Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Cc8TsihVjXydcnyLDNGIhz73yg.roa
File: 0Cc8TsihVjXydcnyLDNGIhz73yg.roa (raw, json)
Hash identifier: v82QZeW873p3nWMjLLrl+UOo0rB/BDL7MemVZqwfWPM=
Subject key identifier: D0:27:3C:4E:C8:A1:56:35:F2:75:C9:F2:2C:33:46:22:1C:FB:DF:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019168BA91986C961D6A2FF3F7F72497D0AC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Cc8TsihVjXydcnyLDNGIhz73yg.roa
Signing time: Mon 19 Aug 2024 03:42:23 +0000
ROA not before: Mon 19 Aug 2024 03:42:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137517
IP address blocks: 193.37.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:68:ba:91:98:6c:96:1d:6a:2f:f3:f7:f7:24:97:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 03:42:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0273c4ec8a15635f275c9f22c3346221cfbdf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:63:68:e6:9e:80:62:6f:11:fd:c7:32:fc:
5e:f9:64:dd:ba:6a:ca:f6:75:e4:72:f3:3c:88:b7:
00:1b:ba:5e:ff:52:74:69:e5:34:51:46:bf:9a:cf:
3d:90:ad:62:bd:97:de:87:b1:25:be:59:2f:ec:af:
83:23:17:ca:11:5e:36:5c:4d:04:cc:cd:10:1c:d5:
16:3e:fd:eb:2e:86:42:56:0f:b2:ff:1e:3b:d7:c8:
8f:f2:df:1f:b6:08:3d:0a:43:e3:7a:ff:e2:a4:f7:
10:41:3a:e9:56:e0:a2:a2:55:62:54:18:f6:fc:0b:
47:83:c0:ab:6e:b7:f4:2f:19:d1:23:55:35:e3:cd:
8a:ff:5d:6e:10:93:b4:62:50:fb:6b:e7:4a:1f:67:
8c:24:35:df:5e:00:8c:f3:9f:99:47:7d:43:cd:2a:
f5:ae:ab:75:49:c0:68:54:da:ac:9a:4d:22:74:8a:
5d:bb:68:69:07:9d:db:b9:8e:02:e5:f8:fd:61:ab:
1b:02:87:7d:d5:d0:f5:fa:bc:54:b1:b7:14:1e:25:
fe:5c:34:ac:a9:d5:b4:c8:ee:43:b3:cc:44:60:0e:
9e:02:8d:b7:47:e1:1a:ae:9f:80:bb:19:a6:32:0d:
2d:b8:01:df:15:b7:ad:22:de:f6:44:6b:4a:02:4f:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:3C:4E:C8:A1:56:35:F2:75:C9:F2:2C:33:46:22:1C:FB:DF:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0Cc8TsihVjXydcnyLDNGIhz73yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d4:33:1e:b1:e9:f8:e9:10:60:e4:ef:bf:8a:54:90:20:72:
b0:f8:64:42:f1:7e:ca:41:b2:2d:81:72:5c:e3:4b:22:b1:f9:
9c:d9:d8:15:c6:e5:63:56:a1:65:08:2a:1a:34:0d:ae:a5:54:
ab:90:d6:41:90:d2:ec:65:bc:c0:6c:30:ed:68:dc:7d:ed:24:
9f:24:43:dc:b5:49:b3:fe:7b:55:c1:39:83:5d:f9:73:7b:dc:
da:13:12:f2:cc:9c:d0:6b:42:83:c7:fe:f3:d2:5e:51:f9:e6:
8d:f5:78:86:94:50:17:69:e1:a3:86:b4:1a:46:9f:9a:6c:2c:
ba:94:02:6b:0c:0b:10:ba:36:e2:9d:e1:1f:72:6c:af:cf:00:
80:3f:02:e4:65:9d:f8:14:7d:f0:b3:5b:fc:68:43:4c:e7:10:
3c:22:ad:94:eb:a0:29:d2:be:29:4b:62:a9:b4:c9:d3:ed:cb:
e7:5b:de:b1:a0:24:27:a8:43:bd:14:4d:0b:b5:47:73:77:7f:
05:02:3b:8a:a5:a4:51:a8:bb:c7:33:0e:bd:d2:29:ab:bf:87:
5f:0e:71:b3:a6:39:d5:89:08:ff:df:41:91:89:bc:e4:e3:e5:
a3:ab:5b:55:82:a1:6b:73:e7:10:6b:4a:ad:03:5c:be:39:2d:
05:1a:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:08 2024 by rpki-client on console-fra.rpki-client.org