Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/Pjm00gnjpuSmQJbGTv6nu2T9GeQ.roa
File: Pjm00gnjpuSmQJbGTv6nu2T9GeQ.roa (raw, json)
Hash identifier: i2WzsXwIFqkk4r38f9fjUAAnpPrb0bJQ3di63O3LjDE=
Subject key identifier: 3E:39:B4:D2:09:E3:A6:E4:A6:40:96:C6:4E:FE:A7:BB:64:FD:19:E4
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 018CFE8027828F3FEEBB8D3EE85C742A7CAD
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/Pjm00gnjpuSmQJbGTv6nu2T9GeQ.roa
Signing time: Fri 12 Jan 2024 16:27:40 +0000
ROA not before: Fri 12 Jan 2024 16:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205498
IP address blocks: 185.215.140.0/22 maxlen: 22
45.85.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:80:27:82:8f:3f:ee:bb:8d:3e:e8:5c:74:2a:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: Jan 12 16:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e39b4d209e3a6e4a64096c64efea7bb64fd19e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:b6:59:4c:0b:7f:c0:ed:48:2e:74:9d:2c:
40:49:9a:44:15:33:48:7d:f1:56:ff:af:59:47:63:
4f:f7:14:4c:ba:0c:8c:67:07:e3:da:3f:8e:c4:f2:
8e:f6:76:cd:dd:22:53:59:c5:91:f7:03:47:a9:c4:
04:d9:34:63:54:ed:ec:1c:1c:70:0b:ab:2d:a5:b8:
7b:dd:7a:18:d4:58:2a:db:33:79:ce:89:16:d9:e8:
6a:1a:92:89:fa:73:74:e3:6f:ef:d9:73:0a:61:fa:
01:24:9c:d9:3c:5e:28:86:61:60:20:eb:d5:6d:47:
37:ad:c1:3e:1b:0a:21:a2:06:1e:26:10:6d:f6:49:
76:8f:26:08:da:b0:85:25:51:f1:eb:0b:92:b5:4a:
a0:04:c9:dc:30:d7:04:e1:86:05:12:fa:eb:6d:b1:
c9:e2:5a:00:d6:1c:bf:84:81:6b:6a:44:0a:d1:25:
5e:c4:0a:70:4f:ea:b8:33:77:87:ef:ff:cf:c6:e9:
24:cf:bb:a9:27:e9:38:7a:91:4d:ba:fa:60:9c:e4:
aa:76:c0:2f:b5:f6:22:d4:cd:27:b7:93:02:19:72:
04:5e:94:7e:fc:1d:ee:12:8f:a7:3c:e3:29:b3:15:
57:a7:53:90:3d:39:9a:04:cd:f9:87:ba:a1:e4:5f:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:B4:D2:09:E3:A6:E4:A6:40:96:C6:4E:FE:A7:BB:64:FD:19:E4
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/Pjm00gnjpuSmQJbGTv6nu2T9GeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
185.215.140.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d7:f9:04:eb:57:a1:c5:10:08:4d:d7:0c:24:16:a3:ec:c8:
51:e8:d1:21:16:6b:bc:3c:1b:8d:a3:84:07:8d:90:39:e5:44:
29:9f:48:f8:e6:08:9c:f4:70:72:39:c9:fc:bd:06:2f:e3:0d:
55:c5:5f:e1:39:9e:2d:4a:52:00:02:ff:ba:13:b2:d1:23:1d:
4e:7b:c0:59:17:bf:37:8e:c9:a4:e9:48:17:5c:aa:33:4c:68:
c9:ed:44:32:97:b3:bd:ed:62:05:bb:eb:6e:83:3d:b6:ca:26:
d0:1f:94:cc:dd:b9:6d:d0:87:03:bc:e8:2c:7c:ab:96:33:c4:
ef:2a:13:f5:63:6a:bf:80:2c:cf:b1:08:5d:9a:47:b1:7f:87:
3a:f8:5a:5d:0a:25:f7:17:43:85:9b:fd:01:74:be:ba:f5:d7:
34:09:53:0f:c0:d6:dc:a0:8d:29:b6:81:7e:08:2f:50:a9:3a:
23:24:a2:0e:ac:cd:47:c0:89:54:d6:6c:73:b0:be:50:3d:80:
3f:fa:b4:90:f8:ae:68:b5:9e:89:6f:56:78:a9:63:85:31:7e:
99:d3:4c:23:ea:30:cd:07:59:f9:80:cb:7d:a2:04:21:2c:5d:
b3:99:4b:06:6f:b0:07:59:74:b6:58:47:ff:4b:2c:b6:6f:81:
39:3e:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:39 2024 by rpki-client on console-ams.rpki-client.org