Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tq7ZtCYG6YzCIw24QDCwjlvqDFY.roa
File: tq7ZtCYG6YzCIw24QDCwjlvqDFY.roa (raw, json)
Hash identifier: 4znyrJy+itKw0i2hxATEaYyxpMbW6xyj5L3T4mXj4Hw=
Subject key identifier: B6:AE:D9:B4:26:06:E9:8C:C2:23:0D:B8:40:30:B0:8E:5B:EA:0C:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01922DD926F2D5114ED7EE69CAA88DAF745A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tq7ZtCYG6YzCIw24QDCwjlvqDFY.roa
Signing time: Thu 26 Sep 2024 10:20:58 +0000
ROA not before: Thu 26 Sep 2024 10:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215898
IP address blocks: 93.123.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:d9:26:f2:d5:11:4e:d7:ee:69:ca:a8:8d:af:74:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 10:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6aed9b42606e98cc2230db84030b08e5bea0c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:8a:28:b6:99:c5:6b:df:43:00:3e:91:41:
fc:31:d2:9d:98:2e:33:8c:b4:9b:7d:fa:21:b2:f0:
58:d5:be:38:46:e9:bf:fc:bc:65:a4:7b:73:e3:b5:
11:e1:8b:ab:a6:ce:fe:7b:81:e0:a3:b9:e1:05:e9:
65:5c:88:aa:36:41:f2:90:63:81:0e:6f:37:e0:a6:
b3:df:c3:0b:6e:35:6c:b5:f5:64:0a:0d:90:5f:92:
e3:10:71:81:b3:5e:a8:d6:cf:86:5b:72:0f:27:8b:
a4:d5:d5:64:5b:23:ae:18:d2:a6:eb:7b:cf:46:44:
95:3c:f7:80:76:c6:84:8c:b1:4a:4a:a8:e9:b4:b3:
77:0f:ab:2d:37:72:eb:df:94:ae:be:c4:db:dd:1e:
c9:7a:49:29:4b:d1:8d:de:6c:d2:ad:2c:dc:d9:9a:
3d:ec:73:f1:17:04:6c:42:ff:aa:19:e1:98:6d:c0:
a0:f1:89:23:93:22:54:05:77:e3:40:f1:2a:df:0d:
92:48:f0:74:de:67:0c:92:76:c9:a1:56:77:f8:2e:
2c:43:a5:f7:48:3e:8f:06:84:d5:22:5d:4a:bb:a5:
6b:a8:56:ae:5d:e9:bb:f6:5c:c2:05:06:ee:23:70:
ef:ac:64:31:86:a8:70:14:60:5e:d3:52:f2:8b:2b:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:D9:B4:26:06:E9:8C:C2:23:0D:B8:40:30:B0:8E:5B:EA:0C:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tq7ZtCYG6YzCIw24QDCwjlvqDFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.84.0/24
Signature Algorithm: sha256WithRSAEncryption
44:05:24:f4:3e:13:9b:87:dc:c0:36:1c:25:c6:b9:9a:fc:51:
f7:f0:a7:0f:9a:ae:b8:85:b5:65:16:1b:1c:ce:a2:83:ce:0e:
41:e1:b2:d5:5b:34:d8:2c:86:60:64:a8:ad:8d:c8:be:62:a3:
b3:0b:bb:45:f2:e7:3a:0e:00:a3:5d:b1:7b:8b:10:8e:e6:69:
c2:45:70:46:2e:a9:fc:6d:f7:b9:68:32:1c:a2:eb:7a:09:c0:
82:c6:24:66:e3:cf:c6:a4:bd:0a:20:23:62:84:5c:0b:48:e7:
6e:82:f2:4a:18:fb:35:5e:0f:56:ac:7c:f2:51:06:83:9b:2c:
df:c0:2a:4f:1d:42:e6:2a:52:c3:30:26:8e:cc:97:a2:07:02:
c6:25:b7:36:d9:cc:d6:9a:ed:d8:e7:ad:34:ea:31:f4:6f:64:
d7:1d:57:f6:a6:84:00:3e:cd:97:84:07:6e:45:96:3c:2d:01:
40:86:df:af:97:29:24:c6:ce:22:25:a3:61:2e:70:6f:fc:1e:
26:81:23:8c:a9:ef:d8:b6:af:86:5c:53:53:d5:8f:ca:31:a5:
31:cb:39:df:78:ba:be:e7:9a:94:e9:01:43:1d:5e:e3:ca:e3:
5d:20:ee:21:89:bd:ef:25:06:a2:bd:dc:aa:65:de:5e:78:5e:
60:7e:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:25:47 2024 by rpki-client on console-ams.rpki-client.org