Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWwSJIt14tMRQUv2lqy1eHB8sMA.roa
File: NWwSJIt14tMRQUv2lqy1eHB8sMA.roa (raw, json)
Hash identifier: ZwHH3TskSsGHEM53ezrVYrpoKBH3zwNgYpMDwbIbKxw=
Subject key identifier: 35:6C:12:24:8B:75:E2:D3:11:41:4B:F6:96:AC:B5:78:70:7C:B0:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FBA323401296A338ED563097D86A63575
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWwSJIt14tMRQUv2lqy1eHB8sMA.roa
Signing time: Mon 27 May 2024 13:16:43 +0000
ROA not before: Mon 27 May 2024 13:16:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214820
IP address blocks: 87.121.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:32:34:01:29:6a:33:8e:d5:63:09:7d:86:a6:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 27 13:16:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356c12248b75e2d311414bf696acb578707cb0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:f2:84:bd:20:14:d4:8e:c9:77:a2:9e:cd:
82:c7:70:16:df:2e:ee:93:28:3d:2a:4c:b4:77:80:
98:c9:ca:48:de:df:8c:39:6a:40:b0:14:e9:9f:c9:
b4:e3:67:00:b6:42:79:32:0d:d2:3d:bb:1a:05:4a:
da:b8:d3:41:65:59:d8:4e:b6:1d:81:0c:81:66:1a:
44:5b:5c:1f:57:81:81:75:d5:18:c9:2f:07:b3:b9:
84:3c:51:2b:3a:e5:f0:f1:95:09:7f:4f:99:42:fb:
70:5b:99:89:39:2a:e7:9b:ed:7e:ed:13:95:41:73:
a5:4a:74:7c:0a:47:2c:df:48:0e:0e:db:7e:15:87:
02:ac:3a:b2:2c:9a:b0:87:18:13:42:a4:af:f9:46:
d4:1d:40:e8:0b:50:5a:39:86:b1:b6:1b:64:53:d5:
8c:60:a9:34:b2:b2:4d:ff:77:17:c4:ad:2f:a2:c3:
ff:40:6b:15:69:52:5f:78:5a:ac:b2:37:b3:b7:01:
fb:f5:0e:6c:33:b4:86:56:e6:21:54:ea:f3:66:60:
e3:b8:ac:4c:c6:43:c7:6a:ae:b8:21:f1:29:a4:20:
3d:71:70:bb:ed:80:89:35:04:a2:92:6c:1e:fa:21:
12:02:0f:54:66:6b:9e:4c:c7:67:ac:83:2f:4d:6f:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:12:24:8B:75:E2:D3:11:41:4B:F6:96:AC:B5:78:70:7C:B0:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NWwSJIt14tMRQUv2lqy1eHB8sMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.105.0/24
Signature Algorithm: sha256WithRSAEncryption
72:53:41:39:02:fb:42:da:e4:ed:7f:85:02:8d:6b:83:87:47:
7a:e5:7a:ee:4b:32:fc:71:0e:c1:28:8e:3c:3c:9d:09:ba:33:
ec:7b:7f:a9:b4:df:c2:c3:bd:14:b8:4b:b6:b1:d5:4d:2f:db:
8c:50:df:c2:32:38:9b:e2:bf:ca:57:68:b2:4a:3b:a2:03:b2:
56:68:6c:b7:ed:54:3d:35:31:db:8a:3c:b8:15:42:63:7a:86:
02:7b:1e:d5:ec:e9:f5:8a:29:1c:14:37:9e:90:bd:9e:e8:36:
d8:c3:fb:fa:71:f5:8b:6d:56:f2:78:8d:bf:50:81:c4:45:84:
51:d7:c1:02:82:4c:3a:e6:7b:56:b0:50:e9:f6:f3:74:c7:c2:
aa:e5:1d:44:99:57:e4:77:70:19:e3:74:7b:fd:ab:9c:05:14:
c3:3f:02:4c:59:a5:1f:b6:db:ba:32:a7:01:a2:b8:41:15:ee:
31:5c:0b:3a:9c:a1:56:79:cf:7d:5d:49:9f:e2:a9:da:ac:0b:
18:81:79:7b:de:65:05:c0:9d:6c:a2:55:16:50:3e:54:e3:c9:
1f:fe:63:e6:b2:bb:7f:26:e6:cf:30:10:01:85:db:c9:16:ba:
e5:13:ed:f1:dc:13:5d:18:6d:87:a6:f2:0e:82:83:8e:f5:0d:
c2:a3:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:21:14 2024 by rpki-client on console-ams.rpki-client.org