Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PvPkhTV63TTzC_daqNQlA0Nk9Xs.roa
File: PvPkhTV63TTzC_daqNQlA0Nk9Xs.roa (raw, json)
Hash identifier: KPFV4bMMClcEQ/i4USwK9xrObTF441xxEyZ5kTLqtEk=
Subject key identifier: 3E:F3:E4:85:35:7A:DD:34:F3:0B:F7:5A:A8:D4:25:03:43:64:F5:7B
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 018CC5DBF27EFE5620E451A9936F23FC933C
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PvPkhTV63TTzC_daqNQlA0Nk9Xs.roa
Signing time: Mon 01 Jan 2024 16:29:35 +0000
ROA not before: Mon 01 Jan 2024 16:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41493
IP address blocks: 195.93.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f2:7e:fe:56:20:e4:51:a9:93:6f:23:fc:93:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ef3e485357add34f30bf75aa8d425034364f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:49:7f:3e:5b:38:45:91:85:a0:21:6a:68:
28:f4:a3:2f:16:d2:66:21:df:75:dd:e3:0f:a5:ec:
12:58:70:5f:9f:a8:07:68:44:49:57:5f:62:51:a4:
de:3e:54:6a:a4:72:d3:79:99:0c:a4:49:95:9d:92:
e8:bd:2c:8c:af:42:8f:2f:14:80:c4:80:a6:44:a6:
68:da:02:53:2d:61:7c:c6:93:af:16:48:09:cd:5c:
ac:cc:28:1f:e5:9d:9e:a1:49:a8:6c:4d:0e:d6:ef:
52:bc:d6:bf:2c:ab:7b:8d:72:82:ce:53:9e:20:a2:
9b:a9:9b:7c:eb:df:e2:2c:83:3c:6f:f8:e6:73:4a:
d6:36:51:86:e2:6c:3f:0d:4f:24:86:b5:ed:cf:fa:
c1:72:e0:2d:dc:fb:49:7c:d1:79:55:a3:72:9c:00:
f0:3c:d7:1f:d9:18:de:7d:ee:c9:e6:6d:09:e9:8e:
65:bf:69:8c:b4:b8:05:0c:1f:6d:b2:c7:86:f7:4f:
34:ea:0c:48:39:32:ee:b1:b9:2e:36:63:fc:0b:25:
ed:84:d9:a2:fc:03:7d:cf:5e:a6:2b:b6:96:8d:62:
a0:88:90:55:f1:46:ad:52:c9:2c:3d:1c:67:37:f2:
ad:e7:fe:a0:08:7e:01:8f:0c:fd:89:eb:8f:62:0c:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:E4:85:35:7A:DD:34:F3:0B:F7:5A:A8:D4:25:03:43:64:F5:7B
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/PvPkhTV63TTzC_daqNQlA0Nk9Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7c:dc:8b:7e:07:90:a6:f4:91:6b:1c:b0:91:5e:36:d9:30:
67:c1:4b:d8:a3:19:b7:5e:f9:40:9f:83:90:3c:6e:a5:e5:9b:
5c:92:a3:89:4e:98:36:5d:b0:16:e7:44:25:b4:70:bd:be:58:
0f:44:bf:94:c5:25:a2:eb:be:19:31:38:1d:a7:7a:b2:46:94:
a7:83:70:d1:cf:3c:3f:72:f1:e8:5c:7a:c0:08:e7:79:16:85:
ea:e5:81:22:b0:6b:5c:cd:ad:ec:c0:3b:af:d7:ed:82:23:f6:
9d:1f:1e:c4:16:1b:e1:91:9e:a7:20:99:f6:ee:d6:cb:5b:b7:
95:a9:02:ef:e0:89:74:02:b7:ed:67:2b:92:72:c1:6e:8b:1e:
3d:f3:47:be:47:b3:d5:8a:68:72:45:a0:df:c5:c7:59:6a:3f:
6e:3b:06:a3:04:d9:1c:48:55:8d:64:dd:77:fd:be:53:41:ab:
ba:66:e9:cd:13:7e:73:41:b5:22:c4:b0:c0:e7:20:12:4b:35:
57:ca:b4:d3:1b:c1:81:89:18:b0:ea:7c:d2:45:fc:d8:be:8d:
2c:52:72:79:97:a9:8f:f3:77:d4:29:3e:4d:28:10:d7:45:d1:
ef:ef:45:a6:8c:22:e1:c7:09:2e:1a:f3:8d:f6:63:66:78:ca:
f1:5f:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:38 2024 by rpki-client on console-fra.rpki-client.org