Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ch09_Wdaq91-KJqytY--QsFCmF0.roa
File: ch09_Wdaq91-KJqytY--QsFCmF0.roa (raw, json)
Hash identifier: oecavOP2Uhy3DxQk1fmX/wcgIPxAjio5YF6GPnbgXIc=
Subject key identifier: 72:1D:3D:FD:67:5A:AB:DD:7E:28:9A:B2:B5:8F:BE:42:C1:42:98:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DED064AEEE9BBD20A7B4896F1688E5829
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ch09_Wdaq91-KJqytY--QsFCmF0.roa
Signing time: Wed 28 Feb 2024 00:03:48 +0000
ROA not before: Wed 28 Feb 2024 00:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 193.58.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ed:06:4a:ee:e9:bb:d2:0a:7b:48:96:f1:68:8e:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 00:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=721d3dfd675aabdd7e289ab2b58fbe42c142985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:ff:31:92:8e:2b:2c:f6:1b:f7:57:74:ec:
8b:99:af:21:3a:66:4d:0e:97:cd:2f:b9:ef:15:00:
03:3a:bb:f5:b6:e9:92:1e:fd:fd:80:3e:2b:76:af:
e5:44:55:e5:31:0b:5a:e1:bf:0d:1a:07:f7:fb:df:
3c:f0:8a:eb:2a:65:f4:2b:d4:6b:72:d4:58:77:cd:
4d:67:9d:63:1d:b2:74:73:e7:d9:95:e2:80:aa:aa:
4e:1a:41:dd:4f:5b:83:d4:71:98:36:ee:b7:9b:ad:
67:18:2d:cb:c2:de:9e:ea:24:ce:35:d4:0c:b1:eb:
90:72:19:43:f5:c5:81:d0:de:da:2c:27:3d:f1:20:
72:9c:35:b6:78:50:d4:b5:2c:93:23:00:ef:23:35:
fe:80:f2:6b:38:fb:14:11:e5:5f:1f:40:c4:51:79:
fb:57:5f:95:a8:9f:37:48:b5:56:0b:2d:05:77:a4:
b2:95:1c:9c:d9:b4:05:3a:83:ec:83:2d:73:fc:77:
4d:2e:0f:f4:0c:f8:f2:a4:a5:8b:48:03:c2:37:fc:
ef:50:f8:a0:e9:33:fd:75:c3:51:85:10:8a:9f:0d:
a9:66:b3:0d:c5:2d:68:c2:3a:bb:71:66:37:6d:da:
a5:6f:6c:78:bf:fd:06:21:f2:50:d0:f6:23:6e:cb:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:3D:FD:67:5A:AB:DD:7E:28:9A:B2:B5:8F:BE:42:C1:42:98:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ch09_Wdaq91-KJqytY--QsFCmF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f8:dc:77:d8:bf:57:f2:da:bb:cf:5d:bf:78:a2:2e:77:2d:
07:5e:88:bf:0a:ea:0d:23:56:62:ee:f0:7a:ca:99:75:a7:56:
b0:fb:39:49:2e:57:d4:2e:df:81:8c:d3:f9:a0:3c:d7:d2:78:
fb:51:1b:d0:d9:e6:c5:74:5a:1f:72:63:3d:95:b7:da:b4:8b:
f2:1f:28:d1:d4:21:6f:4d:c3:d3:cf:83:1c:48:38:a6:81:b4:
b2:13:75:79:74:51:f2:76:26:1b:89:48:e9:82:e6:20:23:06:
8a:e1:ea:5e:b8:bd:2b:da:34:47:61:c8:63:a3:d9:eb:6d:d4:
33:75:f9:40:50:79:a5:1d:1d:17:d9:4a:2d:09:e5:cf:42:0e:
21:54:a6:dd:67:d5:7c:4c:34:e0:33:2c:59:12:7a:f8:bf:5a:
ac:ff:af:15:96:24:c7:e2:c5:7c:b4:2d:67:75:92:e6:c1:ed:
60:69:b2:f0:8e:74:69:b7:88:79:ff:c0:57:58:99:19:17:30:
61:d9:89:2b:93:30:33:1d:3c:d8:4e:2b:7d:3f:0c:2f:da:9b:
81:e8:72:4a:21:6b:32:90:5c:d2:48:46:63:62:b1:a6:c0:da:
65:1f:e0:bc:bc:32:2b:5a:65:3a:86:1e:4b:ea:80:d9:a9:93:
b2:f7:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:44:40 2024 by rpki-client on console-ams.rpki-client.org