Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dP0GpMkpz1nJAIPFdU8n7hWyx5o.roa
File: dP0GpMkpz1nJAIPFdU8n7hWyx5o.roa (raw, json)
Hash identifier: IepKezkUrbESIaKn1j1ftINnwVHHpUW4d0WWyKLMa/I=
Subject key identifier: 74:FD:06:A4:C9:29:CF:59:C9:00:83:C5:75:4F:27:EE:15:B2:C7:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0B7726B454D43D358EFB03A77FCD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dP0GpMkpz1nJAIPFdU8n7hWyx5o.roa
Signing time: Tue 02 Jan 2024 06:29:38 +0000
ROA not before: Tue 02 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210058
IP address blocks: 45.91.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0b:77:26:b4:54:d4:3d:35:8e:fb:03:a7:7f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74fd06a4c929cf59c90083c5754f27ee15b2c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:1a:8e:f8:cc:38:d4:8b:75:06:a9:f5:e5:
00:08:4f:20:7d:7c:0e:48:57:18:5a:ac:b0:6c:ea:
28:a6:80:67:77:7f:0a:d3:9a:a5:29:fc:23:7d:7e:
df:ff:49:a8:ed:ad:50:8a:df:5d:c8:96:e0:12:7f:
3a:25:1d:43:8d:8b:47:99:49:ee:fc:90:75:bd:fe:
43:91:2f:23:3b:a5:cb:70:2c:af:3b:25:f2:37:1f:
48:8e:e5:fc:74:6e:f2:1c:a2:97:39:74:04:2a:31:
04:c6:53:bd:d2:89:2e:3b:00:3c:22:90:6d:55:f4:
56:0a:15:98:79:1e:76:a3:34:30:2b:4f:3c:b4:e5:
79:a7:1e:04:ac:3e:92:77:50:9d:d7:a6:4e:2a:90:
39:29:f0:d4:79:67:23:a4:3b:5d:e0:ea:ae:ec:d8:
1e:5c:a0:f0:8a:4f:5f:b0:06:2b:5e:a8:9e:b0:82:
5c:5e:12:8f:f3:4a:6d:05:4d:fa:12:9c:26:53:cc:
a2:dc:6a:47:b1:68:96:f9:d0:da:be:f5:36:ce:12:
d7:bd:3f:8c:41:7f:11:dc:52:56:ac:80:2f:98:15:
b5:76:2e:f5:48:15:65:d6:7d:f7:e0:20:cd:96:5a:
19:71:4b:10:b1:e9:75:66:89:b2:2d:44:7a:0b:22:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:06:A4:C9:29:CF:59:C9:00:83:C5:75:4F:27:EE:15:B2:C7:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dP0GpMkpz1nJAIPFdU8n7hWyx5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.192.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b1:54:4b:3b:cb:94:9e:68:60:80:76:6b:f8:19:b1:f7:c5:
f6:37:26:7b:5e:4e:be:90:66:89:06:d0:02:58:53:c2:6c:24:
43:e9:93:9c:83:e0:f5:b3:a5:5d:a0:df:e6:40:f0:e6:60:56:
3b:06:e5:bb:87:3d:8e:1b:f9:81:17:5c:37:93:df:35:51:bc:
46:b4:9f:a4:49:18:61:5f:65:f8:46:26:46:9d:50:f4:2f:4b:
77:a3:61:d6:ae:e1:37:ec:a9:1c:97:9c:73:14:3d:2f:80:ab:
1b:8d:0b:da:70:e5:f4:6a:fd:5b:76:f8:12:fc:7b:fd:06:17:
e0:34:a2:97:35:1e:9d:71:c9:4a:dd:d5:6e:5c:8e:eb:a8:73:
3b:ad:de:7d:e6:2e:75:d8:02:4e:3d:16:e7:13:79:18:2a:6f:
67:ea:b2:b8:a0:5c:ef:e6:bf:d3:17:7e:8c:4e:14:0c:20:33:
57:49:d3:62:02:f4:2a:f9:3a:f7:c5:43:09:b8:57:d7:5e:67:
45:02:3b:89:5f:c6:43:a5:2c:5d:5b:28:e9:ac:1d:48:32:6d:
62:20:aa:ad:93:6e:14:1e:4d:59:ec:cb:1d:30:fe:d6:cf:dc:
aa:78:94:97:e8:1d:d3:1e:c1:34:0a:e8:86:46:55:15:fb:d5:
71:8c:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:20 2024 by rpki-client on console-ams.rpki-client.org