Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dDE9fzHlmSP5qEcJMd2c5ZZU_7M.roa
File: dDE9fzHlmSP5qEcJMd2c5ZZU_7M.roa (raw, json)
Hash identifier: wrX03ljv7Row6uIvPSmmLz7uDBZlaeFV7R/Fl78kThM=
Subject key identifier: 74:31:3D:7F:31:E5:99:23:F9:A8:47:09:31:DD:9C:E5:96:54:FF:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF6FFEBD4B3C11748E8E2FCA3697A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dDE9fzHlmSP5qEcJMd2c5ZZU_7M.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
87.120.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f6:ff:eb:d4:b3:c1:17:48:e8:e2:fc:a3:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74313d7f31e59923f9a8470931dd9ce59654ffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:25:d8:2f:f4:18:1b:46:cc:a2:f4:f8:71:
60:24:f2:15:e4:82:fa:8f:56:3a:81:76:5e:21:2a:
08:5e:ab:42:9b:bd:c4:c6:47:00:7b:7d:4f:7b:f7:
6a:c1:db:2a:57:6b:42:2a:fc:e6:18:74:e0:0e:76:
3f:66:6d:f5:f6:37:5d:8a:4d:f3:a6:32:a6:43:01:
f1:21:80:3e:9e:66:94:9f:ba:73:d9:dc:0f:9a:c5:
f9:a8:ff:5c:2c:f0:de:a9:82:dd:40:19:96:25:f7:
58:a5:f9:99:89:59:0e:f2:53:82:6e:39:df:ed:d4:
8a:7a:e3:95:cd:06:7c:fb:60:18:63:63:39:10:06:
f1:cb:c9:16:94:de:1c:3a:ba:7f:71:0c:e6:62:6e:
3a:e6:68:91:03:42:21:c3:16:11:0f:85:33:a3:71:
66:54:80:fa:18:c6:d1:82:ae:e6:01:48:8b:3e:6d:
14:a3:b8:cf:e4:26:a1:d0:c8:90:67:7d:89:70:e4:
ee:aa:88:14:bd:48:f2:96:dc:31:fd:29:e9:3f:3e:
f8:22:7d:ca:c6:1f:60:d7:be:e2:9a:b8:60:8d:fa:
3f:3b:4c:ea:ca:54:d8:54:42:71:96:9c:d2:c4:75:
e8:0b:bf:2e:8d:cf:f6:3f:e3:06:cb:64:24:1c:19:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:3D:7F:31:E5:99:23:F9:A8:47:09:31:DD:9C:E5:96:54:FF:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dDE9fzHlmSP5qEcJMd2c5ZZU_7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.158.0/23
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
06:57:a6:04:57:ef:c4:f6:40:88:3e:35:47:bf:fe:51:08:17:
ce:91:2b:4c:1f:cc:60:85:de:9d:1f:f8:8d:1b:cf:f0:f3:53:
1c:b7:60:ae:86:d9:15:22:f9:fc:07:d1:96:fe:72:2d:a7:b5:
39:28:7f:0a:96:3f:02:36:9f:99:e4:cf:c6:4b:5b:26:ce:c9:
9e:2f:2c:4e:7e:79:31:30:56:81:61:a3:05:24:de:2f:5b:46:
7d:3a:b4:57:3d:5b:82:36:b8:86:ea:ab:f8:20:87:1d:88:3a:
64:89:9f:19:a1:5a:88:b3:7c:49:6c:89:5d:af:8b:db:f4:df:
51:65:1b:16:17:c5:c3:2b:96:c0:12:81:5b:c8:f3:dc:07:5b:
76:af:1d:1a:1f:37:56:a7:e2:d6:d6:59:79:ec:fb:42:a5:a6:
c0:70:9f:9b:f2:a4:fe:68:2d:9c:f0:7c:75:9d:d2:8b:d3:7a:
6e:4a:89:2c:75:26:8c:d0:1a:d9:d3:c5:96:cf:78:1c:d8:27:
14:92:ea:0e:9b:60:53:20:3b:5a:2d:8a:4f:35:db:38:6f:79:
06:e0:8e:47:75:09:05:e1:3d:19:f3:45:3c:2f:cf:80:ff:db:
97:3c:5c:86:10:9e:2f:ba:2d:ab:5e:ba:4b:75:90:35:fc:7f:
8a:dd:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org