Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1iPi8lUYRKlzKHwcoefdTqQlNwM.roa
File: 1iPi8lUYRKlzKHwcoefdTqQlNwM.roa (raw, json)
Hash identifier: VtmHfIRUjQnPTs23CA6+bh9KZARUh6sdMZ07Gpx+Z6w=
Subject key identifier: D6:23:E2:F2:55:18:44:A9:73:28:7C:1C:A1:E7:DD:4E:A4:25:37:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01935E05AC71AB1DA05AA1339F7E4A7649DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1iPi8lUYRKlzKHwcoefdTqQlNwM.roa
Signing time: Sun 24 Nov 2024 11:54:10 +0000
ROA not before: Sun 24 Nov 2024 11:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401475
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:05:ac:71:ab:1d:a0:5a:a1:33:9f:7e:4a:76:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 24 11:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d623e2f2551844a973287c1ca1e7dd4ea4253703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:49:47:7c:c6:39:fb:16:e3:27:e5:7e:4f:
b8:c2:7a:f7:88:6b:0a:81:9f:ca:05:e9:00:a8:8b:
6d:6d:e3:d6:68:97:3a:f0:bd:ba:8f:47:bc:9f:ca:
99:cf:01:dd:f1:43:4e:3e:2f:db:77:27:3f:3a:63:
4e:9b:75:58:f6:84:f2:fe:63:cc:28:fa:fd:55:3c:
58:0b:ba:54:dd:51:72:ce:9c:12:4e:83:be:fb:be:
22:ac:1f:8d:36:0c:2c:15:51:f9:ed:01:f7:d0:6d:
b8:86:ec:37:52:b4:b5:f5:8b:1c:67:be:f8:47:48:
9e:a5:9c:2f:78:36:8a:de:32:2f:bf:05:01:78:91:
76:a1:6e:ba:45:fc:6d:0c:c0:42:0b:69:69:f0:1d:
a1:23:1e:85:a9:5d:98:82:a8:67:e4:07:27:3c:19:
bb:a1:da:ee:28:62:81:6c:e9:7f:e7:14:df:fa:dc:
e2:aa:c8:3a:bf:9c:f2:5b:57:ad:66:0c:cd:d2:97:
41:ca:83:65:7a:aa:a2:6a:ae:57:31:2b:5d:d5:00:
dd:95:3f:87:71:66:6d:11:78:12:a8:f3:2c:f6:3f:
87:1e:7e:7a:fc:fc:6e:75:a9:b8:01:e2:19:3e:22:
49:bc:fe:ad:4d:81:61:cc:a0:4a:90:06:cc:66:10:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:E2:F2:55:18:44:A9:73:28:7C:1C:A1:E7:DD:4E:A4:25:37:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1iPi8lUYRKlzKHwcoefdTqQlNwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
45:df:39:b0:47:a5:c0:89:9d:34:d1:3e:d8:4e:ea:20:d2:1d:
bf:a7:62:04:b0:8b:83:f4:c2:87:80:b0:f6:4a:e0:a8:f2:c5:
84:ae:23:30:e9:b8:ae:b7:77:5f:20:1c:10:be:2c:23:76:c8:
ad:e8:61:51:13:d5:92:40:38:6a:46:65:9a:4e:4b:a6:80:f9:
ca:93:75:d7:b4:c3:c0:c4:ed:11:a8:cd:bb:1f:89:b5:36:28:
86:bf:10:98:1c:08:cb:12:ed:c0:e9:dd:4d:1d:a6:95:69:98:
11:b4:37:5c:b4:fb:d4:9f:9f:1a:95:ff:d2:99:28:68:8c:5c:
28:e6:20:de:b9:43:eb:7c:b4:8e:2e:08:51:03:cd:c2:0b:2f:
cf:66:41:6b:56:df:5c:32:14:e6:4a:61:38:32:9e:27:67:a5:
8b:cc:4e:b2:21:bb:22:48:ff:52:97:37:0d:1a:5b:7e:34:70:
37:3f:21:5d:15:fd:d1:d6:6f:70:13:7c:e1:5f:f7:ea:4d:13:
49:6c:34:06:70:76:06:76:9c:fc:27:e2:b3:81:32:bd:14:84:
4c:fc:53:4a:ee:34:63:58:3b:e9:fd:58:67:05:f5:f2:5e:ce:
97:33:e0:1a:dc:fd:ee:d5:78:7f:38:0b:f0:61:04:91:30:4a:
d8:cb:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:48:55 2024 by rpki-client on console-ams.rpki-client.org