Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/PwFYWPmRTUJ8rvWhf_8RlcfPE4A.roa
File: PwFYWPmRTUJ8rvWhf_8RlcfPE4A.roa (raw, json)
Hash identifier: P21e9DVOSHQ4GHD7hy1XiiFY0cmd7/YJpZim3z8rvI4=
Subject key identifier: 3F:01:58:58:F9:91:4D:42:7C:AE:F5:A1:7F:FF:11:95:C7:CF:13:80
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 018DE010A07918B813EF2ED942062DCC9CE4
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/PwFYWPmRTUJ8rvWhf_8RlcfPE4A.roa
Signing time: Sun 25 Feb 2024 11:40:02 +0000
ROA not before: Sun 25 Feb 2024 11:40:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 93.187.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e0:10:a0:79:18:b8:13:ef:2e:d9:42:06:2d:cc:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Feb 25 11:40:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f015858f9914d427caef5a17fff1195c7cf1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:16:19:12:a0:8c:32:2d:c8:39:67:60:18:
1a:c4:dc:d5:64:9b:25:1a:2f:3b:ff:17:1e:e2:ec:
92:39:30:cb:98:39:90:17:19:b1:81:6c:84:df:25:
c7:4c:de:2a:28:60:0e:85:50:48:31:8e:65:7b:4d:
3b:e1:57:f8:38:95:85:b7:7f:98:51:32:26:00:92:
df:6c:14:62:cc:34:4f:cd:f2:a1:6b:8c:cc:61:52:
30:cf:3f:cf:87:5b:29:0a:9e:0c:ea:8d:c4:6c:a6:
9f:1a:ef:45:58:d6:32:d2:3d:eb:87:c1:57:3d:cc:
4f:bb:dd:43:30:41:9b:b8:5b:85:03:88:be:48:18:
7e:04:e3:e8:e7:f0:42:40:1e:7f:a4:7e:2d:e8:3c:
68:8a:ea:4d:8f:66:a4:ab:c9:57:5f:8d:92:91:3a:
8c:d6:b7:5e:84:11:e3:0a:f1:ee:fe:87:ca:fb:f2:
14:ed:bc:ae:33:61:43:4f:50:94:27:7c:f7:ed:3d:
cc:a3:9d:e1:17:d8:fb:93:30:17:ed:d1:3d:2f:78:
01:3d:e8:31:e3:96:24:f6:17:89:f6:29:98:02:d9:
b7:06:62:cc:1b:4a:76:1b:8e:0f:73:08:79:b5:86:
35:fa:b4:27:e4:b6:02:5b:c4:44:55:2a:b4:92:51:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:58:58:F9:91:4D:42:7C:AE:F5:A1:7F:FF:11:95:C7:CF:13:80
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/PwFYWPmRTUJ8rvWhf_8RlcfPE4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:99:18:ed:26:2c:b1:b8:d3:c7:9c:c0:db:20:43:27:ee:4a:
b7:7e:98:24:25:4e:31:a4:2f:64:53:03:ca:31:5d:6e:75:c2:
66:f1:48:75:f9:f2:5b:af:d8:6e:8c:a5:05:10:8f:de:a2:cf:
d7:2e:92:19:4d:32:b4:72:01:3a:98:fe:2c:5d:03:ed:f5:98:
c0:cf:69:86:7d:8b:61:6e:3a:98:d0:dd:41:d0:20:58:d7:25:
66:cf:bc:ed:76:ff:e0:34:b0:8b:0c:e9:f6:f4:75:15:e7:d9:
02:8f:37:00:45:d7:3d:8e:14:d3:eb:a7:e0:b6:6c:de:64:b3:
7b:6f:ca:8e:6f:0e:51:f3:dc:0c:7e:f2:a8:62:e0:65:d3:ff:
7b:a3:62:64:46:48:f7:f6:04:2c:d6:1b:a4:19:63:4c:90:f3:
60:53:5f:4f:92:32:1d:db:72:ca:ec:58:bb:72:bb:64:b5:e6:
78:1f:c2:1a:d4:a6:f9:f8:97:77:0d:99:b8:a0:d7:ac:c8:09:
2f:a9:62:74:d9:a9:a7:e1:2d:d1:df:8f:84:ca:f7:f3:83:01:
18:5c:43:be:f5:d2:f2:51:fb:67:47:db:a2:a1:af:5c:c7:a6:
18:a4:f3:02:17:af:0a:c6:17:19:ca:91:03:64:7e:aa:0e:60:
22:98:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:45:01 2024 by rpki-client on console-fra.rpki-client.org