Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ge-SRJX5qY8Lb2nTottWryUg6RM.roa
File: Ge-SRJX5qY8Lb2nTottWryUg6RM.roa (raw, json)
Hash identifier: jzae44vyIq6zPIFzH7n/eknwXHaXpw0gPV8ubgfVSpQ=
Subject key identifier: 19:EF:92:44:95:F9:A9:8F:0B:6F:69:D3:A2:DB:56:AF:25:20:E9:13
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0E927298A6A29C194A3D3731E1567BEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ge-SRJX5qY8Lb2nTottWryUg6RM.roa
Signing time: Wed 24 Apr 2024 05:27:09 +0000
ROA not before: Wed 24 Apr 2024 05:27:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 94.154.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:92:72:98:a6:a2:9c:19:4a:3d:37:31:e1:56:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 24 05:27:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ef924495f9a98f0b6f69d3a2db56af2520e913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:12:86:4e:7a:fe:9b:7c:10:fb:05:b9:79:
21:f5:8f:c8:23:af:1c:e9:8e:f3:cf:96:e1:f5:86:
55:7b:76:ac:6c:c9:4d:a9:65:26:50:83:c1:e8:93:
81:21:7d:c0:98:ca:aa:f7:64:cc:24:5e:9e:65:3d:
67:23:4d:4f:f6:39:32:76:d9:bb:2d:75:0b:d8:0c:
f2:c9:2c:2f:5f:27:6e:cc:18:b0:d0:7b:69:8f:72:
92:61:7a:48:93:61:4b:7a:3f:da:5f:72:d9:a9:9e:
fa:7d:44:a3:38:8b:71:8e:26:28:72:bf:3e:f1:d7:
e0:95:e7:4f:f7:d5:a8:54:be:71:e0:9a:fc:d6:66:
cf:a1:4b:96:7b:7e:13:0c:24:62:ad:0e:ab:f1:e1:
b4:c6:ad:a3:27:dd:ad:0d:0e:6b:91:74:04:a2:0c:
a9:36:c9:5e:af:ae:08:08:79:2e:bd:f2:e1:f5:01:
bb:ad:45:64:9d:f3:af:2a:88:33:c2:77:4f:75:8b:
ec:8b:5a:67:9d:06:a7:5a:30:80:a5:94:62:9c:f5:
fd:90:b6:a9:22:7d:12:78:c8:46:11:8f:b1:f3:c1:
5a:3c:fe:6a:d1:93:df:d5:ae:7c:99:b8:23:bd:35:
26:f5:1a:d0:86:84:20:a3:4c:ab:79:f6:ec:d7:4c:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:92:44:95:F9:A9:8F:0B:6F:69:D3:A2:DB:56:AF:25:20:E9:13
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ge-SRJX5qY8Lb2nTottWryUg6RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.163.0/24
Signature Algorithm: sha256WithRSAEncryption
10:34:ce:13:a9:f5:52:a8:22:39:bf:77:2e:d2:a8:1d:2a:4f:
71:45:3f:7e:e8:97:79:01:53:a3:e0:d3:08:e0:21:35:86:95:
9d:ec:7d:fa:05:ec:53:33:3c:cd:18:e6:c0:7c:d2:ff:2e:66:
b4:1d:88:74:44:b1:a8:60:32:e8:2f:2a:c0:63:8a:91:7f:5d:
48:dc:67:c0:9e:a7:6e:67:36:d7:9d:b1:a3:55:2b:da:00:83:
63:bf:37:aa:3a:c4:5d:ee:3e:d2:89:8c:76:f8:57:77:88:0a:
a1:45:7a:46:8c:38:37:7a:a6:4a:45:af:17:13:05:48:83:c7:
3f:1a:ee:2d:90:b9:13:1d:df:77:86:78:11:e8:6e:64:55:a8:
5a:9d:cf:f9:34:ea:03:00:73:72:ef:cf:7a:a0:31:9a:08:91:
7c:19:78:5a:4a:21:94:16:b6:d6:45:67:35:cd:4f:b8:2b:71:
08:9c:59:94:9a:6a:a3:03:67:7e:31:8e:88:63:00:60:7d:a5:
03:4a:59:80:58:7c:d6:5a:ad:d6:3c:89:3d:dc:98:66:b0:6b:
85:e0:4f:f5:aa:11:11:a0:71:69:cb:40:43:3d:c7:4c:f3:31:
91:6d:1a:1c:82:2c:c8:2e:d6:92:d6:c2:e4:ba:7b:ad:3f:56:
ce:36:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:30:46 2024 by rpki-client on console-fra.rpki-client.org