Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miZL9N9150fIodm9x0aQ4ikmo9o.roa
File: miZL9N9150fIodm9x0aQ4ikmo9o.roa (raw, json)
Hash identifier: 9G5aHaaQDqlUGiC138FXoqZr0mgwuWr1PXi8zAujq2w=
Subject key identifier: 9A:26:4B:F4:DF:75:E7:47:C8:A1:D9:BD:C7:46:90:E2:29:26:A3:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D26C3A3E42D40D0525214285B7680A774
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miZL9N9150fIodm9x0aQ4ikmo9o.roa
Signing time: Sat 20 Jan 2024 12:06:12 +0000
ROA not before: Sat 20 Jan 2024 12:06:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9028
IP address blocks: 45.144.155.0/24 maxlen: 24
93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:c3:a3:e4:2d:40:d0:52:52:14:28:5b:76:80:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 20 12:06:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a264bf4df75e747c8a1d9bdc74690e22926a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:82:20:ad:94:01:47:82:79:47:2b:c5:0b:
40:03:a6:18:84:fa:d7:cd:c7:17:86:2a:38:72:37:
b3:98:ef:3e:59:40:76:ce:ca:ef:e8:83:ff:d5:82:
23:a5:ed:14:26:db:18:14:6a:c2:5b:25:45:c3:0a:
9d:b4:cd:36:58:0d:00:2b:23:b5:55:5b:1a:a6:da:
fb:62:f1:2d:a0:38:85:3d:ed:f8:4b:c1:0d:57:5b:
48:50:6f:d7:d3:a2:51:cd:9c:72:cb:30:2e:b9:cc:
30:7d:0b:82:ac:d1:57:ee:a6:b5:5f:07:40:9f:c2:
d7:34:7a:4b:68:fb:85:da:d4:b2:d4:c8:21:05:2e:
cd:35:ce:0e:73:74:73:6b:9f:61:0d:c3:65:db:ca:
04:53:84:4f:42:91:58:7b:34:c1:f9:aa:f9:72:61:
83:1b:46:d9:0b:88:b2:d4:a9:6b:fd:c3:a6:f9:4b:
d7:4a:01:34:ee:46:e7:d3:1c:be:2b:19:af:98:95:
2f:a1:6d:4b:b1:a0:62:eb:de:8c:92:62:73:ba:77:
6b:dd:5c:9a:a4:ed:61:ca:12:d8:82:6c:cf:be:63:
9a:e3:78:db:d5:83:77:82:df:03:67:d4:a6:de:ce:
c0:b1:38:57:cb:49:c1:da:e2:ef:08:52:31:9f:69:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:4B:F4:DF:75:E7:47:C8:A1:D9:BD:C7:46:90:E2:29:26:A3:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/miZL9N9150fIodm9x0aQ4ikmo9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:71:51:32:84:6f:86:c7:50:67:a4:95:11:07:ad:d6:2d:8f:
89:5d:b6:06:bb:41:47:b4:be:f8:0f:4d:0c:d7:62:0f:f5:8a:
e9:96:25:1e:36:8a:f9:0a:34:f5:c6:29:6f:2a:fc:a2:cf:87:
40:24:21:e1:e0:e6:ae:3f:c6:8a:b4:c8:8c:2c:86:86:9b:95:
5c:3b:5b:7a:f5:9d:8f:3e:53:bc:49:10:c4:0e:3c:40:ca:6e:
e3:c8:a3:06:d8:ce:01:b7:a5:12:9d:60:16:e9:bb:08:18:06:
95:cb:eb:fe:b9:67:ed:27:e1:a3:99:98:64:6a:6b:b4:5c:0e:
50:71:3f:c0:e5:72:6a:89:ce:32:4b:20:8e:c6:af:a2:d9:19:
d3:e9:48:39:eb:fd:a3:09:20:33:35:16:f9:c3:f9:3a:28:14:
9b:98:89:2b:30:03:52:bc:4c:9a:2b:aa:bb:78:47:dc:24:c5:
c4:1a:93:1f:99:bd:cc:74:5b:a7:9e:72:73:0e:f0:e3:cd:ac:
78:2b:ff:a1:0e:09:3b:d5:4a:82:86:fb:ca:67:ab:d6:06:60:
e0:20:7f:cf:8a:94:7d:bd:12:51:28:4a:43:9d:4a:33:5e:62:
c9:53:b4:38:8b:72:d0:e8:1d:0f:79:f8:8e:4b:7b:23:5b:c8:
28:53:63:f8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY0mw6PkLUDQUlIUKFt2gKd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTIwMTIwNjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTI2NGJmNGRmNzVlNzQ3YzhhMWQ5YmRjNzQ2OTBlMjI5MjZhM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxeCIK2UAUeCeUcrxQtAA6YYhPrX
zccXhio4cjezmO8+WUB2zsrv6IP/1YIjpe0UJtsYFGrCWyVFwwqdtM02WA0AKyO1
VVsaptr7YvEtoDiFPe34S8ENV1tIUG/X06JRzZxyyzAuucwwfQuCrNFX7qa1XwdA
n8LXNHpLaPuF2tSy1MghBS7NNc4Oc3Rza59hDcNl28oEU4RPQpFYezTB+ar5cmGD
G0bZC4iy1Klr/cOm+UvXSgE07kbn0xy+KxmvmJUvoW1LsaBi696MkmJzundr3Vya
pO1hyhLYgmzPvmOa43jb1YN3gt8DZ9Sm3s7AsThXy0nB2uLvCFIxn2nJmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJomS/TfdedHyKHZvcdGkOIpJqPaMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbWlaTDlOOTE1MGZJb2RtOXgwYVE0aWttbzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZCbAwQA
XXsQAwQAXXsWMA0GCSqGSIb3DQEBCwUAA4IBAQC0cVEyhG+Gx1BnpJURB63WLY+J
XbYGu0FHtL74D00M12IP9YrpliUeNor5CjT1xilvKvyiz4dAJCHh4OauP8aKtMiM
LIaGm5VcO1t69Z2PPlO8SRDEDjxAym7jyKMG2M4Bt6USnWAW6bsIGAaVy+v+uWft
J+GjmZhkamu0XA5QcT/A5XJqic4ySyCOxq+i2RnT6Ug56/2jCSAzNRb5w/k6KBSb
mIkrMANSvEyaK6q7eEfcJMXEGpMfmb3MdFunnnJzDvDjzax4K/+hDgk71UqChvvK
Z6vWBmDgIH/PipR9vRJRKEpDnUozXmLJU7Q4i3LQ6B0PefiOS3sjW8goU2P4
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org