Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/pvkG__b3VOiYsbcSgy3you7V8es.roa
File: pvkG__b3VOiYsbcSgy3you7V8es.roa (raw, json)
Hash identifier: QGXawp/g300QNLGy8h780GCJUzSC3GGjn+LGYvocEWs=
Subject key identifier: A6:F9:06:FF:F6:F7:54:E8:98:B1:B7:12:83:2D:F2:A2:EE:D5:F1:EB
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 018D3B21390AD715E9A7D0496F427456125D
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/pvkG__b3VOiYsbcSgy3you7V8es.roa
Signing time: Wed 24 Jan 2024 11:00:49 +0000
ROA not before: Wed 24 Jan 2024 11:00:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 800
IP address blocks: 27.121.104.0/22 maxlen: 24
45.147.188.0/22 maxlen: 24
2a09:4880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:21:39:0a:d7:15:e9:a7:d0:49:6f:42:74:56:12:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jan 24 11:00:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f906fff6f754e898b1b712832df2a2eed5f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:dc:5b:12:bd:5a:15:1c:6a:28:25:61:5b:
2c:d6:82:0c:b2:02:99:95:08:26:e1:fa:cc:3a:43:
4b:6d:9b:4a:db:e8:2a:07:f5:f9:ae:f1:f0:5a:ee:
66:de:61:6e:19:77:cd:fd:9d:ca:b2:7e:0e:c9:39:
c6:87:d2:01:1f:b5:98:be:28:3d:43:11:b0:7e:09:
05:55:63:51:96:49:c7:93:4e:64:ba:d4:80:f4:41:
ac:91:ba:d6:1d:2f:8a:ce:79:4a:fd:aa:4b:5a:07:
e4:5e:a9:7c:c3:96:65:e9:0c:c5:f0:c0:e1:54:07:
96:39:fd:b1:05:7e:2b:05:75:de:7e:43:be:59:2b:
40:4c:1e:d6:27:eb:76:b3:a6:89:0a:89:ba:6f:4e:
3b:f0:c6:f4:4e:3b:10:c9:8c:6c:4e:41:3c:5a:7d:
96:52:f0:23:6a:7e:f0:b8:97:92:00:e0:e7:c0:98:
8c:1a:a0:34:35:f6:30:7f:ea:96:96:cc:ff:4a:2e:
3c:5a:4a:aa:4c:72:5f:e3:b8:a4:f6:2c:5e:ca:7b:
f1:11:94:65:d3:56:1e:3c:28:29:1e:53:22:dd:90:
23:43:e6:1c:dd:70:53:4a:de:99:ff:9d:ae:67:8f:
5a:02:52:f7:d0:ca:22:da:04:b2:79:1b:a9:85:1b:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:06:FF:F6:F7:54:E8:98:B1:B7:12:83:2D:F2:A2:EE:D5:F1:EB
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/pvkG__b3VOiYsbcSgy3you7V8es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.104.0/22
45.147.188.0/22
IPv6:
2a09:4880::/32
Signature Algorithm: sha256WithRSAEncryption
90:04:4b:37:43:97:ce:a3:5f:c2:6b:4e:b7:a2:7b:6a:d9:5c:
88:3f:ec:6d:65:ef:5a:ad:09:38:f2:6c:99:b9:22:11:0e:fc:
56:1f:c9:d8:7e:8c:33:68:0d:e5:1a:bf:42:8e:5b:57:2b:49:
3d:33:5d:fb:1e:25:2d:9d:bf:e1:7a:d8:3a:7f:a5:52:f1:ee:
27:6a:0c:45:5c:e4:87:c6:39:c5:5e:44:49:bd:86:92:33:76:
fc:b5:d6:06:b4:ae:e9:5c:03:49:c0:e4:37:fc:68:ec:fe:e7:
7b:5c:22:c3:7d:53:f2:33:78:45:9a:70:e4:e1:01:f8:8e:d7:
e7:ba:d4:54:71:0b:b8:11:4e:6c:52:2d:56:c6:30:ce:3a:44:
61:b4:ad:25:56:98:c0:71:59:c6:cb:87:ae:d7:00:58:47:c0:
4a:f7:b2:91:ed:d4:58:cb:7c:ee:9c:99:a0:62:be:aa:18:0b:
a4:d5:31:07:18:34:72:08:6b:f7:ab:98:90:97:69:41:39:fb:
6e:31:17:9a:54:d2:48:3a:ee:ee:69:4f:cb:d6:8d:06:ed:e8:
54:e7:b5:72:1d:ae:8f:41:e2:75:21:fc:47:5b:82:92:99:92:
04:a5:97:87:14:ba:88:32:db:dc:75:92:f0:5a:e4:1e:76:5e:
e0:d1:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:30 2024 by rpki-client on console-fra.rpki-client.org