Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39UJU11RHkmARznFU4VynKJw7iQ.roa
File: 39UJU11RHkmARznFU4VynKJw7iQ.roa (raw, json)
Hash identifier: stL0MtLtjsKTIl4MbQPEimQMjo4j2qWxHwD/6T1KrhU=
Subject key identifier: DF:D5:09:53:5D:51:1E:49:80:47:39:C5:53:85:72:9C:A2:70:EE:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192E6DA58EAFB7BAF1E7DA83BEF17EC5AAB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39UJU11RHkmARznFU4VynKJw7iQ.roa
Signing time: Fri 01 Nov 2024 08:32:02 +0000
ROA not before: Fri 01 Nov 2024 08:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393942
IP address blocks: 45.12.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:da:58:ea:fb:7b:af:1e:7d:a8:3b:ef:17:ec:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 1 08:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfd509535d511e49804739c55385729ca270ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:48:85:b4:59:15:ee:f4:da:f3:39:cf:9f:
6d:38:89:1c:f5:ee:61:e9:94:27:ba:18:52:f1:35:
1b:83:17:bb:f9:aa:45:ff:d9:6b:e9:e3:90:6a:8b:
81:86:90:f4:e9:a9:41:2c:75:c7:a2:e6:53:45:c7:
e9:6f:d0:35:3f:3e:a7:05:50:b5:5c:01:84:fd:c7:
b8:d1:6e:ea:45:a4:09:5e:5b:b3:db:19:07:a9:43:
d3:eb:24:00:11:cf:24:f8:5e:ab:66:d3:22:0d:c3:
e6:0f:6c:32:99:de:ac:02:97:cc:e2:47:29:4e:3c:
e5:20:43:fd:23:fa:99:75:87:1d:d8:66:7f:8c:37:
b7:5c:33:4b:36:25:fe:cd:ac:1f:d8:49:9c:da:5a:
2d:bb:77:eb:45:3b:00:f4:a6:24:8d:fa:69:b8:2e:
5a:82:0a:8c:3c:0f:8d:71:17:33:63:90:41:f7:5b:
cf:1a:57:0b:f3:3b:08:16:1c:65:38:7f:9f:b3:a3:
84:a2:5a:fe:a9:16:1f:ba:da:7e:ec:a0:fc:6f:f2:
ea:11:c0:49:82:8d:b5:44:af:fa:d7:22:6f:91:ab:
34:cb:5a:2a:c3:9c:d2:96:1b:50:61:2f:3d:72:f0:
0f:76:d5:d1:5c:ca:87:11:ed:7b:dd:5d:d6:b2:fa:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:09:53:5D:51:1E:49:80:47:39:C5:53:85:72:9C:A2:70:EE:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/39UJU11RHkmARznFU4VynKJw7iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:df:44:77:36:77:8e:58:31:16:9b:d7:8c:7f:85:e2:02:81:
cd:6c:dc:0d:0e:f9:60:c2:42:13:a6:62:18:ff:f0:85:e2:01:
ef:2c:23:7d:6b:b9:5e:4f:e7:6f:24:30:b7:93:bf:c8:98:ab:
50:44:fe:6b:22:90:5e:c6:b1:92:02:f3:0e:c8:b9:a8:6c:c4:
61:e6:97:ce:d5:b1:9e:86:34:d9:7a:59:fc:68:71:17:53:62:
6c:e4:bf:55:d5:07:37:9f:1e:89:c8:a6:59:7e:b9:ef:9e:51:
47:ce:3a:9d:9b:74:1b:88:95:88:e7:cc:64:5a:9e:20:1b:c7:
a2:57:ec:5a:88:0b:8f:82:3c:0f:86:a1:52:f8:eb:1b:05:f9:
20:28:54:2c:42:5d:ae:0e:02:ec:f7:fb:9d:43:ec:0f:ad:1c:
d2:ce:e8:a2:6f:f0:69:da:de:d6:11:fb:1f:4b:7e:7d:0a:d3:
0f:f4:68:5b:f0:c2:cb:23:bb:02:8c:76:e4:c2:e9:72:1f:fe:
2f:88:3e:6c:1b:1c:67:80:ef:5b:57:44:65:9b:88:82:28:f2:
8e:a5:b7:4d:47:f9:c9:5e:12:04:eb:65:c2:7e:c2:e7:32:69:
97:14:72:13:c6:e1:e6:10:21:53:03:5f:b2:26:89:77:4b:13:
99:50:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:14 2024 by rpki-client on console-ams.rpki-client.org