Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AyY7jKdqraY7xHLjkAPCFYC-_uY.roa
File: AyY7jKdqraY7xHLjkAPCFYC-_uY.roa (raw, json)
Hash identifier: xNaG5GyJv/z/vXJQkff/CtGLGxLu/0Ro6S3Y0ctGmU0=
Subject key identifier: 03:26:3B:8C:A7:6A:AD:A6:3B:C4:72:E3:90:03:C2:15:80:BE:FE:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD001B51E7CEEE1B8E35BC59525C3A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AyY7jKdqraY7xHLjkAPCFYC-_uY.roa
Signing time: Tue 02 Jan 2024 06:29:35 +0000
ROA not before: Tue 02 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201200
IP address blocks: 87.120.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:00:1b:51:e7:ce:ee:1b:8e:35:bc:59:52:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03263b8ca76aada63bc472e39003c21580befee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:3a:12:a5:75:6b:10:2e:c2:89:3b:8a:ab:
59:b3:eb:29:7b:09:52:45:be:09:51:3a:40:c0:ba:
ef:95:80:b9:d4:f6:e4:07:7e:b2:2e:05:f1:81:55:
52:6f:18:c4:65:2d:23:7a:e6:cc:e1:4e:a8:bd:cd:
93:db:73:55:66:e4:dd:7d:ff:0d:2f:bd:41:e8:50:
d6:f8:33:d1:17:0e:d6:44:b5:62:f8:81:40:c8:d2:
b9:78:2d:5d:89:1c:f0:2c:be:55:84:4d:ef:50:2c:
38:0f:97:04:5b:0b:2c:a1:bc:72:fd:a0:a8:26:b0:
83:72:69:cf:1c:37:80:16:f9:0f:28:e2:82:1c:61:
41:b8:2a:a1:93:42:7b:eb:88:95:93:b3:fb:29:78:
5e:a6:68:37:a0:5f:17:38:94:da:8d:b6:04:f8:76:
4d:3c:b9:3c:8b:5c:03:2c:1f:0b:4f:26:fa:99:8e:
0e:e3:b1:80:6c:20:63:0e:23:44:61:47:d6:e2:28:
47:96:3a:70:fb:71:a9:6b:39:c3:2c:c2:11:f5:d8:
02:a4:4b:39:a8:6f:8c:bb:b2:95:5a:07:6d:27:61:
48:dd:b2:65:2d:7a:04:5b:09:84:6d:da:6d:ee:b2:
e0:e0:b8:c6:65:e7:56:e5:37:b9:b7:d7:3d:a5:3d:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:3B:8C:A7:6A:AD:A6:3B:C4:72:E3:90:03:C2:15:80:BE:FE:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AyY7jKdqraY7xHLjkAPCFYC-_uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.40.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a0:a6:9d:12:2f:8c:19:69:ce:c4:f4:a0:45:7d:eb:33:27:
e9:25:7c:1f:f6:f3:43:72:9b:b7:09:51:69:de:97:85:f3:62:
5b:d2:69:4a:ee:9d:27:fd:c3:5a:87:19:f1:73:dd:06:a5:01:
7a:53:5d:8d:69:00:ca:5d:28:69:d1:e3:62:83:93:da:cc:8e:
98:1e:47:41:48:f7:10:48:20:86:62:34:a2:0f:51:73:c1:54:
0a:ba:9f:33:da:97:6f:3b:cd:ef:9a:7a:9b:84:93:f6:b0:4e:
bc:95:2f:c8:b4:89:87:59:35:d9:87:fe:c5:59:09:35:6e:45:
b0:b6:dc:cf:8e:af:9f:f8:fb:5b:6e:7b:f8:e3:1c:7f:db:3e:
37:d3:eb:c7:60:dc:6b:da:a4:30:e0:d9:f7:66:e4:2c:6e:8d:
cb:4c:49:f7:e5:2a:ff:ab:72:2e:9c:6c:02:5f:e1:ca:b8:b8:
b1:53:dd:00:46:02:be:9b:da:ca:f8:27:d5:10:f9:c5:32:e6:
86:b8:fe:2c:ce:12:21:7d:0b:a5:35:bd:c8:e2:7c:a2:0d:2e:
12:4d:d4:4f:de:3c:34:77:37:de:e0:66:07:8b:16:5d:fe:11:
9f:64:7c:d9:8c:5d:0e:6f:6d:3d:62:f0:ea:6d:75:00:2b:87:
65:b0:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:19:02 2024 by rpki-client on console-fra.rpki-client.org