Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxBb3HV5dzfgMCzqEHZTT_LjlTI.roa
File: cxBb3HV5dzfgMCzqEHZTT_LjlTI.roa (raw, json)
Hash identifier: AU6h8mNpdiiCPXHjfdlFUDFBLxv3rrv1S4Qd+puNdbo=
Subject key identifier: 73:10:5B:DC:75:79:77:37:E0:30:2C:EA:10:76:53:4F:F2:E3:95:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF55E5123351BFE77DE5214BFDFF0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxBb3HV5dzfgMCzqEHZTT_LjlTI.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60859
IP address blocks: 94.156.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 06:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f5:5e:51:23:35:1b:fe:77:de:52:14:bf:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73105bdc75797737e0302cea1076534ff2e39532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:37:aa:08:92:1d:a7:71:70:af:06:01:b7:
c8:b4:3c:14:41:a2:0a:de:ef:04:0e:06:e5:07:3e:
48:d6:96:9d:de:71:04:25:aa:b2:5f:d7:5b:1c:fa:
77:c9:aa:b7:76:02:c9:f5:07:48:2e:08:3b:15:22:
5e:7a:9d:14:99:0b:a0:ee:47:27:ac:81:81:c4:ac:
4a:80:af:a5:17:11:b5:58:03:b2:77:55:5d:40:1b:
f9:67:a6:d8:b5:61:3d:c1:4e:70:43:69:af:4b:cc:
8f:b1:07:23:af:5d:c8:9b:d3:fe:46:0b:e9:8c:90:
0f:12:86:f3:0e:88:ab:f9:9f:79:41:87:60:f5:0e:
a2:65:4d:3e:5e:8d:e8:4f:f5:5f:4a:5b:2b:83:6b:
40:f0:4f:c1:d5:55:0d:cd:ee:0e:b3:5d:bd:99:0f:
ee:6e:e8:ef:b1:c6:4d:fd:e7:60:9d:d1:3a:af:cb:
a9:4c:41:d0:38:e0:90:b4:33:31:f3:78:f5:c6:37:
4e:96:24:cd:28:5b:ec:03:8e:93:15:a8:fc:f8:dc:
93:66:fa:96:38:f4:91:3e:96:aa:f8:27:e1:32:fc:
4f:9e:a9:26:62:ce:f1:bb:76:c8:f8:ea:91:0e:d9:
3f:d7:e6:26:77:50:11:3a:47:61:f2:94:dc:6a:65:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:5B:DC:75:79:77:37:E0:30:2C:EA:10:76:53:4F:F2:E3:95:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cxBb3HV5dzfgMCzqEHZTT_LjlTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.34.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:88:74:e0:e3:bf:6b:7d:52:fb:e5:4f:8b:1f:c6:9d:85:
ce:6d:69:7b:7e:cf:a2:a8:f2:2a:ff:de:f8:aa:04:ae:48:a1:
f6:1b:72:87:0c:bc:fb:4f:d6:45:1c:1c:97:1a:dd:0d:52:0c:
0f:5e:a5:4f:5f:b6:ef:68:19:a4:05:a4:c2:28:d8:79:52:f4:
b2:81:ff:17:78:c4:d0:c4:7a:73:2d:65:f9:41:c4:28:dc:52:
0e:7f:8c:fb:0a:eb:85:f0:22:e0:de:84:99:c0:d5:d6:f4:06:
9b:ed:89:2d:17:12:4f:84:35:59:e5:5c:2d:06:c9:b4:98:a4:
fb:a9:85:72:76:7d:fb:f7:40:27:06:32:bb:73:bd:2b:1d:4c:
e6:ff:58:05:27:14:9d:17:87:d4:19:03:da:19:76:d4:a6:a1:
a1:9a:8c:51:fe:d1:ff:8a:7f:84:3a:db:18:c9:61:5f:70:f1:
d7:1e:fa:ad:9b:78:66:b0:98:03:38:d8:4e:ae:44:e6:3f:ef:
65:af:ac:ad:94:b5:85:f7:38:08:cf:ed:20:6f:4f:51:97:5b:
b3:75:6e:2a:1a:61:05:a8:85:b6:43:73:bb:01:65:b3:6e:1d:
07:fb:7c:f4:5a:43:b0:b0:2b:1a:b8:47:4f:67:c7:a6:91:47:
4e:d3:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:37:23 2024 by rpki-client on console-ams.rpki-client.org