Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/Pm0DdD3o9hrE49PekE1_mhoIl10.roa
File: Pm0DdD3o9hrE49PekE1_mhoIl10.roa (raw, json)
Hash identifier: /h5Evefx7JDb59hkZlZvxVxGH85nDnT5gs0rLkueKB8=
Subject key identifier: 3E:6D:03:74:3D:E8:F6:1A:C4:E3:D3:DE:90:4D:7F:9A:1A:08:97:5D
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 018CC8DF1EA76E424FE6541C84AA87BC2549
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/Pm0DdD3o9hrE49PekE1_mhoIl10.roa
Signing time: Tue 02 Jan 2024 06:31:54 +0000
ROA not before: Tue 02 Jan 2024 06:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210491
IP address blocks: 146.19.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1e:a7:6e:42:4f:e6:54:1c:84:aa:87:bc:25:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e6d03743de8f61ac4e3d3de904d7f9a1a08975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:c9:27:f9:e1:a0:21:7d:0a:01:91:d8:1a:
00:3e:08:65:86:f4:0d:b7:80:c3:77:f5:2d:a3:e7:
27:58:f7:7f:47:90:8e:0a:3c:be:4b:f6:6a:e7:31:
89:40:2b:a0:ad:ba:74:3d:ed:ce:02:4e:f5:58:b0:
c9:75:38:9e:3a:89:b6:11:ff:16:4f:3b:6f:e4:a7:
31:93:9b:47:55:7f:06:a2:2f:64:b6:12:eb:84:c8:
07:73:f0:03:6c:d9:c8:bd:51:be:36:3d:a8:de:33:
5d:5b:32:44:1f:91:ae:63:49:07:8a:48:2a:b2:2d:
b3:0d:ee:fa:88:27:04:28:69:0c:f1:9e:bf:f4:0f:
11:a2:49:42:47:f3:46:91:04:1d:81:6d:c8:f8:98:
44:87:4e:08:c1:8e:85:08:bf:3d:e5:1c:2a:4b:54:
8a:af:46:1f:d0:e0:da:a9:18:a6:95:a8:18:07:ef:
2c:52:28:e7:29:f1:42:86:cb:34:09:a0:c2:db:ca:
6f:8e:13:6b:e8:e0:5a:60:52:99:7a:46:86:4c:5e:
49:70:ce:f4:e3:42:98:1f:a8:e5:49:fb:ea:69:2b:
81:ee:25:87:f3:28:07:1f:9e:b6:9e:75:29:53:b9:
28:7b:b7:9c:ec:f4:2d:bb:9c:82:ed:58:02:20:cf:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:03:74:3D:E8:F6:1A:C4:E3:D3:DE:90:4D:7F:9A:1A:08:97:5D
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/Pm0DdD3o9hrE49PekE1_mhoIl10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:44:b8:5e:ea:16:31:82:49:65:43:3d:9c:fb:a8:b4:cb:f9:
be:4e:c1:b2:4e:37:61:e8:f1:96:81:a2:b4:b1:4d:fa:66:2d:
04:93:72:ee:d8:e7:1a:55:25:6d:6b:1b:b0:49:da:df:fc:a2:
e2:80:06:4b:94:79:3a:01:62:0c:66:0a:91:a4:33:9a:87:55:
a7:89:2b:0d:c8:cc:a5:c5:9c:8c:e9:f1:3d:c7:01:a8:cd:53:
10:44:9c:c2:9e:5b:dd:58:1d:42:86:3e:ec:a9:16:51:00:aa:
3a:46:c2:0b:2c:bf:7c:b2:f4:e1:13:da:a8:d2:70:d3:0b:dd:
3d:e0:17:03:be:d9:ba:9d:7b:5c:86:6d:fe:5c:69:c0:c1:f1:
2d:7a:49:36:b1:3a:09:46:58:ee:67:fe:d2:21:aa:f4:88:5b:
60:68:3e:21:c5:36:a6:58:c9:1b:ba:b7:2f:f0:f0:01:3e:b2:
a1:b4:ce:1f:05:b1:34:88:15:30:b4:38:27:a9:c0:69:b1:3f:
20:d2:28:be:9c:b6:31:24:89:80:c6:1c:b9:b4:40:c8:0e:43:
c9:8d:d5:fa:b1:aa:52:2b:3b:df:b5:c2:51:e2:67:d7:bd:28:
ba:4c:3a:48:4b:f6:71:a6:61:30:c7:6b:06:fd:35:a4:29:e9:
60:07:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:05:57 2024 by rpki-client on console-fra.rpki-client.org