Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/niLeqJn4KQVGd0emfAsXSZFYUJA.roa
File: niLeqJn4KQVGd0emfAsXSZFYUJA.roa (raw, json)
Hash identifier: dkbVciYn4XAYhXGFIODiDOd6vWKqHBEvvS5VS0WTwHc=
Subject key identifier: 9E:22:DE:A8:99:F8:29:05:46:77:47:A6:7C:0B:17:49:91:58:50:90
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCEEF3D88AE911231F889C34F1F02F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/niLeqJn4KQVGd0emfAsXSZFYUJA.roa
Signing time: Tue 02 Jan 2024 06:29:31 +0000
ROA not before: Tue 02 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51925
IP address blocks: 87.121.126.0/24 maxlen: 24
87.120.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:ee:f3:d8:8a:e9:11:23:1f:88:9c:34:f1:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e22dea899f82905467747a67c0b174991585090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:ca:6e:1f:07:5f:d4:2d:8b:6d:99:43:4a:
ce:98:47:75:c4:a2:8c:4b:25:11:a8:29:14:62:fc:
67:0e:a3:7d:b4:09:7d:dc:de:40:21:59:9a:48:f5:
4e:57:a1:dc:4b:8b:97:65:4d:89:68:0f:2d:55:48:
00:59:27:8c:0a:b6:b8:4a:8f:65:9c:34:ba:b1:f5:
eb:59:79:73:48:ba:e3:8b:19:82:9f:83:c5:45:b7:
7f:d5:04:f4:29:53:e6:32:4b:a4:91:13:b2:11:4f:
14:ae:f0:31:3a:44:02:6e:fc:3d:27:f0:7f:5b:a7:
f0:f8:20:95:60:d4:8b:9f:94:78:e0:ee:d1:4c:c0:
f4:08:83:d2:dc:55:07:bc:b9:73:6a:b7:62:28:fa:
97:f2:b0:08:a4:48:53:7e:56:16:d1:1f:ac:f6:a4:
c5:2b:7a:b5:dc:d0:ad:11:9d:86:21:17:87:df:e2:
2f:a8:22:c7:05:79:a5:a0:4e:49:b3:79:0a:e5:88:
77:9c:8e:48:2a:51:f4:0c:e7:7c:cd:65:b5:0b:7d:
a1:a5:00:47:3e:1f:13:1f:03:3b:ed:3f:90:2e:fb:
68:68:32:88:1f:c3:55:7b:10:97:81:9b:bb:54:db:
bd:0e:ce:2a:cc:f4:ff:f3:04:65:01:a6:af:18:57:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:DE:A8:99:F8:29:05:46:77:47:A6:7C:0B:17:49:91:58:50:90
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/niLeqJn4KQVGd0emfAsXSZFYUJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.11.0/24
87.121.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0a:95:bb:6e:d2:1b:69:32:af:29:8d:ae:13:05:be:41:2d:
ac:a4:23:ba:54:5a:e1:d2:43:b1:2b:d2:04:25:11:d4:c9:c5:
66:64:6b:80:fe:c5:45:56:34:3a:fc:69:c9:b6:12:3d:b6:d2:
fb:bb:be:c7:68:b1:ef:02:01:f2:97:81:1f:1f:50:f4:87:45:
49:09:b7:d7:02:38:c3:64:5f:78:2f:48:63:3d:80:78:1b:70:
57:82:e7:bd:c9:f7:b6:5e:97:f5:20:19:61:21:1c:2a:b7:c5:
1c:40:0f:ae:e8:36:a8:1d:a5:d8:de:23:21:71:f5:bc:3a:70:
f6:86:92:8d:ce:f5:aa:c8:a4:f3:19:dc:c5:38:55:aa:38:bc:
c1:9e:61:5f:c1:ef:64:11:27:3f:e1:3c:35:9c:eb:ba:03:91:
75:7d:7e:8b:2f:78:a5:bd:30:1f:08:a8:e6:d7:64:18:6c:a6:
b9:b2:a0:ad:72:f0:47:e5:9c:de:77:cb:bc:e4:51:10:bc:a6:
a3:d2:06:dd:fb:16:f0:b2:7f:98:17:e1:95:a7:a6:c5:31:29:
9d:1e:13:f5:b6:9d:8e:d1:b4:13:06:ef:46:21:ae:a7:f0:87:
c3:56:75:da:50:fe:8b:43:75:1e:4c:89:55:8e:4d:87:4a:27:
fa:10:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org