Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0j8s_vd3zz7jteOHvhZneWna-04.roa
File: 0j8s_vd3zz7jteOHvhZneWna-04.roa (raw, json)
Hash identifier: 8y/vrUKwZ8EW29uIbl/2vtnVnHCTXpaUD90S95e9a1s=
Subject key identifier: D2:3F:2C:FE:F7:77:CF:3E:E3:B5:E3:87:BE:16:67:79:69:DA:FB:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0E9271D9D7C94400F1DE4B75D5BA5268
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0j8s_vd3zz7jteOHvhZneWna-04.roa
Signing time: Wed 24 Apr 2024 05:27:09 +0000
ROA not before: Wed 24 Apr 2024 05:27:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215127
IP address blocks: 45.81.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:92:71:d9:d7:c9:44:00:f1:de:4b:75:d5:ba:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 05:27:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d23f2cfef777cf3ee3b5e387be16677969dafb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:e6:aa:4b:b9:f3:da:97:60:36:1e:c2:66:
27:d6:02:e5:3a:56:ba:45:36:06:0e:a7:e7:f5:f5:
26:36:b5:e2:f2:c5:29:d6:d8:8c:65:c8:25:80:45:
36:1b:fc:52:22:cc:6a:75:a2:53:62:00:d4:a8:f5:
83:9b:75:8d:6d:9a:d5:12:b7:00:ad:82:39:cc:f3:
20:2b:85:2d:d0:ea:cf:3d:cd:aa:6f:e2:5f:c4:d4:
6b:a8:a8:0d:34:53:b4:3e:56:f2:90:91:94:f9:2b:
b3:ca:76:2f:c4:15:bd:cd:6a:2c:84:9f:a3:35:e9:
0f:1f:e1:3a:ba:40:90:69:0a:a9:12:4e:f9:c3:a5:
34:6c:b2:1f:6f:ab:eb:d3:c9:a9:4c:f9:7e:cd:7c:
0d:a3:c9:6e:79:02:63:c4:b3:55:40:fe:e8:39:05:
0e:21:a6:ff:f9:72:bd:6d:32:8d:54:28:24:7b:bf:
bc:b6:d2:5f:76:34:cd:53:8d:06:bc:bf:05:1b:d9:
24:6a:b8:be:2f:1c:bf:5f:96:e6:04:ba:44:b8:9b:
eb:21:2a:d4:8d:97:e2:6f:f3:36:6e:71:c0:c2:37:
cb:0b:cf:04:b5:fe:fb:66:0c:9c:8a:37:dd:9b:91:
e6:2c:32:e7:0b:ca:ca:2b:5b:dd:6a:c4:6a:01:a5:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:2C:FE:F7:77:CF:3E:E3:B5:E3:87:BE:16:67:79:69:DA:FB:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0j8s_vd3zz7jteOHvhZneWna-04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:87:cf:6c:e9:72:31:95:1e:4f:a4:86:d0:74:67:a5:34:c6:
65:e0:16:47:bd:a6:f4:40:20:6d:e4:a4:87:24:8a:91:55:bc:
c9:66:37:ba:c9:e7:42:61:26:e3:f4:0a:cc:f1:e1:d0:47:e9:
ac:6e:02:ed:d5:c8:b9:7e:89:6c:cc:6c:4c:ea:b5:44:4e:5d:
36:a8:3e:02:b8:e2:e2:ff:08:b2:f2:76:b3:f3:2d:d2:f0:59:
c0:97:02:e5:1c:e8:bb:67:4a:39:3a:61:75:97:dc:11:06:4e:
31:21:b8:06:b3:0a:84:6f:f8:63:c2:ca:a9:7d:37:51:02:fe:
70:21:c5:8b:5b:77:36:e1:04:cc:44:27:b5:06:4d:91:c4:c3:
1c:5a:9d:c7:0d:52:51:f1:f6:9f:39:cd:04:6e:e1:2e:1e:f1:
89:85:ae:32:7c:6d:e0:13:78:65:0c:d1:6c:c7:4b:6a:29:82:
1b:4a:2c:b0:69:37:7c:21:65:56:c1:02:94:88:a8:6b:a6:e5:
88:6b:24:1f:22:20:91:5e:3e:ea:5b:0f:b3:15:4b:bc:e8:12:
d5:b8:43:72:62:4b:7e:79:00:96:49:90:09:f0:be:1c:7a:30:
d4:32:b6:63:e7:21:89:f3:2d:91:fb:15:0d:57:1b:59:7a:35:
d6:9b:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:30:46 2024 by rpki-client on console-fra.rpki-client.org