Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PEHeN_CLaWfdY6_D7yoMcNQqXiY.roa
File: PEHeN_CLaWfdY6_D7yoMcNQqXiY.roa (raw, json)
Hash identifier: E7pvz+vp+huVHx+CXUtXCo8HJoerYeuhoabsIHTic+s=
Subject key identifier: 3C:41:DE:37:F0:8B:69:67:DD:63:AF:C3:EF:2A:0C:70:D4:2A:5E:26
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E5FC7AE4E513368D71EF823975F26B293
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PEHeN_CLaWfdY6_D7yoMcNQqXiY.roa
Signing time: Thu 21 Mar 2024 06:51:45 +0000
ROA not before: Thu 21 Mar 2024 06:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8443
IP address blocks: 91.147.36.0/22 maxlen: 22
95.159.128.0/18 maxlen: 18
95.159.174.0/23 maxlen: 23
95.159.182.0/23 maxlen: 23
195.72.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:c7:ae:4e:51:33:68:d7:1e:f8:23:97:5f:26:b2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 21 06:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c41de37f08b6967dd63afc3ef2a0c70d42a5e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:15:a5:41:98:3f:e2:61:de:b6:3f:91:33:
c9:73:07:98:0f:1d:b1:51:8f:77:32:bb:f8:fb:f2:
94:35:4a:87:e0:f0:af:c2:0b:6e:42:a5:dd:42:af:
01:e0:5c:80:31:34:51:d7:dc:a6:79:eb:2a:20:00:
f5:0c:57:8b:bb:0e:26:d4:47:a9:41:41:36:d5:1d:
3f:ce:52:bc:22:12:9f:a0:52:80:dd:3c:71:4d:8f:
86:10:8b:38:9e:78:aa:54:55:81:d0:f7:92:ec:65:
f1:48:60:1f:d9:23:04:2d:6c:e0:c7:fa:19:7f:b6:
e0:1e:a1:6a:9b:85:99:68:c7:e7:29:a3:df:4f:94:
84:6c:46:bd:ed:25:59:45:e1:c5:d0:31:56:78:58:
6a:c4:bd:40:43:eb:8a:fd:4f:8b:51:24:da:e2:cc:
ec:24:51:ab:fe:90:d1:81:e5:fa:0e:b3:0f:58:01:
c6:68:18:eb:ef:f1:21:8d:2a:70:e9:e9:73:52:6a:
c3:8b:6e:eb:15:9e:81:71:36:6d:b1:cf:59:ff:ad:
04:ee:51:3a:fe:49:b0:69:3e:f8:91:24:a8:de:d9:
65:8a:26:50:a6:e7:9f:c8:7e:97:24:63:f0:4c:ea:
c2:43:c4:dc:f6:6a:11:12:6a:fb:b0:27:ca:08:df:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:DE:37:F0:8B:69:67:DD:63:AF:C3:EF:2A:0C:70:D4:2A:5E:26
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PEHeN_CLaWfdY6_D7yoMcNQqXiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.36.0/22
95.159.128.0/18
195.72.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:0a:d3:d5:6e:f1:da:63:84:c3:a4:5f:4c:a6:85:d3:2f:ca:
3f:ea:01:17:f0:d7:51:5d:84:13:9d:ad:bf:cc:db:c4:fa:11:
35:bd:46:36:c3:9c:56:6e:ca:ae:7c:ab:8e:74:9f:d2:66:39:
19:2e:bd:57:52:63:fb:3d:02:74:8f:d8:9a:7f:31:97:4f:ab:
34:03:5b:d4:35:e4:56:43:ed:38:b9:d9:75:fc:39:74:ad:4b:
a1:05:af:e7:6a:bd:3b:48:6f:23:c9:c5:96:d5:7a:6c:4b:12:
9e:bd:58:0b:c7:1a:88:de:e5:80:ec:61:73:f7:f3:88:27:6c:
f8:1b:01:74:7f:04:ee:b0:24:af:15:73:bb:52:73:cb:4b:c7:
95:6e:b1:a4:7b:07:09:ab:99:7d:8f:f9:90:12:50:03:01:4d:
5a:55:c6:02:be:52:eb:c8:27:5d:d1:68:fb:59:9d:2c:6e:43:
8f:58:74:59:7b:af:69:d4:40:ef:bb:8b:f1:0e:0e:a5:25:ed:
35:ea:48:ab:9f:ab:af:84:ad:98:fc:0c:6b:7d:1e:c5:d4:47:
25:0b:37:d2:26:af:f9:45:bb:64:4e:74:5b:f9:e4:dc:c9:cc:
0f:65:51:7e:88:84:12:10:9b:54:e9:fa:df:a5:01:ef:e2:00:
03:57:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:17 2024 by rpki-client on console-fra.rpki-client.org