Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/PIbnZqZtkGC1kAkmHHnCO8dy-9k.roa
File: PIbnZqZtkGC1kAkmHHnCO8dy-9k.roa (raw, json)
Hash identifier: QVNlPxSwQrF/EceHbZ1zIaz49yBfwI1L2Hfp6aRAL2o=
Subject key identifier: 3C:86:E7:66:A6:6D:90:60:B5:90:09:26:1C:79:C2:3B:C7:72:FB:D9
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 018CC56E14B6D594B34357E1B17EF066DEA7
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/PIbnZqZtkGC1kAkmHHnCO8dy-9k.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 81.90.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:b6:d5:94:b3:43:57:e1:b1:7e:f0:66:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c86e766a66d9060b59009261c79c23bc772fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:ea:c8:78:15:57:e9:57:2a:9a:d3:5b:3b:
4d:d6:13:77:4c:9c:35:e9:ce:b1:bc:67:83:b4:53:
2a:61:e9:5e:dd:e0:6a:9a:f9:0c:79:da:f0:63:21:
04:d3:ed:57:14:a6:6a:34:4a:a3:e0:00:99:56:47:
04:11:b6:cd:27:9f:f9:d8:99:f4:be:fe:71:43:e9:
83:70:66:7f:1e:ac:ab:0b:dc:62:ec:f4:d0:8b:c5:
c7:a8:83:12:cf:5c:0b:89:38:e5:cd:c2:8e:a7:2e:
ed:c4:08:af:1c:51:91:9c:b6:87:0d:9c:c0:aa:b3:
aa:a0:13:61:5b:4b:53:77:2b:8b:ba:92:48:d7:ea:
06:3a:7d:bf:cd:db:5d:0e:f2:30:64:a5:b8:55:0b:
c9:e1:51:c6:78:2d:52:b5:29:c7:41:b1:ae:bb:68:
0c:30:b6:6c:c7:94:0e:40:9b:28:33:ba:e2:05:47:
30:7e:6d:4f:dd:08:8f:23:20:67:72:d0:ac:3e:67:
8a:ef:dd:82:a5:37:bc:70:c2:f8:09:1c:41:49:76:
a4:e0:7d:8c:3e:ba:08:c2:d1:64:6b:de:36:ac:b2:
73:6d:90:e5:00:b2:0a:0f:76:87:fa:14:2a:24:2e:
c6:c2:f7:1a:81:bc:9d:c3:ae:da:ab:52:cb:f0:f8:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:E7:66:A6:6D:90:60:B5:90:09:26:1C:79:C2:3B:C7:72:FB:D9
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/PIbnZqZtkGC1kAkmHHnCO8dy-9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d9:65:cd:b6:83:db:2a:e5:67:db:d9:bb:6a:48:d9:61:3f:
7a:e3:ca:2f:b2:23:30:01:0c:6a:e5:e8:14:a8:f9:ae:bf:ef:
b6:12:31:d1:83:27:d5:3f:d3:55:46:27:9e:cf:c3:33:3c:34:
45:3e:f6:d6:50:c9:42:c6:9e:76:a4:93:ec:33:85:ff:28:6a:
27:1a:76:98:72:ef:2f:50:bd:84:da:c3:c9:31:23:eb:6a:7d:
a9:1d:17:de:33:1a:f7:c1:76:ec:79:23:ab:33:65:e5:f4:0c:
64:ed:54:bc:ad:f2:15:95:cc:26:92:42:ac:d2:c9:3f:9a:e6:
24:f6:75:d5:00:f3:b9:a4:7a:56:cf:d9:36:2f:dd:98:e3:c4:
35:4b:39:98:ce:3f:54:4d:a9:94:4e:a2:fb:11:a5:28:84:cb:
53:4c:4c:70:d9:82:fd:5e:e8:e0:ab:94:50:6a:ff:07:3f:bb:
71:d8:fa:9c:3b:a2:6d:40:82:52:95:f6:fb:e5:0b:ea:85:36:
82:0c:c6:58:f1:d3:49:88:dc:4b:64:af:20:9f:1f:cb:f3:f1:
52:a4:91:29:9a:c6:b0:80:36:d4:c1:a2:50:c7:8b:3f:1f:d9:
f4:ca:b4:31:8a:24:d4:0f:75:e7:e1:2d:ba:d7:f3:5e:05:91:
b2:a9:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:48:52 2024 by rpki-client on console-fra.rpki-client.org