Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1xKGrWEdnQpI9FOFl7jZbcMbLho.roa
File: 1xKGrWEdnQpI9FOFl7jZbcMbLho.roa (raw, json)
Hash identifier: AgDoe5K4uxolaC6vS+ejA7wD9B3vJAIjN+4S43QEIY4=
Subject key identifier: D7:12:86:AD:61:1D:9D:0A:48:F4:53:85:97:B8:D9:6D:C3:1B:2E:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD12338EC9180D8F7CFDBFE3D19A07
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1xKGrWEdnQpI9FOFl7jZbcMbLho.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216181
IP address blocks: 94.156.6.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:12:33:8e:c9:18:0d:8f:7c:fd:bf:e3:d1:9a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71286ad611d9d0a48f4538597b8d96dc31b2e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:1c:5b:b8:c4:41:13:69:e9:1d:40:8c:09:
96:60:1e:59:f3:ae:3c:73:83:74:71:8f:74:60:8a:
e0:82:33:7b:dd:e9:e8:25:ff:90:d9:92:d1:4f:57:
ae:2d:56:ac:f1:6d:c3:1f:5a:09:24:15:99:99:dd:
14:d4:36:cd:6e:6c:f2:1e:21:ce:56:9d:54:98:31:
cf:d7:43:0f:c7:90:e6:fa:a0:c1:b8:6b:8e:fe:49:
17:1e:b7:c5:b4:fc:20:53:f0:7a:9c:b5:5e:a4:b4:
92:39:5d:fb:f2:b8:9b:50:dc:51:af:2c:0a:ee:c3:
e6:4e:d0:0c:2f:a6:0b:17:f3:bc:36:b2:86:26:1c:
97:9b:c1:ed:52:8f:58:31:1e:c4:52:b3:d9:bb:b6:
0e:d7:82:00:c5:19:b7:4a:01:61:24:26:af:fa:ad:
ce:c0:e0:f2:d6:51:b9:01:19:52:07:67:41:c0:10:
4a:8e:85:b1:61:62:8d:cb:24:04:60:b1:71:e8:cd:
e7:d2:a6:30:05:aa:62:9e:21:7e:b0:2e:25:2d:dc:
cb:0e:e4:21:f4:52:12:82:fc:e5:6b:28:68:f8:df:
30:49:48:7c:ff:65:46:a2:a6:cf:0d:80:4e:63:fe:
14:28:5b:21:7c:85:1d:df:f3:44:7b:d2:67:96:67:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:86:AD:61:1D:9D:0A:48:F4:53:85:97:B8:D9:6D:C3:1B:2E:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1xKGrWEdnQpI9FOFl7jZbcMbLho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
87.121.220.0/24
94.156.6.0/24
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:23:38:30:89:23:73:69:82:cb:16:55:b0:9d:79:bf:39:a0:
8d:45:5c:48:9e:b9:5f:06:7d:9e:fd:35:bf:5e:28:0b:af:78:
87:31:16:04:a8:ef:d8:9e:b1:0e:62:04:91:b9:89:a4:6f:bb:
e9:33:0d:db:84:ee:9f:5a:7a:db:51:5d:83:4b:8e:30:d6:82:
24:78:2b:27:3d:72:a3:a8:87:34:44:94:e6:00:ae:50:2f:15:
d0:7b:c2:90:90:b8:e5:5d:02:13:ad:bb:39:0b:9a:a9:0e:55:
3a:4d:9b:0f:32:57:33:a8:6b:95:7c:65:0a:be:e1:2e:64:a8:
14:80:a7:29:59:9e:c6:2e:b7:06:f8:54:68:7f:97:1c:73:46:
fb:8f:90:cd:20:37:e1:fe:1b:3e:f2:c2:91:1e:6c:4a:54:db:
dd:9a:42:23:e7:4c:40:76:9f:c5:f2:b0:f9:37:16:59:dd:93:
76:c8:09:bc:70:d4:78:9b:86:85:71:fc:c2:5a:b6:be:ad:f2:
e4:5c:1b:ea:34:d5:0f:1e:99:cf:e1:6e:a2:fe:42:2f:61:04:
4c:f0:3f:29:da:20:37:fb:01:9f:d3:87:9b:73:5e:0f:62:da:
3b:f3:44:bf:6f:a9:17:85:48:41:52:bb:70:34:20:b1:43:33:
cf:fc:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:44 2024 by rpki-client on console-ams.rpki-client.org