Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jz9qfW9-vRl1vaqspgam67S1Ow.roa
File: 0jz9qfW9-vRl1vaqspgam67S1Ow.roa (raw, json)
Hash identifier: kJ6KJR58XWiRbkemyaVxkTWWu+Z44a9gfGb+kscnWaQ=
Subject key identifier: D2:3C:FD:A9:F5:BD:FA:F4:65:D6:F6:AA:B2:98:1A:9B:AE:D2:D4:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01917E26945CC821CBB4D9D33D88013CC4A8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jz9qfW9-vRl1vaqspgam67S1Ow.roa
Signing time: Fri 23 Aug 2024 07:32:22 +0000
ROA not before: Fri 23 Aug 2024 07:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22427
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 09:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:26:94:5c:c8:21:cb:b4:d9:d3:3d:88:01:3c:c4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 07:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d23cfda9f5bdfaf465d6f6aab2981a9baed2d4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:0c:b4:13:da:ca:af:c1:f7:4d:43:c8:6c:
45:d9:71:1e:cd:69:c8:0a:f3:50:c6:9d:03:77:df:
ca:0c:a1:79:c3:13:60:0d:0c:45:f8:9f:ed:c5:56:
13:ca:b6:19:86:8b:bb:a4:8e:fe:ba:63:cd:94:7f:
ea:1b:1f:d6:7a:4e:46:25:8c:c1:57:e4:36:1d:61:
13:0a:99:aa:34:df:6a:49:06:ab:fe:1a:ba:9d:2d:
45:43:fa:f4:e2:35:34:8b:34:ce:e0:f4:3c:00:7c:
dc:b1:0d:fd:e9:fe:52:34:eb:e9:e9:4a:b9:15:c4:
b3:61:28:bf:f4:6a:cc:7f:48:0c:21:4c:5a:3a:66:
b1:3e:ec:af:73:17:1b:27:73:ff:77:ce:84:23:5a:
b3:f3:43:6c:1b:8f:dd:da:3b:ab:a1:c1:cb:cb:ed:
2f:a8:f6:b3:b2:f3:22:ab:0e:0a:62:07:c5:9a:ad:
de:de:46:1b:21:50:9f:12:f4:55:d9:ff:3b:7b:6a:
bd:fb:c7:7f:d1:e1:62:cc:82:51:f0:92:0c:73:ec:
e0:ba:5e:c7:8e:a2:75:67:e3:85:91:9a:c3:da:ac:
a5:3d:a0:25:26:83:72:59:7f:df:3f:28:f0:c0:8b:
7e:d6:a6:4b:38:b7:f5:96:f4:10:b5:d6:18:ea:d1:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:FD:A9:F5:BD:FA:F4:65:D6:F6:AA:B2:98:1A:9B:AE:D2:D4:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jz9qfW9-vRl1vaqspgam67S1Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
03:28:26:d7:d4:de:8a:ed:86:25:35:56:80:d7:fb:f4:3c:d4:
a9:d6:5a:3b:a6:88:d5:a0:ff:ff:98:87:e7:86:59:19:b1:4a:
46:53:ca:1d:e7:f0:91:94:bb:97:79:70:b8:a4:40:0d:db:78:
9d:28:54:65:8d:e5:05:7a:71:52:5e:94:68:76:fc:2a:06:90:
33:6a:e9:d9:e1:5a:fb:dc:ad:0b:30:c4:65:4a:41:aa:22:0f:
82:ae:5a:3e:c7:26:27:e5:3b:97:f9:7e:8a:c2:29:0a:61:b0:
7c:7b:49:af:15:5d:40:49:cf:89:0b:3a:73:6a:b2:d9:69:b6:
04:e1:2d:30:ac:07:73:f8:d1:b5:ef:bb:74:08:dd:33:64:34:
2a:28:fb:92:00:b3:49:24:45:98:e8:d5:f9:3f:78:d0:a6:8e:
37:e2:cb:10:c0:47:63:1b:5e:67:f2:14:20:25:76:56:2f:ab:
9b:37:ff:59:d4:af:17:9e:fc:a5:6d:c7:49:ff:40:64:b6:5f:
37:26:44:48:44:a5:cf:2b:33:a9:f4:6e:7a:c3:6d:92:5d:7f:
a6:6b:ce:74:1e:0b:dd:7e:82:6d:ef:6a:9e:34:7d:81:75:02:
c6:e4:d8:40:f2:83:c8:49:98:71:05:13:3e:a8:d1:d6:43:25:
78:41:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:03:58 2024 by rpki-client on console-ams.rpki-client.org