Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/POV38TVPq65_RPR1C6tCf4h8M50.roa
File: POV38TVPq65_RPR1C6tCf4h8M50.roa (raw, json)
Hash identifier: 5Pqq2wvyB87XhBXckCcFxToxh+E8v01ve55fR3IC3oU=
Subject key identifier: 3C:E5:77:F1:35:4F:AB:AE:7F:44:F4:75:0B:AB:42:7F:88:7C:33:9D
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 018D3B73F4FB142CE98F96146B72F82B6258
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/POV38TVPq65_RPR1C6tCf4h8M50.roa
Signing time: Wed 24 Jan 2024 12:31:11 +0000
ROA not before: Wed 24 Jan 2024 12:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216017
IP address blocks: 185.169.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:73:f4:fb:14:2c:e9:8f:96:14:6b:72:f8:2b:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jan 24 12:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ce577f1354fabae7f44f4750bab427f887c339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:3d:c2:0f:d5:12:ca:b6:99:79:83:01:4b:
c0:a8:4b:1c:6a:f0:c4:71:09:cd:44:25:9e:82:60:
3c:e8:53:10:27:73:fb:2d:56:b3:a7:44:3e:ec:30:
aa:b6:2b:2f:2f:ba:ec:64:de:e4:58:dd:d0:e3:b6:
89:38:b4:0b:7a:f7:00:65:a6:77:99:8f:86:45:f3:
61:52:4a:1a:f1:10:ba:98:4a:30:e7:5e:4e:45:09:
ef:8b:56:51:88:88:a7:79:4c:db:f4:dc:2d:34:0a:
aa:bb:2b:e0:8d:31:8a:7c:1e:e1:0f:34:6b:c2:bb:
f0:52:28:85:f7:ec:55:22:c3:97:97:d3:0a:71:b3:
e7:09:20:f3:55:af:e5:2f:b4:8a:f3:0b:ba:41:01:
ed:96:f1:d0:cd:d8:71:78:19:83:88:15:80:18:7a:
92:9e:37:40:12:7e:3a:05:81:96:36:dc:37:f4:74:
ee:4c:45:13:cd:98:c9:08:5f:ca:b5:c1:2d:76:fb:
8c:cc:d9:c8:e2:f2:d2:67:ae:44:9e:a4:42:1c:37:
ab:48:7a:3a:21:44:72:b1:18:bd:35:a0:db:35:01:
20:51:5e:de:33:9e:7d:48:f7:e7:f1:63:53:5e:75:
6d:3a:14:df:fc:90:5b:95:78:5e:70:bb:d9:c3:6c:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:77:F1:35:4F:AB:AE:7F:44:F4:75:0B:AB:42:7F:88:7C:33:9D
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/POV38TVPq65_RPR1C6tCf4h8M50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9e:91:28:a3:43:d9:44:bd:d5:51:39:2b:b2:70:c5:f0:c3:
66:24:32:b4:4c:14:fa:80:46:bc:27:09:92:48:b1:8b:ef:b4:
c1:3d:01:e6:d3:26:46:14:da:d4:a8:9b:79:35:1f:27:06:33:
e0:01:73:bb:79:65:fb:40:a5:60:15:b2:8c:72:8e:c6:39:ad:
d2:c0:91:61:02:62:1a:50:0e:a9:4a:62:c1:35:14:c9:a4:16:
16:5e:fb:ba:3f:a2:6a:bf:81:99:31:00:db:d8:45:e9:3d:e2:
4c:25:cb:8f:4d:e2:70:ad:83:41:a2:ef:bb:8f:59:0b:0a:cc:
76:a2:97:ff:a1:90:99:cf:33:19:6d:18:ae:be:b8:b6:98:fb:
dc:16:86:f9:d0:bc:df:ea:b9:be:6c:41:38:a0:ee:3b:af:f3:
02:8e:01:c5:62:b2:bf:5c:f2:45:a6:c8:df:ed:2e:48:b8:a2:
a4:72:42:2f:62:3b:f3:e0:e8:1a:a8:d1:9d:b3:9f:9b:a8:a4:
fb:30:14:96:90:f7:a1:3f:74:ec:22:b7:93:d4:9f:65:5c:00:
76:e9:15:0c:b6:86:7f:16:2a:37:1b:2b:6b:a7:f4:90:b5:34:
91:9b:20:e7:1a:1a:94:00:e2:35:a9:b3:43:cb:4b:32:c3:c1:
d7:12:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:15:40 2024 by rpki-client on console-ams.rpki-client.org