Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S0PmW3g3pUV6sA10z-MLMvLtcXU.roa
File: S0PmW3g3pUV6sA10z-MLMvLtcXU.roa (raw, json)
Hash identifier: VPHR5gCVgUhA4jXdR9Lz824SHeHnUg0a5jCRJ5PI6SI=
Subject key identifier: 4B:43:E6:5B:78:37:A5:45:7A:B0:0D:74:CF:E3:0B:32:F2:ED:71:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019118AD21225460CBFD913E94873D6CA469
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S0PmW3g3pUV6sA10z-MLMvLtcXU.roa
Signing time: Sat 03 Aug 2024 14:38:05 +0000
ROA not before: Sat 03 Aug 2024 14:38:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49600
IP address blocks: 193.222.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:ad:21:22:54:60:cb:fd:91:3e:94:87:3d:6c:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 14:38:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b43e65b7837a5457ab00d74cfe30b32f2ed7175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:b4:a7:5f:13:ee:21:7a:27:58:8e:0c:db:
1b:79:cc:54:55:2c:60:c4:79:96:01:98:9a:28:4f:
ec:1e:b6:78:71:02:be:ec:23:02:5e:ef:40:4d:2f:
25:ed:bc:85:71:c7:31:e0:c4:ce:28:77:34:71:b0:
61:ab:46:ef:46:96:8d:da:e9:fc:c3:b0:63:7a:bf:
d7:54:46:93:58:1c:b9:1b:a8:ca:7c:bc:e5:bd:89:
c1:d9:78:f5:e9:1d:3c:0b:fa:47:82:ef:b5:7f:9e:
11:20:cb:a8:e5:a2:c5:da:d4:ab:c2:ef:99:fb:49:
37:2b:38:ae:eb:35:84:61:e4:56:0c:37:7d:ae:53:
c7:ea:ca:d4:63:c6:70:d7:8e:f0:90:cb:61:83:f7:
73:57:cf:c2:c0:bf:11:00:98:5f:0d:30:41:a0:cd:
30:15:9b:0a:51:f3:da:b7:b2:53:f6:f6:6a:0a:d7:
22:cc:0a:45:6e:1b:13:ec:7f:52:ed:3f:51:ec:bc:
bd:e4:36:a7:cb:d1:6e:ac:53:3e:66:3f:64:ea:c1:
84:59:02:ff:8d:d7:6f:d9:42:36:e5:ea:c8:18:bf:
aa:25:26:e2:67:90:9b:ca:3c:69:2a:ca:6d:9e:d2:
64:14:0f:78:72:07:d6:61:c4:45:92:af:c0:62:82:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:E6:5B:78:37:A5:45:7A:B0:0D:74:CF:E3:0B:32:F2:ED:71:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S0PmW3g3pUV6sA10z-MLMvLtcXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.97.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3a:b9:68:ad:b1:d9:10:c9:36:07:6f:4b:f2:b3:36:42:9e:
bb:7e:5e:75:78:90:5f:f3:32:ec:df:e7:c0:35:c0:00:41:b6:
0c:d9:9c:e8:22:81:4e:7d:f2:dc:6a:9a:53:59:13:af:10:d7:
0b:ab:17:c0:db:08:0b:cf:f7:a3:e0:9b:16:0f:8b:9d:e8:6d:
f3:d1:13:dc:5c:fc:64:90:1b:a0:1b:b5:8c:23:1d:a2:6a:ea:
72:27:ad:13:30:76:3f:c3:c0:27:be:35:94:85:a9:a0:2b:48:
29:e1:82:09:51:65:af:da:ee:f5:8d:a4:16:9a:c1:9c:f0:c9:
84:83:74:3d:a1:f6:0a:07:b0:41:42:9e:07:b8:0e:15:90:7c:
8f:ee:89:f5:30:53:79:e1:0a:6a:06:ea:4e:1c:af:de:cf:21:
08:53:5f:7c:a5:e2:64:26:38:4a:c6:1f:ff:5f:fd:8f:4c:31:
41:25:41:57:ab:8b:49:f7:19:53:d0:a7:eb:db:24:73:98:be:
1e:2b:13:7a:a7:fa:fb:3e:99:17:c4:10:6a:c9:ca:e7:6f:6b:
d7:d4:60:ed:6d:6e:0b:23:dc:ec:46:83:69:bc:64:1e:e4:31:
40:c5:ac:ca:dd:a9:62:0e:28:4a:ac:c7:a5:a7:52:e4:be:74:
33:1e:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:10 2024 by rpki-client on console-fra.rpki-client.org