Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c_D60RROSb8gzYxNdggfVyd_qQo.roa
File: c_D60RROSb8gzYxNdggfVyd_qQo.roa (raw, json)
Hash identifier: f1W6WVcDtAyZ+DFHRwW2I8DRsdMyP6acrPiBpimNlOM=
Subject key identifier: 73:F0:FA:D1:14:4E:49:BF:20:CD:8C:4D:76:08:1F:57:27:7F:A9:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ECFA1216A62504622A2D6DD7CF62896C2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c_D60RROSb8gzYxNdggfVyd_qQo.roa
Signing time: Fri 12 Apr 2024 00:07:07 +0000
ROA not before: Fri 12 Apr 2024 00:07:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.14.166.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cf:a1:21:6a:62:50:46:22:a2:d6:dd:7c:f6:28:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 12 00:07:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f0fad1144e49bf20cd8c4d76081f57277fa90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:ae:b8:da:e4:a0:a0:07:90:5b:3a:7f:3b:
e4:f6:4f:73:a6:5e:8c:a7:ff:62:11:df:60:c2:de:
df:6c:17:b7:6d:74:e3:63:87:97:f8:86:bc:cf:2a:
15:90:b3:4b:cb:cf:cf:ba:d3:5d:6b:53:9b:16:e9:
4a:98:12:31:25:35:92:be:a3:42:a9:13:b6:95:4c:
ed:0f:f9:ed:75:3c:1e:47:0e:0e:32:c3:c3:65:4b:
f4:52:d9:27:55:3a:45:55:52:e4:2c:ea:94:97:4d:
e6:d3:22:65:ec:25:b6:c7:ea:ab:b3:e8:91:de:2c:
8f:64:51:b0:15:32:13:03:01:c2:16:93:c2:9f:e6:
61:3b:bf:7c:f4:76:c6:6e:06:8b:91:d2:c4:98:fe:
fc:17:78:d3:d5:b7:4d:93:9a:c6:c9:5d:74:a5:ef:
b1:83:fb:65:33:80:36:55:62:3a:78:53:1a:cb:5c:
77:39:c0:88:d6:89:f8:2e:94:57:8d:f3:79:06:6c:
34:c6:82:64:bb:a2:a5:4e:43:5c:d8:ec:c1:37:22:
2d:8b:ef:56:f3:e8:bd:b3:fe:29:28:92:01:d3:42:
57:76:ed:b7:f3:a5:7f:e7:07:c6:c1:d4:5d:e9:79:
b5:79:60:41:af:3c:53:0f:0f:ee:e5:49:b2:b0:43:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:FA:D1:14:4E:49:BF:20:CD:8C:4D:76:08:1F:57:27:7F:A9:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c_D60RROSb8gzYxNdggfVyd_qQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cf:84:4c:20:9c:f8:6f:70:55:fa:67:80:59:75:49:9c:d3:
aa:bb:b3:18:9f:4c:4f:f1:79:b6:b7:4e:33:d4:6f:54:cf:9e:
16:6f:06:a3:25:5e:27:3a:05:87:e9:6d:4b:c2:13:e9:ba:23:
07:63:3f:7d:fb:8e:45:92:9a:29:f2:5e:ed:e4:6c:9e:97:7f:
3a:92:38:6b:64:98:2d:f5:64:d0:58:1d:3c:2d:30:24:ee:55:
5e:35:bc:b9:84:24:5d:35:d6:39:ea:59:a5:d8:d1:87:65:b0:
2d:8e:88:82:36:ec:51:c8:06:9f:d1:86:0a:49:04:08:3a:be:
40:05:26:d6:8e:19:a6:fa:81:54:49:d1:df:87:4a:a2:22:dc:
3b:1b:24:91:02:ef:6c:8f:c0:65:91:06:36:03:a5:55:23:17:
1a:c5:78:9e:df:a8:2c:8e:57:00:a4:9a:cb:dd:49:ab:a5:85:
7e:fc:84:2b:41:19:c5:8d:6b:1c:ec:7d:24:26:fb:96:b7:fb:
8f:85:c0:f4:7a:21:28:e7:3a:53:96:9b:79:5e:8d:03:7b:be:
e8:33:b1:c9:5f:12:5b:01:64:df:14:5b:07:55:6b:d4:5b:33:
52:ff:f5:88:da:0d:8f:e6:e4:db:25:d1:68:a4:eb:ae:9f:ba:
21:bd:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:57:05 2024 by rpki-client on console-fra.rpki-client.org