Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/P3GA6xGclohIJJ9dC9onspm2rEg.roa
File: P3GA6xGclohIJJ9dC9onspm2rEg.roa (raw, json)
Hash identifier: rZivJ6Sz3vkUMJRB+Lv3jnTvqfc+FJ2GZK3kno/Uz+k=
Subject key identifier: 3F:71:80:EB:11:9C:96:88:48:24:9F:5D:0B:DA:27:B2:99:B6:AC:48
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 018CC6B90DB4DD5ED6F5E574749A304D2BB4
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/P3GA6xGclohIJJ9dC9onspm2rEg.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43706
IP address blocks: 79.170.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0d:b4:dd:5e:d6:f5:e5:74:74:9a:30:4d:2b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f7180eb119c968848249f5d0bda27b299b6ac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:5d:63:36:f2:df:de:ea:9f:d9:5d:25:73:
1e:c8:6e:4b:89:1e:82:23:f5:52:5e:08:e6:91:6c:
a1:71:5e:9c:91:e4:eb:bb:40:80:3f:d0:79:cd:10:
72:10:f9:9d:eb:d0:06:a1:bd:13:13:8a:a9:fa:40:
6c:d3:8f:77:d4:b1:10:ea:3b:4f:bd:90:8f:6c:4b:
ee:77:43:f1:fb:33:43:f1:17:9c:25:20:78:dd:b5:
c8:50:0c:b4:1d:f8:b6:52:b7:17:dd:f8:21:4a:9d:
7d:ce:c7:3b:5e:69:7a:41:41:5d:f4:b5:e5:2e:16:
0d:ac:33:a4:5f:58:2d:43:01:0c:89:bd:63:de:26:
91:41:63:1b:a6:3a:a7:59:b9:96:62:09:22:c5:f6:
d1:1b:74:d7:a4:94:92:a4:9d:fc:74:f0:1b:fc:a4:
32:92:cd:5a:4c:d7:7f:a6:49:9b:1a:65:29:e1:dd:
0c:ba:8c:79:3b:fe:ba:e5:ec:31:7b:1c:5d:8b:2d:
5b:09:6d:58:60:25:80:22:26:2a:c7:b4:66:48:79:
33:68:49:23:59:d7:44:3d:81:29:96:40:ff:a1:cc:
ea:4c:11:ab:6e:9d:b5:25:8d:61:9e:a2:7a:22:db:
f3:89:43:ca:55:d9:25:7e:c9:27:ca:57:db:af:66:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:71:80:EB:11:9C:96:88:48:24:9F:5D:0B:DA:27:B2:99:B6:AC:48
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/P3GA6xGclohIJJ9dC9onspm2rEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c8:59:9a:af:d8:03:ae:57:0e:ed:0f:47:b6:c4:17:98:e5:
b6:67:c7:47:20:c3:e8:6a:66:54:b0:bc:67:8b:df:f6:ce:70:
4b:ef:72:b9:e7:93:9a:8e:0f:28:8a:39:70:61:d7:2c:56:21:
a3:d6:11:30:0b:d5:96:5e:35:24:f2:36:27:b2:af:36:85:81:
b9:30:f3:6d:e6:49:c2:ee:c7:09:9c:38:65:c8:17:c0:9c:da:
c4:4e:d7:fb:6a:cb:03:52:4b:6a:2f:7c:1b:19:96:5e:c8:b6:
48:60:64:26:17:da:95:21:de:32:5a:29:85:61:0d:79:bd:c9:
21:08:f6:d9:45:e8:e2:38:f2:76:09:25:e4:c7:6d:61:1b:c0:
fa:40:34:22:48:1e:e0:6d:48:05:80:0b:74:06:56:f0:75:32:
96:8b:97:01:e4:e6:bb:a1:1c:be:3f:ed:bb:07:c5:fd:a4:68:
22:27:21:f9:db:44:4b:5c:6c:fc:25:c4:f6:22:06:9e:22:6c:
1a:71:82:fb:1c:92:62:6a:e3:e9:66:c3:ef:0a:ec:03:b0:8b:
00:da:bc:6a:f6:ce:cd:f0:81:24:33:ee:c0:98:eb:27:26:3f:
1c:c0:08:ee:fe:b2:2e:ba:47:15:dc:75:a5:e4:1c:04:49:a8:
b2:82:e7:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuQ203V7W9eV0dJowTSu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3
MmZhODIwHhcNMjQwMTAxMjAzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjcxODBlYjExOWM5Njg4NDgyNDlmNWQwYmRhMjdiMjk5YjZhYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygldYzby397qn9ldJXMeyG5LiR6C
I/VSXgjmkWyhcV6ckeTru0CAP9B5zRByEPmd69AGob0TE4qp+kBs04931LEQ6jtP
vZCPbEvud0Px+zND8RecJSB43bXIUAy0Hfi2UrcX3fghSp19zsc7Xml6QUFd9LXl
LhYNrDOkX1gtQwEMib1j3iaRQWMbpjqnWbmWYgkixfbRG3TXpJSSpJ38dPAb/KQy
ks1aTNd/pkmbGmUp4d0Muox5O/665ewxexxdiy1bCW1YYCWAIiYqx7RmSHkzaEkj
WddEPYEplkD/oczqTBGrbp21JY1hnqJ6ItvziUPKVdklfsknylfbr2aopwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9xgOsRnJaISCSfXQvaJ7KZtqxIMB8GA1UdIwQY
MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt
YzJjNmY2YTQwOTdmLzEvUDNHQTZ4R2Nsb2hJSko5ZEM5b25zcG0yckVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm
LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6oGMA0G
CSqGSIb3DQEBCwUAA4IBAQCiyFmar9gDrlcO7Q9HtsQXmOW2Z8dHIMPoamZUsLxn
i9/2znBL73K555Oajg8oijlwYdcsViGj1hEwC9WWXjUk8jYnsq82hYG5MPNt5knC
7scJnDhlyBfAnNrETtf7assDUktqL3wbGZZeyLZIYGQmF9qVId4yWimFYQ15vckh
CPbZRejiOPJ2CSXkx21hG8D6QDQiSB7gbUgFgAt0BlbwdTKWi5cB5Oa7oRy+P+27
B8X9pGgiJyH520RLXGz8JcT2IgaeImwacYL7HJJiauPpZsPvCuwDsIsA2rxq9s7N
8IEkM+7AmOsnJj8cwAju/rIuukcV3HWl5BwESaiygucv
-----END CERTIFICATE-----
Generated at Sat Jun 1 21:11:40 2024 by rpki-client on console-fra.rpki-client.org