Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMpU9n3Y-s3cusewMIviUnLyO3A.roa
File: GMpU9n3Y-s3cusewMIviUnLyO3A.roa (raw, json)
Hash identifier: 6sQb3/DzqKY+fpfaW0vAnDx28A5mlmt6r6TlESZqmow=
Subject key identifier: 18:CA:54:F6:7D:D8:FA:CD:DC:BA:C7:B0:30:8B:E2:52:72:F2:3B:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E755939322BCE6DB082AB7CF86E44916C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMpU9n3Y-s3cusewMIviUnLyO3A.roa
Signing time: Mon 25 Mar 2024 11:22:45 +0000
ROA not before: Mon 25 Mar 2024 11:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 45.8.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:59:39:32:2b:ce:6d:b0:82:ab:7c:f8:6e:44:91:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 11:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ca54f67dd8facddcbac7b0308be25272f23b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:4d:8c:8a:5b:08:d5:b9:ef:05:5f:de:8b:
28:9a:5c:78:89:ca:d6:cc:e3:1c:04:7a:36:3f:b7:
66:67:05:56:a1:f3:d9:a9:41:c1:dc:63:ee:75:1d:
8a:d3:33:df:49:5e:5d:35:32:fe:73:08:69:a5:a6:
4b:58:6c:42:9f:c8:7e:84:50:11:d3:2d:50:86:e3:
05:0d:44:8b:00:4f:74:36:aa:68:92:54:ef:25:e1:
fc:aa:6f:d0:8b:30:43:47:a2:e0:63:c4:48:b8:7b:
c4:14:3d:49:c3:40:54:59:f4:c7:07:32:69:ea:06:
7e:a0:fb:db:6a:f0:2f:f6:78:01:a1:56:b1:4e:3e:
30:2e:20:29:3a:31:48:58:04:66:58:40:94:2e:e6:
43:27:81:18:13:ef:5a:72:a3:66:30:58:8f:9e:ff:
fd:c7:e2:e4:8e:9d:02:b2:e8:f4:2d:94:1f:c2:51:
0b:c4:a9:05:70:f4:3f:34:04:2c:8b:66:23:93:f1:
55:8b:25:f7:67:e9:c4:1b:a1:5b:94:8f:a6:2a:26:
1a:eb:e8:42:2a:25:64:6a:56:84:2d:ff:1d:f4:89:
67:bb:ad:64:67:19:f2:82:14:74:7c:56:29:65:43:
87:ce:32:7b:29:50:d8:c1:bf:16:c1:16:13:53:92:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CA:54:F6:7D:D8:FA:CD:DC:BA:C7:B0:30:8B:E2:52:72:F2:3B:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GMpU9n3Y-s3cusewMIviUnLyO3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2b:c4:5e:c1:6d:45:1c:30:04:1d:52:f6:9d:4c:65:09:d1:
be:74:ef:52:1c:7a:78:0f:f9:ee:b6:fb:45:ab:8a:64:1a:10:
d2:ac:14:88:db:f6:35:2a:b9:58:83:62:48:f3:71:e3:44:be:
2b:0c:96:17:40:83:3d:eb:de:e1:ec:9d:32:68:af:07:3f:02:
f4:00:56:e0:54:20:ab:14:72:65:87:68:73:92:43:7d:93:2c:
c3:35:48:ab:6d:b1:b6:bd:40:94:3f:d1:d5:5f:f4:46:09:30:
34:75:6b:f8:80:17:9b:33:37:69:fd:ac:1b:f9:3b:c1:af:e3:
ed:7d:6d:5e:ea:8e:9e:30:4c:a2:c5:5f:8a:8e:a4:f9:78:8a:
05:f9:26:59:20:e6:ba:4e:48:dc:72:18:45:c1:00:a2:db:c4:
f7:61:4f:80:29:43:2a:92:f1:32:6e:1a:1f:e1:6c:eb:1d:d0:
64:62:4b:0d:92:50:a3:f1:98:79:58:7b:5a:e7:87:e9:c6:21:
f9:d8:e5:84:f0:3c:50:45:16:7d:de:14:10:07:e1:f6:10:7c:
e7:29:40:4a:aa:a7:d2:73:62:14:10:46:90:e8:1e:b3:85:72:
3a:0c:0e:01:05:fb:23:e9:a4:c2:f1:9d:30:c2:5f:0d:07:15:
cd:6f:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:05 2024 by rpki-client on console-ams.rpki-client.org