Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/PF2QWCZ-w6UlB3T03zhThI0wBPE.roa
File: PF2QWCZ-w6UlB3T03zhThI0wBPE.roa (raw, json)
Hash identifier: u1K8Z27vsVLdO6a1L6pG2gXB1j0sbC8bjn4I/OUwsp0=
Subject key identifier: 3C:5D:90:58:26:7E:C3:A5:25:07:74:F4:DF:38:53:84:8D:30:04:F1
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01917BF64498A02513E8DD1CA3B36B5D1CC3
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/PF2QWCZ-w6UlB3T03zhThI0wBPE.roa
Signing time: Thu 22 Aug 2024 21:20:22 +0000
ROA not before: Thu 22 Aug 2024 21:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137517
IP address blocks: 77.81.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:f6:44:98:a0:25:13:e8:dd:1c:a3:b3:6b:5d:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Aug 22 21:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c5d9058267ec3a5250774f4df3853848d3004f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:6b:c3:5e:c2:e8:c1:c4:4b:c5:dd:58:3f:
4c:d7:f0:93:8a:52:87:fb:43:d6:0d:55:58:5c:4a:
12:dc:86:54:1d:96:10:4b:b8:10:7e:51:ca:b0:68:
4e:00:b7:7b:e1:82:4f:7b:eb:67:f7:9c:fd:cd:2b:
bc:87:a1:08:60:17:92:fc:28:ad:aa:19:4e:04:34:
90:56:73:17:37:2a:bc:b2:2a:c7:cf:fa:87:b8:a2:
01:08:ac:b8:e5:e6:82:0d:92:ad:c6:77:60:d7:42:
53:c3:6b:ba:83:27:bd:7c:60:bc:f3:b0:38:3a:84:
5a:0f:e2:2f:c8:ee:a6:ec:b2:2c:0e:1e:ee:d7:5a:
e3:6f:dd:9e:63:b3:74:86:03:15:82:1b:f9:9c:ed:
75:ef:06:93:b3:79:f1:56:4d:ed:14:16:28:59:6c:
f4:18:50:1b:c2:5a:00:63:33:1e:9c:d4:e5:ea:be:
80:c9:c4:8e:11:52:8c:2a:e3:1d:7d:45:b0:be:44:
54:09:ec:c5:ce:8d:77:39:59:e2:69:fb:b8:2f:f6:
0c:68:01:d2:48:ca:03:38:02:07:f3:af:ab:21:69:
bb:30:ee:e0:96:6b:90:63:23:4e:6d:db:ee:7c:0f:
b1:c0:c8:bb:2c:84:ad:91:bb:ea:a4:9b:a9:35:34:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:90:58:26:7E:C3:A5:25:07:74:F4:DF:38:53:84:8D:30:04:F1
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/PF2QWCZ-w6UlB3T03zhThI0wBPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
Signature Algorithm: sha256WithRSAEncryption
99:97:cc:20:5d:82:f9:e0:d1:b1:21:a1:80:72:2d:38:44:46:
5a:81:e6:16:87:10:7b:12:5d:86:25:f6:e6:0e:ac:0c:7d:14:
5c:2b:7c:56:8f:13:fd:0b:18:ae:19:bb:76:d2:44:bb:05:45:
bc:4c:b2:01:23:27:0d:58:c1:91:98:1d:f3:fc:a8:b4:f7:4e:
cd:08:ed:01:9c:85:f1:f0:d4:76:51:d8:53:14:fb:1a:a2:a5:
e8:fa:b5:09:9f:70:ee:77:33:99:a1:e2:6a:dd:18:bb:2a:e8:
bc:4e:19:39:1e:a9:98:d9:12:8b:04:af:2c:48:bc:84:5d:95:
17:b0:e7:bf:4f:b7:d5:6f:f1:d8:0e:e0:10:86:e3:ac:41:15:
11:99:e0:90:7a:3e:8a:27:7a:10:94:11:5c:c7:30:bb:5e:7e:
93:f3:7c:31:16:6c:81:b4:ac:2b:d6:14:33:46:7a:66:9c:7b:
78:0e:1f:60:b6:b2:b0:87:2e:23:3f:64:60:e0:8f:79:f7:9d:
8d:8c:ca:1c:7a:51:f2:36:a7:96:74:7a:30:a9:dc:b4:1b:8c:
ae:81:a7:e2:7d:8f:7b:9e:4d:de:01:9d:f5:ac:df:41:93:67:
d2:48:88:41:c2:ba:9f:a7:68:76:48:3c:ee:7b:5b:a1:6c:b9:
40:7a:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:38 2024 by rpki-client on console-ams.rpki-client.org