Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hTAcTmL_MR-mzLUhjW73oPj6Zt8.roa
File: hTAcTmL_MR-mzLUhjW73oPj6Zt8.roa (raw, json)
Hash identifier: +vfpwONmYis80ykAZWlFkIOTRSx4puVmppqrT/sHSuA=
Subject key identifier: 85:30:1C:4E:62:FF:31:1F:A6:CC:B5:21:8D:6E:F7:A0:F8:FA:66:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CCA09A38F810A76AC9447B5AD71B11F45
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hTAcTmL_MR-mzLUhjW73oPj6Zt8.roa
Signing time: Tue 02 Jan 2024 11:57:58 +0000
ROA not before: Tue 02 Jan 2024 11:57:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212580
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:09:a3:8f:81:0a:76:ac:94:47:b5:ad:71:b1:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 11:57:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85301c4e62ff311fa6ccb5218d6ef7a0f8fa66df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:76:67:c0:ee:b5:39:e0:c9:83:a2:ba:be:
1f:94:fb:21:89:28:36:a1:8e:5a:69:00:c6:97:59:
04:3a:91:ff:4e:a6:04:e7:dd:8d:fe:8c:66:f6:ee:
5e:2b:fb:0a:23:99:15:b5:7e:6d:8d:5a:fe:b7:65:
fa:6c:ac:03:be:90:d0:83:89:52:d1:3f:6e:fb:85:
a0:5a:a9:2f:5f:02:38:34:41:5a:4f:32:7d:da:67:
ef:cb:9c:6c:d1:61:b0:7f:98:04:d0:e7:00:b7:2e:
e9:80:43:48:83:f7:4e:be:c9:4f:d9:d5:53:0f:24:
3e:31:f0:cd:17:96:a7:83:f1:8b:f0:32:c4:42:5b:
fc:15:c6:b3:de:7b:76:1b:bd:28:6a:ba:ec:c5:51:
dd:87:50:56:cd:f7:12:a1:f8:14:e3:e1:05:3d:ab:
a7:c1:db:03:56:72:dd:14:31:82:36:c9:fe:a8:c5:
20:5c:ed:69:63:6c:0b:c4:b9:8d:5b:31:03:2a:e7:
d2:cf:d9:32:7c:83:59:43:87:59:78:02:ef:87:5f:
39:da:71:5f:ba:41:da:e5:ff:a9:3b:bb:6b:89:a7:
41:9b:e7:ea:6f:73:83:c2:28:70:c6:69:fb:db:bf:
fb:67:69:01:ce:c5:9a:1b:e8:55:4b:33:de:c4:b0:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:1C:4E:62:FF:31:1F:A6:CC:B5:21:8D:6E:F7:A0:F8:FA:66:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hTAcTmL_MR-mzLUhjW73oPj6Zt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4f:be:fb:ac:c7:de:28:39:2e:14:e3:b8:8a:0f:5b:2e:37:
c9:c8:5f:b4:f6:c6:d1:d2:47:41:8e:3f:d3:da:03:35:8d:7d:
e8:29:f2:b3:81:68:72:9f:7a:dd:f8:04:ee:96:43:6b:85:d0:
8c:d0:a5:78:cd:80:2e:42:de:b4:c0:e3:c8:be:00:3b:df:19:
5f:1e:03:93:da:82:08:11:1a:ee:5d:c6:d8:09:27:05:d0:ea:
08:2b:dd:b1:90:55:6a:27:5e:ac:16:39:98:08:7e:f1:fc:df:
33:b3:8e:10:b1:02:46:cf:37:d1:99:18:8a:53:95:3b:7c:4e:
e6:88:c2:01:05:f3:38:f4:10:14:8d:8f:ef:f3:d1:91:86:0c:
18:82:64:aa:81:6c:f7:ea:89:37:8e:f4:0f:ff:9e:aa:72:a7:
2e:70:61:04:a8:2d:7b:64:18:81:96:f2:e2:7d:65:db:ad:a9:
bf:26:26:e7:1d:15:f2:33:83:ae:b5:7e:05:49:76:31:a9:f7:
93:a7:23:98:20:af:51:a1:52:75:81:cf:82:6b:db:b7:c3:77:
ab:98:5b:6d:31:80:d5:9a:14:63:ac:00:04:df:dc:fb:f4:60:
65:d8:a6:2a:57:3c:32:dc:42:9a:18:87:91:10:ba:67:f6:28:
3d:67:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:07 2024 by rpki-client on console-ams.rpki-client.org