Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/PUIrErtVqdBAbnZ1Dqs2ZVakzZ4.roa
File: PUIrErtVqdBAbnZ1Dqs2ZVakzZ4.roa (raw, json)
Hash identifier: +GZvMgKeCU6evUDkGmOo3nDfossByKF9UZ0mnotdClw=
Subject key identifier: 3D:42:2B:12:BB:55:A9:D0:40:6E:76:75:0E:AB:36:65:56:A4:CD:9E
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 018CC7941251569518B35EC827E9CF7D6C04
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/PUIrErtVqdBAbnZ1Dqs2ZVakzZ4.roa
Signing time: Tue 02 Jan 2024 00:30:19 +0000
ROA not before: Tue 02 Jan 2024 00:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197536
IP address blocks: 91.223.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:12:51:56:95:18:b3:5e:c8:27:e9:cf:7d:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Jan 2 00:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d422b12bb55a9d0406e76750eab366556a4cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:2c:4c:55:7d:cc:c8:e6:54:f2:12:82:1a:
c7:1c:94:09:18:5f:93:ee:6f:87:97:58:97:67:7e:
38:9f:72:7a:9c:ac:40:08:ce:08:38:50:dd:30:c9:
ad:ff:93:c9:05:b8:e6:a6:45:a7:f6:7b:5b:79:4d:
b1:18:7d:77:f3:f8:1c:be:db:24:5e:e4:36:5d:f4:
be:45:5d:d4:67:41:42:2a:eb:93:bf:da:30:c7:11:
ec:23:13:33:2d:eb:69:e6:4b:a8:b6:0f:ea:18:ba:
c9:b7:b6:0b:01:8d:28:3f:6c:72:81:a3:8d:0d:4c:
50:cd:33:07:0d:89:3e:26:4a:d7:0d:ab:71:00:89:
ef:e7:be:20:a0:ba:bf:e3:e2:43:63:f1:ea:ff:43:
84:8c:15:1e:ee:b1:36:60:c0:8f:dc:b9:e4:8a:3c:
28:f9:f3:ca:45:00:1a:b2:85:e6:c7:31:56:2c:85:
aa:40:b9:da:ff:f3:c2:bd:36:53:e9:86:48:f4:1a:
8b:c8:7f:ea:ff:af:36:7a:62:43:63:9c:1b:b3:a5:
d7:87:0f:b4:07:31:e5:57:ca:a9:d8:61:15:b9:00:
36:e5:28:e7:cd:1b:e1:ed:b1:b2:53:91:21:cb:4f:
04:10:80:8c:a1:b2:df:09:5f:54:31:3b:49:34:86:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:2B:12:BB:55:A9:D0:40:6E:76:75:0E:AB:36:65:56:A4:CD:9E
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/PUIrErtVqdBAbnZ1Dqs2ZVakzZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5d:f8:2d:9e:51:23:e5:66:2e:88:5b:fe:f8:0d:30:b8:1d:
94:f4:54:7a:23:67:35:cb:59:e9:3a:a4:5b:91:ad:12:48:ab:
f1:ab:c5:fe:89:29:7b:8d:98:76:cb:8f:8d:e2:2e:17:28:66:
5b:9a:25:08:22:36:1b:cc:a9:48:4b:cc:a6:8b:4d:dc:ab:04:
f3:c4:6d:1f:27:6c:f4:35:a3:8b:a7:04:53:f6:e9:5c:79:b0:
b7:14:cf:f1:7a:5b:45:50:9b:18:03:8d:d4:e1:d2:a4:99:fc:
ae:0b:31:47:e4:85:38:9d:6f:c4:c3:5c:a6:89:de:f1:27:ef:
8c:b6:87:c7:f9:fd:ec:4d:91:61:9e:e6:de:9e:9d:61:49:bb:
6a:95:8c:96:1e:a0:31:4f:d8:a1:ac:33:7b:3e:4d:95:4e:1f:
68:f7:64:75:b3:fd:cd:a2:77:f0:74:b4:08:9c:b2:2d:5e:eb:
be:32:3d:e4:73:6d:e3:89:3e:0e:dc:ca:5a:58:94:0c:7e:3a:
df:e0:f5:1b:ec:25:e8:88:cb:ca:36:14:4a:cc:90:6d:6a:6c:
33:d1:0c:51:14:60:f2:3d:d8:95:0f:26:40:69:e5:5e:0b:58:
c7:a5:8c:24:fe:ab:7c:9c:a2:27:71:5b:28:fd:f6:b7:e1:d5:
93:02:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:33 2024 by rpki-client on console-ams.rpki-client.org