Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2WoJPlwaoeKW65DIqRUq7PY_xk.roa
File: N2WoJPlwaoeKW65DIqRUq7PY_xk.roa (raw, json)
Hash identifier: Lbu/6ZbIXSJSpANYRV692HdruWtVz+32BYxV792zGDw=
Subject key identifier: 37:65:A8:24:F9:70:6A:87:8A:5B:AE:43:22:A4:54:AB:B3:D8:FF:19
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD1582856106BC4619CEB22E9C01F6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2WoJPlwaoeKW65DIqRUq7PY_xk.roa
Signing time: Tue 02 Jan 2024 06:29:41 +0000
ROA not before: Tue 02 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399979
IP address blocks: 45.139.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:15:82:85:61:06:bc:46:19:ce:b2:2e:9c:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3765a824f9706a878a5bae4322a454abb3d8ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:61:fd:d5:24:c5:b4:db:0e:8c:8c:c1:3e:
68:05:07:39:a5:c1:07:a0:af:d1:9a:cc:a4:8b:c0:
30:c3:ad:83:d2:ee:a9:92:7f:ac:e4:8c:3d:76:b4:
f5:1b:d4:d1:18:97:a4:20:87:8a:c8:00:7a:fb:54:
23:cd:39:da:c9:14:8f:de:5c:d5:21:d7:13:de:e1:
39:b7:d3:30:6d:38:5c:60:95:8d:09:ba:78:e2:5c:
5e:e0:c2:b4:f9:ce:42:b4:19:38:ca:44:8c:02:02:
e4:b5:1f:bb:a3:05:6a:ff:5e:4d:bc:b9:0e:dd:59:
ed:8a:33:eb:b4:d0:44:6f:42:4a:5e:66:48:27:d1:
03:fa:85:56:42:2e:44:e0:c0:45:0f:92:43:06:65:
60:0a:e0:79:f3:ce:c3:a6:23:e7:38:12:29:a5:f6:
95:a7:3d:49:b0:f4:47:76:2d:2a:c5:ac:57:1b:20:
76:b6:db:35:54:00:28:60:2c:c2:a7:57:1f:f0:57:
5a:88:cd:5d:36:21:4e:9b:06:a4:80:32:0f:bd:f4:
6c:43:73:35:34:dd:05:7b:5c:77:bc:f7:af:b1:69:
e4:97:88:c1:53:f0:91:a8:5c:b3:d9:96:ab:56:2b:
2a:7b:dc:36:3e:18:2e:67:66:91:90:8c:a5:e4:ac:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:A8:24:F9:70:6A:87:8A:5B:AE:43:22:A4:54:AB:B3:D8:FF:19
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N2WoJPlwaoeKW65DIqRUq7PY_xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2d:da:15:2f:5a:da:58:b3:30:f0:fe:54:04:a6:2e:e8:33:
8b:4b:82:95:42:d0:e3:be:88:59:09:64:1a:39:19:fb:30:ec:
ce:80:fa:0e:8a:c1:57:44:95:9d:dc:47:a1:5b:80:ee:62:f3:
89:e8:3e:e9:40:ba:49:3e:23:ed:6d:1d:5c:15:0a:91:e3:d9:
8b:53:2e:08:76:2c:1a:68:bd:a5:6d:44:d5:5c:0c:e5:6d:b8:
ec:f6:b1:06:9c:fa:a4:5d:72:99:36:26:d8:d1:02:8e:a1:16:
48:bd:23:f8:d3:4e:d1:ad:8c:bb:64:2b:cf:80:53:af:4c:3b:
d2:9d:2b:f4:c9:ae:03:15:12:0e:50:6e:a3:51:fb:28:c9:03:
bb:1e:67:3c:fb:f1:ab:78:fe:c9:48:d5:18:d3:2d:cd:24:10:
91:9d:04:06:56:01:6c:9d:5d:26:b5:4b:bb:04:de:b6:22:fb:
69:8a:f0:f2:da:36:0f:15:cc:ba:a6:b0:07:f4:10:84:e7:d4:
dd:a3:82:3f:8c:16:9f:9b:09:16:c5:38:62:97:d7:02:32:e9:
0a:12:f4:b7:32:f6:0c:a2:3f:b5:6f:d5:dc:ed:02:79:ce:14:
92:bf:f2:f6:d1:58:d1:fb:c1:fd:1a:c1:ca:fc:e6:73:19:d3:
56:a8:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org