Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9VgrctMzMDWo8YJ_2UMxcQuGBJw.roa
File: 9VgrctMzMDWo8YJ_2UMxcQuGBJw.roa (raw, json)
Hash identifier: zZEfTmnCojcDfQG7l3vZabg/bKtMd+WN1rWBJkmJYTk=
Subject key identifier: F5:58:2B:72:D3:33:30:35:A8:F1:82:7F:D9:43:31:71:0B:86:04:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ECD614368C446D2BE64A0A450165A573C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9VgrctMzMDWo8YJ_2UMxcQuGBJw.roa
Signing time: Thu 11 Apr 2024 13:38:07 +0000
ROA not before: Thu 11 Apr 2024 13:38:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197644
IP address blocks: 45.84.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:61:43:68:c4:46:d2:be:64:a0:a4:50:16:5a:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 13:38:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5582b72d3333035a8f1827fd94331710b86049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:75:68:51:69:aa:2f:b2:84:9f:94:2d:73:
74:d6:12:bc:28:b5:99:74:64:30:9e:b9:26:43:19:
71:23:49:73:9b:67:4c:bd:20:53:50:4a:6f:56:ae:
2e:0d:b5:ef:2b:62:6f:58:14:36:9a:be:51:04:a5:
73:80:b4:78:97:a8:f5:80:f7:38:09:bc:c2:c1:cc:
2c:84:1c:b1:70:01:dc:a3:fb:c7:03:6b:0c:70:12:
b9:35:0d:a4:73:af:fb:a4:a8:d2:7a:43:e2:5a:e1:
52:64:e2:1c:48:b6:65:1f:40:e6:79:d2:76:38:90:
f1:47:10:63:0f:86:5a:d9:71:7d:e3:49:9f:86:38:
37:e0:6c:40:0e:a1:e5:7b:3e:4f:f3:ce:87:22:fe:
27:dc:44:56:bb:9a:28:f8:2a:76:cb:0c:4e:fd:84:
e3:26:db:1a:b7:9c:e3:f7:b5:d6:6f:64:f7:d2:40:
6a:5c:ac:3a:0b:87:87:bb:1d:45:c0:65:db:cd:af:
05:0c:52:b1:69:21:68:74:dd:c0:aa:44:5f:dd:66:
a2:34:c4:eb:a7:7c:9c:b2:9c:59:ba:11:f4:51:b1:
5c:a3:07:ef:f8:01:f0:06:dc:3b:2c:48:6a:17:67:
a9:a5:d6:c8:4b:50:4e:d6:05:11:e0:fb:f4:32:bb:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:2B:72:D3:33:30:35:A8:F1:82:7F:D9:43:31:71:0B:86:04:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9VgrctMzMDWo8YJ_2UMxcQuGBJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.91.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e9:92:50:ad:c1:4f:46:85:6d:37:4a:af:fb:d6:b9:ed:82:
8a:84:07:e6:7f:43:91:bf:f4:44:ce:92:bc:32:23:5d:ea:61:
6a:ac:08:22:2a:66:4c:ac:aa:7d:fd:ad:e7:a6:3d:34:09:e8:
df:7e:94:c7:3a:ff:d6:c7:91:47:4b:4d:83:1a:5d:9d:e3:17:
b3:42:25:d0:26:15:63:e9:fa:87:df:be:17:40:fd:a0:bd:3c:
f5:00:a7:bc:5b:4e:bc:96:ef:ff:0b:bf:49:3a:48:0f:97:75:
ae:15:7b:af:ab:cb:9d:54:80:ab:59:d1:91:5a:84:1d:8b:77:
ff:aa:2c:c5:9a:66:43:14:49:ac:45:0e:65:a8:09:90:90:db:
15:0a:0b:4b:84:75:0b:4c:4c:c9:e7:18:71:c0:e0:e4:58:21:
3e:d5:54:c2:c7:d8:2d:4a:f4:7e:ba:a4:ef:34:59:a4:84:9b:
0e:ae:9b:4f:f0:29:63:72:ec:d0:3a:88:15:48:c4:6c:e9:a8:
f4:56:04:eb:33:15:6e:18:e4:3f:14:5e:5c:c2:b9:2d:6b:35:
4f:f0:00:f3:cc:2a:e1:17:cf:29:80:c4:d5:50:49:80:a7:db:
b7:2a:44:98:86:82:52:fb:b0:4e:f5:38:4b:dc:f7:c0:48:77:
67:6f:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:54:21 2024 by rpki-client on console-ams.rpki-client.org