Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/971N4apK_BIM6pboatA9zkUdEC4.roa
File: 971N4apK_BIM6pboatA9zkUdEC4.roa (raw, json)
Hash identifier: QBtkHHhXyNQGIckYjpwgakVLALOlna+oEOjiIA1Dh/k=
Subject key identifier: F7:BD:4D:E1:AA:4A:FC:12:0C:EA:96:E8:6A:D0:3D:CE:45:1D:10:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F61FDD870708EC0A4EA6A5B288D8D842C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/971N4apK_BIM6pboatA9zkUdEC4.roa
Signing time: Fri 10 May 2024 10:12:57 +0000
ROA not before: Fri 10 May 2024 10:12:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151612
IP address blocks: 87.120.89.0/24 maxlen: 24
94.156.239.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:fd:d8:70:70:8e:c0:a4:ea:6a:5b:28:8d:8d:84:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 10:12:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7bd4de1aa4afc120cea96e86ad03dce451d102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:7d:00:5c:e5:34:97:fa:a2:be:68:c2:9e:
ed:44:10:d8:89:0c:ce:ce:4a:15:f1:b7:3d:d1:d3:
02:e4:8e:92:c4:8b:0d:d8:45:0b:cc:64:c0:10:59:
82:0c:29:a8:62:1c:f7:16:01:d5:b1:8f:f7:fc:63:
22:71:22:52:ef:47:11:61:c3:de:48:b1:da:f9:b4:
31:e9:0b:c6:99:85:0b:25:1e:ea:c0:7b:89:45:3f:
d5:07:a6:f9:b3:88:f3:76:75:21:2f:a0:74:f7:58:
fb:57:4f:37:23:4d:48:33:4b:29:9e:a3:68:86:2c:
4c:b8:8c:13:11:02:31:89:5a:0b:bc:74:a5:a5:19:
75:25:64:92:5d:27:ce:ad:37:44:33:fd:3b:d5:64:
3d:a6:b6:39:18:db:60:3c:c4:79:84:5a:92:d9:b1:
39:6c:c1:cc:17:b4:fb:60:47:b1:3c:b8:aa:0e:ce:
b0:07:1e:37:fe:02:04:4f:02:85:30:3e:2b:d2:0d:
e4:7f:02:38:d0:19:6a:fd:9a:f3:af:d6:a7:68:f6:
91:d9:8e:95:b7:53:9a:ca:bd:34:bd:f5:fd:8b:6c:
70:8a:1a:45:10:22:02:a3:55:49:34:af:3d:bc:2d:
b5:c9:e2:af:ba:97:d8:fb:9d:c2:22:0f:b3:ee:32:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:4D:E1:AA:4A:FC:12:0C:EA:96:E8:6A:D0:3D:CE:45:1D:10:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/971N4apK_BIM6pboatA9zkUdEC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.89.0/24
94.156.239.0/24
193.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5c:55:ca:d8:af:62:65:a6:e0:d9:d4:89:69:4c:e5:ba:8c:
03:81:4e:00:8c:5a:b5:1c:35:6a:49:61:ab:ae:da:e9:d9:31:
59:de:ca:b7:0a:5d:9c:f0:a8:84:d5:aa:1b:56:4a:0e:e7:cf:
cd:5d:75:a8:26:a3:27:b2:59:73:1a:9f:ed:75:f5:14:ac:f3:
9b:22:98:c6:35:d3:02:c1:8c:8b:11:5a:97:2e:e5:ed:30:8c:
cf:f2:76:3b:70:78:93:96:61:aa:cd:87:bf:5a:8c:a3:6a:03:
6d:8d:a1:6d:76:54:06:07:f2:32:94:cc:1f:0a:9b:ca:0e:83:
eb:bf:62:0b:f9:89:aa:96:73:bc:32:32:44:69:7d:37:86:77:
06:29:53:3c:fb:3c:8f:11:ad:c7:8f:bf:6d:79:a4:41:91:c7:
48:45:8e:b7:3d:25:e0:70:f0:8e:1e:99:58:c8:ff:0a:1d:72:
9c:88:07:ba:93:79:8d:86:ac:b2:44:32:7f:20:fc:4e:93:04:
1b:9c:ce:61:c6:12:39:a1:dd:20:ec:02:1e:a6:39:00:0d:7c:
b8:b3:04:37:6f:aa:1b:4c:6f:5d:e0:10:d0:8b:f5:69:fc:b5:
d0:07:a4:61:00:52:ab:52:4a:80:7c:73:95:a7:8f:d6:5b:de:
f6:10:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:15 2024 by rpki-client on console-ams.rpki-client.org