Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8x376hqw1KMfTlfJ--SPj85HRqw.roa
File: 8x376hqw1KMfTlfJ--SPj85HRqw.roa (raw, json)
Hash identifier: o5Gtgnn3t6+tfU+zSuwK6O6BkSIAgHyt50ZF/Q+4hO4=
Subject key identifier: F3:1D:FB:EA:1A:B0:D4:A3:1F:4E:57:C9:FB:E4:8F:8F:CE:47:46:AC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193297BAB55C82E90764437C740674372AC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8x376hqw1KMfTlfJ--SPj85HRqw.roa
Signing time: Thu 14 Nov 2024 07:03:10 +0000
ROA not before: Thu 14 Nov 2024 07:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214280
IP address blocks: 45.149.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:7b:ab:55:c8:2e:90:76:44:37:c7:40:67:43:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 07:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f31dfbea1ab0d4a31f4e57c9fbe48f8fce4746ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:f8:68:f5:c0:96:09:84:c7:7d:52:9b:61:
c4:57:91:5e:04:cd:41:75:86:a8:5b:17:b4:44:f8:
be:c3:eb:00:91:7e:19:a1:82:3c:2d:aa:87:01:69:
fb:17:f5:35:04:e7:ff:21:9f:bf:06:ef:87:3d:d9:
ec:da:96:65:b1:98:ca:c5:b2:0c:da:c6:24:ee:52:
e5:89:17:f5:89:3a:6e:fb:85:1a:72:c8:d3:e0:9b:
da:05:19:69:87:12:83:e7:b5:5c:98:1a:63:c3:43:
f0:d7:b7:be:c8:46:e2:6b:3a:f0:f2:3f:23:db:5e:
5a:ca:24:29:51:df:35:d2:65:dc:e3:99:7c:18:5f:
dd:a3:50:23:d9:05:2e:cf:04:a9:82:57:6b:7b:9b:
13:11:68:1d:19:74:16:8f:62:59:6c:2d:25:d4:0b:
9a:59:ed:54:37:29:34:d8:4d:92:cd:8d:08:7f:4f:
43:fb:18:33:93:f6:b5:4d:d1:06:f3:d6:f1:df:72:
93:ce:5a:a4:69:a0:11:e4:d7:e5:09:ff:1f:4b:0d:
19:a5:f0:86:44:ef:d6:69:43:f6:c7:7d:f4:7e:87:
23:ed:6a:a1:28:09:1f:2f:70:0c:e1:25:f2:0f:a6:
52:fe:61:33:f9:2e:88:55:e4:2a:5b:72:7f:db:a8:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:FB:EA:1A:B0:D4:A3:1F:4E:57:C9:FB:E4:8F:8F:CE:47:46:AC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8x376hqw1KMfTlfJ--SPj85HRqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c8:20:22:d2:1f:5d:1d:a3:09:ee:99:66:2d:fc:d5:1f:f4:
b3:84:d5:06:bd:16:19:53:4f:60:fc:bc:2e:7a:9a:34:aa:ab:
ec:fe:bc:36:a9:a0:26:17:98:7b:db:96:e1:24:c8:e2:60:52:
2d:ac:7c:cd:e4:95:75:04:0b:e9:1c:1d:d1:dd:43:4b:a0:80:
2e:57:18:5e:46:f6:0c:98:ac:bd:ca:c0:7a:1d:06:d6:b0:db:
89:7a:56:70:7d:f4:7f:78:61:d5:c9:dc:81:50:1c:2d:22:c9:
64:00:12:9f:2d:20:9b:30:ab:73:b8:bf:ba:27:ca:f3:f0:90:
af:cb:9f:ad:e5:7b:d5:49:51:2b:e1:f4:e7:18:b7:f9:93:e5:
9a:d9:c3:56:25:f3:aa:6a:4e:27:96:c3:bf:a7:0a:eb:e3:f8:
7b:12:51:b3:e7:6e:36:f3:3c:92:a8:1b:fa:9b:19:25:f4:8f:
c3:cb:15:b2:0b:11:ef:62:e2:e5:b5:47:05:f0:7b:53:6a:30:
6d:cf:dc:90:57:85:77:a3:fa:c0:aa:61:31:90:43:de:1c:11:
8b:63:b7:0c:e0:d5:c5:c6:72:df:d2:21:e9:c6:9e:ec:9f:44:
b8:4d:64:d4:1a:37:26:67:0e:d5:5a:45:0a:06:8d:e1:d1:c6:
71:19:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:21:13 2024 by rpki-client on console-ams.rpki-client.org