:a5:32:36:4d:
c7:22:75:f8:5d:2e:f5:5f:b6:9f:a6:53:da:41:ad:
56:ec:af:26:7b:71:ff:21:e2:38:7d:9e:4e:26:bf:
28:fc:64:69:d5:1f:1c:94:8e:99:f4:bd:1c:88:4e:
f1:78:b6:3b:ce:a9:8b:e3:2d:8f:cc:52:ce:c0:45:
a6:39:1d:6e:71:ad:c3:62:de:79:13:1c:2d:e5:85:
e7:11:2c:06:5d:8b:23:bd:c1:df:57:35:d0:c7:49:
a7:c4:c3:a5:fc:4b:d3:68:f3:c9:e2:be:93:14:99:
5b:b3:85:8e:26:38:9d:9f:ae:93:bb:15:3e:1e:25:
d1:06:00:ca:62:06:28:6c:73:ea:f8:7d:63:f5:08:
e4:01:c8:7b:dd:d3:49:a9:12:a6:62:4d:34:fb:7b:
6c:39:1f:e1:b1:b4:e7:c4:66:a5:fc:66:82:25:8a:
b5:dd:a5:e2:ed:b4:33:d7:ec:93:ba:5e:34:5f:d7:
3b:3f:e0:46:ac:95:08:c1:c5:3d:98:29:18:5d:3b:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:93:51:D3:0E:56:6E:A8:3B:B0:46:C5:55:D9:65:B8:DA:77:88
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/PUiTUdMOVm6oO7BGxVXZZbjad4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.240.0/20
Signature Algorithm: sha256WithRSAEncryption
32:91:8f:a7:33:0d:73:15:b2:a5:1f:41:6e:39:20:c3:b4:00:
19:75:2e:bc:d6:e5:5e:92:73:aa:6f:27:6a:85:25:2b:d7:43:
38:94:4b:7d:e9:6c:83:93:a0:35:35:2e:c4:74:fb:69:39:9c:
8f:22:8d:f7:00:01:e7:93:6e:cf:6c:09:83:f4:e6:cd:0a:6c:
6b:80:d3:b4:b5:74:0b:f7:95:67:39:6b:3f:7f:a8:90:f3:73:
70:78:b5:48:d6:3f:aa:00:3e:79:5c:0d:b6:5f:3b:69:09:c2:
f7:a4:1f:3f:e2:cb:1a:6c:0a:80:84:42:7b:4a:be:2c:1f:23:
e8:ea:cc:db:4a:fe:0e:38:c9:1e:2f:77:ba:8e:b5:f4:b1:b6:
66:ad:17:1c:ec:66:92:f4:b2:12:92:ce:6e:78:59:6c:67:76:
84:de:ab:7c:9b:35:2f:12:a4:b1:41:57:61:2e:16:4b:3b:51:
da:7b:2e:cd:46:75:b1:9a:38:be:9a:69:2d:55:f1:a0:5d:47:
dd:ca:b0:41:62:40:ee:aa:78:88:17:3f:ac:b5:e6:6c:99:c1:
8d:fd:07:f4:92:d2:4b:d4:cf:7a:19:77:06:7a:48:ea:5c:34:
a8:29:c8:c6:f7:41:d5:54:50:cf:40:c6:a2:24:e9:4b:23:7f:
a6:fe:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:41 2024 by rpki-client on console-ams.rpki-client.org