Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N0XdxmfY0I7ivFpH9f8FkM8iBD8.roa
File: N0XdxmfY0I7ivFpH9f8FkM8iBD8.roa (raw, json)
Hash identifier: wYA2l4LHD/qV4oXt5+bRwSe7fzSZ75UlcUZdgz4n90k=
Subject key identifier: 37:45:DD:C6:67:D8:D0:8E:E2:BC:5A:47:F5:FF:05:90:CF:22:04:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019200CB30C35F4A357A8C08D5FC2721C4D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N0XdxmfY0I7ivFpH9f8FkM8iBD8.roa
Signing time: Tue 17 Sep 2024 16:22:49 +0000
ROA not before: Tue 17 Sep 2024 16:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:cb:30:c3:5f:4a:35:7a:8c:08:d5:fc:27:21:c4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 16:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3745ddc667d8d08ee2bc5a47f5ff0590cf22043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:90:b4:e5:43:74:6c:02:7a:fc:60:50:dc:
27:17:f5:78:cd:59:e9:3b:f6:c7:5d:dc:7b:79:1d:
ad:c7:c9:16:5e:4f:8c:d2:87:cb:79:6d:1e:e7:ab:
87:2a:90:a3:e7:f5:36:59:95:af:b0:8c:29:22:c0:
1f:71:cb:c6:2c:ad:6a:e5:5e:e9:56:ec:bb:13:c4:
16:c4:02:eb:7d:c1:4b:f6:d6:68:5f:d2:d5:93:71:
72:35:25:8f:f6:6c:47:4c:7f:ae:6d:46:b0:40:28:
52:6e:63:74:db:eb:1e:69:09:96:65:cc:c0:f8:b3:
8d:5d:04:12:f7:91:7e:95:2b:b0:f7:0f:a9:50:96:
08:cc:52:1b:a8:fe:a2:80:48:ef:fd:5d:60:cf:8a:
d9:8a:25:94:5c:e9:24:9a:1c:bb:43:c2:ce:11:13:
c5:30:f6:d2:64:fe:9f:56:44:49:ba:19:e8:ca:2b:
cf:46:fc:96:e3:d4:bc:78:13:a5:48:55:6b:22:a9:
c5:b8:d3:7a:e9:18:47:fc:a7:28:5c:f0:bd:6d:64:
40:dc:ca:6d:81:3b:0f:ca:b3:05:a1:3f:24:a7:46:
16:2c:b5:5d:52:e5:28:6a:7f:6f:e1:db:c2:0c:8f:
6b:43:7c:d7:3a:4f:09:12:17:93:c7:72:51:62:be:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:45:DD:C6:67:D8:D0:8E:E2:BC:5A:47:F5:FF:05:90:CF:22:04:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N0XdxmfY0I7ivFpH9f8FkM8iBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:58:ef:24:fa:bf:91:73:7f:7f:aa:29:90:e2:7c:be:af:c6:
0b:a1:f1:35:a9:f5:9d:09:44:f8:40:17:96:44:73:bf:53:f2:
88:d5:a8:12:e4:a3:85:7e:75:22:2b:d4:1d:0e:79:03:0b:a9:
6c:c8:7a:95:fc:dc:c0:39:09:95:65:e2:33:e4:ee:6b:5e:0c:
d5:b5:d6:93:5c:c9:bc:d2:f8:28:96:f3:52:0a:29:85:a2:31:
d5:51:60:09:b4:bb:e3:7d:84:86:5b:90:d1:c2:8c:dd:b8:a6:
71:5a:18:eb:ab:f1:3b:a6:f2:b3:cb:a9:a7:e5:c4:3b:b5:06:
01:b0:5d:91:2a:67:da:9b:89:c3:8a:0d:f8:f9:05:6b:35:8b:
9f:ad:fe:29:54:8f:84:d7:ac:62:7d:dc:64:d9:b2:a6:79:5a:
70:15:8f:c6:af:ea:13:9a:3e:c4:e6:ef:c2:62:2d:e8:48:75:
2f:4b:68:81:f4:d7:da:f9:1a:9d:03:f3:a1:fb:5b:b3:40:a6:
a4:f5:fb:8f:f5:ae:b9:11:53:d1:e8:5f:b1:a0:9d:ca:54:a8:
af:e5:1d:6e:42:e7:30:ae:7f:a6:34:b6:4d:3f:4b:71:25:97:
0a:ec:e2:a8:7a:49:09:b6:5e:1b:82:e3:fc:cf:e8:29:75:88:
a7:f1:82:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIAyzDDX0o1eowI1fwnIcTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTE3MTYyMjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQ1ZGRjNjY3ZDhkMDhlZTJiYzVhNDdmNWZmMDU5MGNmMjIwNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocKQtOVDdGwCevxgUNwnF/V4zVnp
O/bHXdx7eR2tx8kWXk+M0ofLeW0e56uHKpCj5/U2WZWvsIwpIsAfccvGLK1q5V7p
Vuy7E8QWxALrfcFL9tZoX9LVk3FyNSWP9mxHTH+ubUawQChSbmN02+seaQmWZczA
+LONXQQS95F+lSuw9w+pUJYIzFIbqP6igEjv/V1gz4rZiiWUXOkkmhy7Q8LOERPF
MPbSZP6fVkRJuhnoyivPRvyW49S8eBOlSFVrIqnFuNN66RhH/KcoXPC9bWRA3Mpt
gTsPyrMFoT8kp0YWLLVdUuUoan9v4dvCDI9rQ3zXOk8JEheTx3JRYr69LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdF3cZn2NCO4rxaR/X/BZDPIgQ/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTjBYZHhtZlkwSTdpdkZwSDlmOEZrTThpQkQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhaMA0G
CSqGSIb3DQEBCwUAA4IBAQANWO8k+r+Rc39/qimQ4ny+r8YLofE1qfWdCUT4QBeW
RHO/U/KI1agS5KOFfnUiK9QdDnkDC6lsyHqV/NzAOQmVZeIz5O5rXgzVtdaTXMm8
0vgolvNSCimFojHVUWAJtLvjfYSGW5DRwozduKZxWhjrq/E7pvKzy6mn5cQ7tQYB
sF2RKmfam4nDig34+QVrNYufrf4pVI+E16xifdxk2bKmeVpwFY/Gr+oTmj7E5u/C
Yi3oSHUvS2iB9Nfa+RqdA/Oh+1uzQKak9fuP9a65EVPR6F+xoJ3KVKiv5R1uQucw
rn+mNLZNP0txJZcK7OKoekkJtl4bguP8z+gpdYin8YJi
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:04 2024 by rpki-client on console-fra.rpki-client.org