Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4CbjTIZVMRkVpz0b9YbOEdqOY80.roa
File: 4CbjTIZVMRkVpz0b9YbOEdqOY80.roa (raw, json)
Hash identifier: Cm8b2qpyOcgQW4dB9b5uULpuCjQgyExbsL8VwNV1rhA=
Subject key identifier: E0:26:E3:4C:86:55:31:19:15:A7:3D:1B:F5:86:CE:11:DA:8E:63:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902BFF13955A2DFFFFC9A6D60AF5D37BF8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4CbjTIZVMRkVpz0b9YbOEdqOY80.roa
Signing time: Tue 18 Jun 2024 15:37:35 +0000
ROA not before: Tue 18 Jun 2024 15:37:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 87.121.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:ff:13:95:5a:2d:ff:ff:c9:a6:d6:0a:f5:d3:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 15:37:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e026e34c8655311915a73d1bf586ce11da8e63cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:1a:82:07:59:62:b7:29:9c:21:ab:2c:22:
5b:be:c2:f3:43:0b:27:31:21:93:2c:26:f3:d5:47:
e5:2a:6c:aa:9a:29:62:28:e0:f0:8d:2b:86:78:f0:
66:eb:9c:55:70:47:3c:ee:cb:d6:06:fe:c4:73:93:
7f:17:b2:09:45:1f:75:d6:b6:17:0d:b1:7e:0c:9c:
49:19:dd:6d:8a:70:72:0d:d5:3d:5b:04:b1:b0:a6:
9c:ae:df:c2:af:df:8d:5e:f8:9f:06:72:51:f8:27:
cd:8f:9d:83:dd:15:01:a5:58:4d:ce:26:89:20:49:
c3:0f:5f:8b:98:7c:c0:c9:46:3e:e0:3a:ee:b8:13:
c1:03:e2:c2:e9:f4:a1:d2:59:59:34:67:5a:76:53:
b6:ab:e7:a0:96:be:7d:88:29:10:dd:b1:58:f3:2e:
92:e9:ad:9d:42:71:68:f3:71:cd:33:75:95:2e:9d:
e5:b7:53:37:47:c0:8d:b2:12:e0:25:4b:ef:73:08:
32:24:bc:20:ba:67:f7:f1:7f:20:94:0e:ae:30:42:
44:0c:84:ed:8a:13:57:73:05:8c:d8:57:2a:c7:10:
8e:8a:4b:94:8e:5c:70:6f:db:64:8f:6b:1d:70:5f:
f1:16:15:16:92:4a:0f:63:e5:20:35:e3:32:14:22:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:E3:4C:86:55:31:19:15:A7:3D:1B:F5:86:CE:11:DA:8E:63:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4CbjTIZVMRkVpz0b9YbOEdqOY80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8b:4b:f1:42:67:c8:2b:19:d8:a1:5f:d0:1c:41:e3:e9:3e:
c8:60:32:15:b6:9a:89:39:ae:b0:01:d1:71:df:69:9a:8f:43:
89:ef:47:98:59:3b:e8:03:9e:65:d5:7b:af:c8:2b:dd:74:b9:
ab:86:28:0f:ec:70:b9:4f:5b:17:e8:1f:0d:46:52:ce:01:c5:
37:e4:fd:82:eb:73:37:04:25:88:d2:12:8f:6d:ea:54:3b:f8:
d8:d8:fb:98:d1:ca:a7:b4:90:99:e4:5d:df:28:1d:6a:59:4d:
09:fc:4b:04:16:2c:71:ea:62:7e:3c:5f:d2:be:26:6f:d0:5c:
96:44:1a:47:df:3f:a8:36:99:93:6c:a2:71:e7:b9:c3:cc:6f:
5c:2c:b0:4c:23:2d:cc:5d:94:c9:05:41:b9:90:41:66:11:b1:
17:fb:93:26:59:04:b4:71:b7:ab:6e:ce:a4:ab:18:a4:f4:7c:
b2:8f:e1:7f:d8:69:13:69:98:45:e8:7f:49:e7:3a:cd:68:46:
b6:34:dc:55:63:da:bd:cf:1f:7b:81:36:d9:ac:67:ef:e0:97:
18:eb:9e:5f:57:04:72:b1:84:db:ec:4a:39:bf:d1:2f:b6:58:
06:c7:37:fb:80:03:86:3c:ed:38:cb:ff:9a:2f:4f:22:86:17:
07:24:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:38:20 2024 by rpki-client on console-fra.rpki-client.org