Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa
File: PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa (raw, json)
Hash identifier: sI544LGLxkuGeOh3oV87NmA/OvHOOkqgwCDcswKeYH4=
Subject key identifier: 3D:9F:67:40:74:A7:1B:75:2C:7D:37:5E:29:F3:D3:96:0C:CD:1A:A4
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018CC5003508893F5AA71FCB82040B21396D
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.1.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:08:89:3f:5a:a7:1f:cb:82:04:0b:21:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d9f674074a71b752c7d375e29f3d3960ccd1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:17:13:66:d1:76:a8:51:71:1a:87:21:12:
5d:0e:3b:71:8c:e9:34:c6:ee:42:7c:95:89:6c:cd:
47:15:37:22:1c:45:e5:3e:45:b5:9a:11:9e:a8:4d:
a8:46:bb:33:3f:96:23:26:15:b1:a5:cb:ef:0a:a0:
e9:19:31:a7:f2:5c:38:bc:b5:7c:80:aa:07:da:c2:
1d:9e:65:e3:c3:86:16:a6:4f:da:cd:ef:31:1f:72:
df:f0:84:f9:62:6d:98:9c:51:02:6a:72:09:67:4b:
d0:f3:3c:e6:47:88:85:91:61:30:b0:6d:49:7a:81:
f2:35:11:30:ad:bc:df:c7:af:89:06:04:27:e7:3f:
8e:34:13:7a:1f:99:4c:2e:b0:b6:6f:67:81:c6:2d:
3b:48:fc:52:bc:ab:80:93:e2:e0:b0:18:63:d8:e6:
8a:72:63:2f:e2:28:a5:76:e4:d7:c8:af:5a:fb:6c:
74:75:dd:c9:d9:4a:60:df:59:09:71:78:88:db:a3:
fb:71:f1:70:f0:f9:a5:24:c0:06:c3:e8:d7:64:66:
5e:c7:b1:77:e7:9b:e1:35:e0:a6:b7:82:18:03:ce:
16:ec:6f:5a:10:1a:8a:06:1d:50:ac:d9:25:b2:97:
45:99:dd:49:60:e4:e0:3d:ea:15:45:7c:39:9f:35:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:67:40:74:A7:1B:75:2C:7D:37:5E:29:F3:D3:96:0C:CD:1A:A4
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.147.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:46:a4:d1:18:41:bb:13:24:f6:1e:de:a2:83:ee:49:48:
86:1a:80:7c:38:87:d3:96:2d:d1:a3:57:52:d4:96:1d:d4:1f:
30:0f:4d:35:9f:51:65:44:e9:d0:c4:1d:16:ab:a4:ae:91:88:
0d:a0:12:0d:dd:47:7b:87:8a:81:92:28:be:ff:8c:9c:66:2a:
3e:63:f4:c0:b0:61:44:4c:25:24:96:e1:8e:9f:03:ce:b8:ec:
ff:cd:01:8d:2c:bf:2c:31:bf:4e:00:5e:4e:62:fc:a6:e7:f1:
10:b0:66:d9:6c:78:90:38:74:53:15:c8:aa:d2:0e:27:ad:a8:
bf:85:1f:4a:98:b7:14:bf:e0:6b:2d:3e:cc:bc:f0:36:b0:1f:
89:2b:26:d4:ab:61:17:a8:27:b4:7c:1a:c8:4a:9c:31:1d:5a:
e3:9c:a3:6b:08:f0:91:64:1a:44:0b:55:9f:07:8c:a1:56:ee:
35:5f:6d:8d:88:e2:e8:ed:b9:9b:06:97:c0:c7:ab:42:48:90:
cc:f3:33:e1:df:96:d8:7c:7d:e1:b4:b0:bc:b6:55:36:19:e7:
e6:77:ec:50:f9:de:44:aa:5f:30:d9:18:49:63:24:4f:6a:ef:
57:60:44:49:ce:76:96:63:fd:69:96:e0:e1:ba:07:6b:2c:62:
1f:7a:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:45:10 2024 by rpki-client on console-fra.rpki-client.org