Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AcmuM-b6H1ptYL5_HwFijBlC1k.roa
File: _AcmuM-b6H1ptYL5_HwFijBlC1k.roa (raw, json)
Hash identifier: nottyRGs7hdMRaOnGn6fehhYy8ArbNXjz/jMnFXgwKA=
Subject key identifier: FC:07:26:B8:CF:9B:E8:7D:69:B5:82:F9:FC:7C:05:8A:30:65:0B:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E564375D19756C03DF65B982E0FE51A8C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AcmuM-b6H1ptYL5_HwFijBlC1k.roa
Signing time: Tue 19 Mar 2024 10:30:45 +0000
ROA not before: Tue 19 Mar 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215343
IP address blocks: 37.139.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:43:75:d1:97:56:c0:3d:f6:5b:98:2e:0f:e5:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc0726b8cf9be87d69b582f9fc7c058a30650b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:0e:2c:44:f1:1c:a1:93:c4:14:b3:83:8a:
38:80:90:c1:0d:49:78:f9:84:3f:30:76:69:6f:7c:
c1:2f:e2:c1:96:70:fa:89:3f:87:c8:d5:8c:6a:ce:
91:32:ea:d7:0f:28:26:5b:11:ae:c9:3c:9a:14:e5:
16:c4:8f:ec:89:bf:81:34:a0:5a:79:17:76:e3:83:
cb:3e:8c:4c:67:94:b5:64:4f:19:72:87:20:87:5e:
0c:7c:a4:34:27:32:fd:ca:44:fc:7e:33:fb:60:79:
cf:10:18:1d:99:77:0e:2b:06:6c:78:34:82:af:bb:
c7:cc:2c:8c:00:dd:ee:3a:dd:f3:c6:56:fd:c1:b8:
92:93:f6:3c:93:fb:c1:6a:a8:71:a4:9f:c5:82:c2:
bf:e1:6a:08:7a:1a:31:c4:be:16:af:8c:42:d6:30:
2e:3a:ea:0f:95:96:4b:5f:50:4b:02:4d:c5:3d:ec:
56:18:c2:02:4a:5a:e8:9b:6a:5f:ec:30:6e:58:84:
ba:67:75:d7:79:e3:0e:a9:60:b2:d9:35:bd:dc:f5:
c6:c5:26:e1:41:a2:3b:b2:d8:fe:99:d5:b5:55:2d:
b1:07:f4:d6:00:f9:f7:fe:04:cb:46:02:77:01:2e:
42:9d:6a:e3:61:78:ea:9a:f2:46:6e:9d:34:ad:ab:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:07:26:B8:CF:9B:E8:7D:69:B5:82:F9:FC:7C:05:8A:30:65:0B:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_AcmuM-b6H1ptYL5_HwFijBlC1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c4:63:f0:38:17:69:73:99:9e:27:bb:f4:95:50:2b:c2:73:
a3:84:e1:ff:3c:18:1a:e8:29:0a:de:e6:56:e1:68:fb:a5:a4:
06:94:a3:0e:63:07:e5:08:0c:cb:4e:5a:17:86:de:dd:88:02:
22:23:bc:6b:7f:91:47:d6:28:02:25:f2:1d:a7:88:75:5c:19:
27:28:c5:19:88:81:7b:a4:70:69:7c:00:a2:d6:e3:d4:10:c1:
49:d3:fe:01:b5:db:90:e6:ed:f8:6f:8e:04:41:1e:28:49:3d:
b0:70:6b:ca:cd:29:bb:71:82:16:98:e1:ee:1b:ab:9b:ee:dc:
81:c6:24:c3:f1:6d:2e:66:28:f4:12:51:d3:20:27:42:a7:5d:
10:bd:17:41:d2:3f:a1:a6:04:2b:7c:5b:4a:b0:14:4c:fe:85:
d8:96:2c:42:1b:d0:8a:92:78:fc:62:9b:6f:9b:79:87:fe:e3:
94:5b:4d:e5:8b:d2:f8:46:5f:11:7f:79:1e:42:2d:ca:f7:6d:
60:c7:24:7e:5f:6b:ab:57:c0:b2:72:16:c7:94:8c:27:1b:08:
bb:56:6f:a9:95:ee:70:81:b3:d0:c8:3c:9c:5b:3d:d9:8c:a2:
4f:95:36:2a:f9:40:ac:90:2d:b1:cc:a8:d4:0f:62:4f:58:e7:
dd:67:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:19:04 2024 by rpki-client on console-fra.rpki-client.org