Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n4qBeNYIM-8d8-qFgh8x7VNxUv4.roa
File: n4qBeNYIM-8d8-qFgh8x7VNxUv4.roa (raw, json)
Hash identifier: KZdbebPrUy92iP5RYKfP7ZnffBZAzvYuEYw7+X7mn/4=
Subject key identifier: 9F:8A:81:78:D6:08:33:EF:1D:F3:EA:85:82:1F:31:ED:53:71:52:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E5CE21B23D73F0DF315C9662E3347A74A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n4qBeNYIM-8d8-qFgh8x7VNxUv4.roa
Signing time: Wed 20 Mar 2024 17:21:45 +0000
ROA not before: Wed 20 Mar 2024 17:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215450
IP address blocks: 92.249.48.0/24 maxlen: 24
94.156.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:e2:1b:23:d7:3f:0d:f3:15:c9:66:2e:33:47:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 17:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8a8178d60833ef1df3ea85821f31ed537152fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:c2:83:48:f9:3b:75:8d:e1:77:2a:ba:b3:
10:a7:ec:9d:1b:f1:05:b0:0c:fd:53:05:be:1e:40:
2a:1d:80:ea:98:0c:a0:46:12:87:07:cd:33:66:8b:
e6:b5:15:57:c8:26:80:88:92:f2:09:6f:48:1e:90:
b5:ee:72:da:92:df:eb:9a:4e:4d:09:be:d2:89:d4:
22:da:00:05:0f:ae:35:40:b6:50:32:7b:ae:73:9d:
1a:9e:b2:fd:c1:04:4c:f0:17:20:bd:80:bd:12:67:
9f:7c:1e:f9:30:be:f8:76:e2:f5:60:4f:5f:d5:27:
dd:d6:e7:f0:0a:00:be:2b:d5:15:5a:a6:1d:48:b8:
60:cf:16:f3:f3:73:57:a6:1a:d0:6f:62:e4:02:ea:
af:bd:52:96:8f:5c:8f:15:db:b4:59:d7:ea:9e:f0:
23:4c:db:52:dc:a2:90:0b:77:8a:c6:01:01:43:00:
f9:39:c9:6e:5b:8c:45:a5:12:84:c1:be:07:56:80:
61:53:d8:17:9e:7d:3f:02:2f:1b:4e:59:7d:70:dc:
b6:9d:65:05:a8:39:27:ca:df:26:8b:a0:f9:6b:69:
3f:f6:23:27:7a:46:37:e3:e5:01:3d:78:80:50:6a:
fc:49:6c:74:65:dd:41:3d:63:42:d5:5c:7b:1f:0d:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:81:78:D6:08:33:EF:1D:F3:EA:85:82:1F:31:ED:53:71:52:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/n4qBeNYIM-8d8-qFgh8x7VNxUv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.48.0/24
94.156.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:70:3b:6f:dd:69:3b:79:27:f5:35:5f:4f:ae:e8:7f:ac:b6:
1a:41:4e:c4:2a:b4:b6:bc:37:27:27:1b:c0:bd:9f:40:6f:d9:
66:9b:ad:12:a5:c2:91:53:30:89:ff:ff:80:f7:c1:c6:4d:c3:
e4:25:b7:b6:de:da:cc:4e:89:dc:5c:54:b8:dc:46:1f:7f:e6:
74:e0:c0:a2:0f:d2:0f:82:86:51:93:59:cd:db:bb:a5:ff:9b:
40:0f:2b:59:be:15:30:db:10:26:8d:09:6c:d3:50:bf:fa:bf:
ee:0b:3c:f7:18:5d:cb:c8:38:80:8b:89:7a:5e:56:e6:ff:fa:
24:e5:bb:8c:93:c5:09:b5:6a:5b:60:2e:ec:bc:56:b1:44:67:
ec:e0:3b:58:ab:21:41:76:93:af:02:38:2d:5c:25:bb:3d:8f:
ae:61:c6:90:4f:8f:cd:d4:9b:b9:c6:9f:b9:a2:23:4a:86:4c:
1a:24:35:a4:3d:ce:53:41:ec:f0:ee:8b:c4:29:0a:32:1f:b2:
6d:2c:98:ff:1d:84:6d:08:38:9b:c9:b4:ae:7a:99:ac:76:42:
08:b9:81:ee:ed:8e:aa:c9:97:b9:c7:92:98:48:29:fb:56:9e:
f1:75:6e:d1:5f:da:fc:95:8a:3c:c9:cb:61:02:db:3e:b8:2c:
3e:8a:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org