Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PsYiU5i3UM_TqQSahz3kLVdr8Ps.roa
File: PsYiU5i3UM_TqQSahz3kLVdr8Ps.roa (raw, json)
Hash identifier: q1jP+gnFdKe5oIIcxhjHw+uup8ag6ORZ9O/zIyD957w=
Subject key identifier: 3E:C6:22:53:98:B7:50:CF:D3:A9:04:9A:87:3D:E4:2D:57:6B:F0:FB
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CC348C54E3F72E3D2C9D82741C3FA2210
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PsYiU5i3UM_TqQSahz3kLVdr8Ps.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56503
IP address blocks: 185.177.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c5:4e:3f:72:e3:d2:c9:d8:27:41:c3:fa:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec6225398b750cfd3a9049a873de42d576bf0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:31:2d:e6:6d:5e:b3:ab:01:91:53:b6:1c:
bc:2e:2a:07:d6:2e:93:0c:fb:c4:5b:85:04:59:6c:
06:3c:a6:62:fe:40:a3:de:f6:3f:d1:57:c6:82:d9:
18:f7:eb:eb:b1:4f:fe:92:bf:f5:77:f1:fb:53:7c:
68:f6:8d:33:81:cb:cb:e9:a0:88:83:24:3e:36:7b:
b7:b2:bc:0b:1e:bc:ac:3b:9c:c1:71:e7:6d:ba:db:
e6:53:18:35:c9:7d:6c:f1:dc:ae:c9:e6:c7:37:1f:
05:c4:bf:fd:53:4c:e2:9b:f3:22:a1:19:65:b6:c7:
04:9b:b7:9f:dc:11:07:ca:73:25:51:f3:63:e1:db:
30:28:92:00:32:d8:30:fc:fc:6a:72:7b:c9:35:86:
8b:c4:f7:9a:a0:9c:91:32:bf:a7:69:9f:d6:df:1c:
cc:40:8f:dd:60:49:bb:71:b4:79:20:c0:61:a7:3e:
13:52:2a:1a:6b:91:7d:a6:7a:47:a0:ac:a7:bc:f2:
ba:21:57:6d:3c:66:96:3e:8e:2a:83:42:77:ef:a7:
26:07:58:80:cd:57:dc:7d:c5:05:37:b9:a1:55:6c:
b4:d9:36:e2:d8:29:30:b8:ed:c4:03:c2:de:65:33:
4f:54:72:af:31:3c:ba:8e:2c:10:44:ac:e4:2b:92:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:22:53:98:B7:50:CF:D3:A9:04:9A:87:3D:E4:2D:57:6B:F0:FB
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/PsYiU5i3UM_TqQSahz3kLVdr8Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.234.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:78:b0:8a:cd:32:76:c2:81:ad:db:7b:3d:81:d7:01:7c:9b:
c1:6e:74:37:16:b6:ab:70:88:23:64:8f:d3:55:6d:42:cb:af:
af:1a:bb:54:fc:e4:40:85:82:e9:e8:c4:ef:78:8b:09:8b:a1:
10:84:69:d8:d4:21:a4:63:42:8c:aa:27:39:88:f0:fe:5a:29:
50:8d:7d:60:12:e2:27:6f:bd:87:ee:eb:24:c5:b1:da:c3:c6:
a2:73:96:d9:9b:e1:9e:7c:e4:90:39:6a:c1:f7:20:69:f8:08:
d2:38:4f:66:16:6f:19:e7:6d:8b:8e:3b:16:95:cc:9e:cb:e0:
15:04:66:bc:a3:e9:9b:d8:e1:4b:3a:3b:b5:5a:a0:cd:44:5d:
c3:6f:60:28:e1:a1:ba:d7:dd:30:53:41:f3:20:ef:23:37:42:
c8:ad:81:13:49:5a:1f:fc:4c:27:8d:95:ab:02:1a:32:ff:62:
f7:49:7b:31:91:38:8f:d6:d4:bb:da:e7:93:37:c8:69:a2:eb:
17:04:fe:ee:b5:89:92:5b:e0:73:34:07:44:72:cd:eb:dc:f3:
01:a3:74:26:90:eb:67:66:be:43:e3:29:b3:f3:6f:b9:47:08:
67:2b:9b:57:a3:7d:bd:47:4b:8d:36:78:49:ec:03:af:4f:1b:
38:1a:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:14:40 2024 by rpki-client on console-ams.rpki-client.org