Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M9takTUPzAUrOZQ1UjVQnLYelGU.roa
File: M9takTUPzAUrOZQ1UjVQnLYelGU.roa (raw, json)
Hash identifier: s08AmhP65AkVn2bKMjmkf+y+l25SxOZ8DlnXxzBMroI=
Subject key identifier: 33:DB:5A:91:35:0F:CC:05:2B:39:94:35:52:35:50:9C:B6:1E:94:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019146770F53307E43530731D54F40BE25DC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M9takTUPzAUrOZQ1UjVQnLYelGU.roa
Signing time: Mon 12 Aug 2024 12:01:33 +0000
ROA not before: Mon 12 Aug 2024 12:01:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214668
IP address blocks: 45.8.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:77:0f:53:30:7e:43:53:07:31:d5:4f:40:be:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 12 12:01:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33db5a91350fcc052b3994355235509cb61e9465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:6d:02:8e:24:4e:5e:ad:92:22:3a:46:b1:
9e:6a:df:ac:73:3b:6f:78:3c:da:81:ff:89:2d:f0:
1e:59:58:90:94:ae:3a:ad:70:da:2d:14:fd:71:bc:
4e:02:93:14:2d:36:13:22:75:77:f0:28:b1:b6:8b:
d9:e5:e4:fd:bd:67:c9:04:32:31:27:3d:7e:b4:fb:
9b:04:00:60:c1:e2:9a:20:8f:0c:60:af:fa:85:cd:
a8:00:1d:bc:bb:69:5d:89:f8:6e:f7:3f:cf:4d:d2:
f5:0e:3d:7d:3f:97:5e:8f:1f:45:93:20:f8:8c:56:
a6:b0:24:eb:cf:3a:84:4e:14:a6:ea:49:be:f8:d7:
e8:8a:51:95:ac:3d:42:08:ae:d8:7f:0e:85:54:2a:
2a:9c:9a:09:fd:88:41:06:38:88:b9:ab:6d:4f:52:
be:2c:f1:05:8e:a0:10:b1:6d:a4:86:c8:e3:e7:ea:
b8:8c:12:55:71:d4:9c:94:8b:03:34:5b:7b:b6:f6:
da:c5:a0:6d:15:9f:de:c0:db:12:cd:13:1f:88:aa:
fd:75:2b:b3:9d:80:6c:98:f0:ba:3e:0f:76:24:ce:
78:dd:5e:eb:a4:47:41:28:2d:97:ac:e6:3b:6e:a2:
64:77:27:6d:bc:a3:b4:09:d8:ba:8d:6b:83:24:1a:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:5A:91:35:0F:CC:05:2B:39:94:35:52:35:50:9C:B6:1E:94:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M9takTUPzAUrOZQ1UjVQnLYelGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c3:6a:b7:31:48:c9:24:7a:48:73:b6:58:e9:dd:8f:d3:56:
b0:0f:e3:e4:cd:71:41:13:e0:52:53:37:5d:a4:c7:b3:f8:bb:
77:0d:7a:24:fd:5f:58:7e:7a:c9:90:16:9d:9e:4f:b3:2e:07:
97:2f:31:10:6f:47:9e:60:20:fc:bf:d7:03:24:56:51:bd:57:
e5:17:e2:8b:03:3d:cf:66:eb:3e:68:a9:49:46:79:6d:17:3f:
98:5a:d5:72:27:e1:a0:85:3e:b9:da:80:e4:ef:ed:c3:0a:a5:
14:d0:40:ed:eb:62:13:c9:cc:ff:d5:bb:ae:83:57:69:0c:44:
ea:bf:a6:25:da:66:e6:47:0e:ba:a0:da:ae:0c:ca:07:bb:1c:
47:fc:30:c8:3d:fe:55:90:61:a4:d9:08:38:ff:9d:5b:09:4b:
3a:9a:5d:6f:37:0b:7f:00:82:d7:33:14:fb:82:ed:fb:ae:49:
0e:11:bd:21:9d:1d:b9:46:1b:2e:4d:1b:d7:29:2d:e0:f7:70:
17:d6:fc:a3:09:44:cc:34:3b:35:ae:6c:2e:13:ff:ec:80:a8:
63:52:6d:4b:4f:ae:67:45:14:c3:f7:cd:6a:09:d0:b9:38:95:
ba:d2:b7:33:b4:1d:b4:bf:0a:8b:24:00:72:9d:ea:f4:55:1e:
32:0e:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:33:18 2024 by rpki-client on console-fra.rpki-client.org