Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oVDe26x0e7SIwE5fPLHUZPXWT94.roa
File: oVDe26x0e7SIwE5fPLHUZPXWT94.roa (raw, json)
Hash identifier: I4ZQIX3oznSQv0zDhVOJud6ODOP4InqiHZfoagP/22c=
Subject key identifier: A1:50:DE:DB:AC:74:7B:B4:88:C0:4E:5F:3C:B1:D4:64:F5:D6:4F:DE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01920030771B7BB7A8F3AFCA91ED3EC723B4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oVDe26x0e7SIwE5fPLHUZPXWT94.roa
Signing time: Tue 17 Sep 2024 13:33:49 +0000
ROA not before: Tue 17 Sep 2024 13:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8734
IP address blocks: 87.120.140.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:30:77:1b:7b:b7:a8:f3:af:ca:91:ed:3e:c7:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a150dedbac747bb488c04e5f3cb1d464f5d64fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:44:29:52:21:f5:ee:71:51:06:75:15:63:
44:76:5f:76:27:50:db:22:10:17:92:ed:cc:8f:e6:
25:0b:f4:de:0e:21:35:46:c8:c8:16:6f:26:a7:ab:
fc:26:38:b6:63:6e:26:4c:17:22:bd:78:c9:70:0f:
39:90:14:0c:d4:42:41:50:6c:d8:20:07:20:a5:04:
a9:75:ea:54:36:7f:1d:f2:98:fb:8d:0d:d3:a5:c3:
46:3f:71:02:c1:12:71:b3:09:03:dd:c6:db:dd:ec:
09:71:80:63:bd:d6:db:30:b8:6e:1b:e8:8b:ae:5d:
9d:03:57:6a:16:6a:8e:68:9a:47:b7:62:56:d9:d0:
30:60:a3:f9:f3:23:08:e0:92:ee:ba:5a:ac:7c:8f:
4f:5a:3e:a5:d5:c7:eb:79:99:32:f4:75:99:ee:1d:
2d:88:9f:4c:95:e9:72:0a:8a:e6:02:a8:e0:ca:db:
17:e8:84:d5:75:5c:0b:1d:15:a4:6a:99:98:87:55:
67:0c:17:a6:49:c5:7a:e5:14:88:4a:75:f1:c4:00:
a4:6d:52:85:87:50:b8:09:a3:6b:6b:91:bd:c9:c4:
8a:56:a3:06:42:9f:a6:2b:29:c5:52:5c:1f:12:d1:
a2:4c:09:e1:e9:a9:d1:be:c8:a1:32:d8:eb:c9:b9:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:DE:DB:AC:74:7B:B4:88:C0:4E:5F:3C:B1:D4:64:F5:D6:4F:DE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oVDe26x0e7SIwE5fPLHUZPXWT94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.140.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9a:78:b1:61:4b:77:62:f9:dc:64:cf:f8:e5:65:44:23:34:
0f:f7:11:96:1d:cd:0f:a9:4d:a1:10:b8:41:86:cb:2f:c4:62:
f9:07:c1:e7:48:45:9d:e5:6e:e7:69:03:82:93:54:ad:28:1e:
07:a7:f4:f2:9f:1a:ba:08:7b:8d:d6:9b:cd:9b:be:f6:c1:c8:
cd:10:47:b3:dc:c9:91:89:98:9f:57:b2:97:5c:d8:86:c4:66:
a8:c3:23:26:5d:31:e8:c3:2a:08:b6:bd:c5:6a:9d:4f:fd:04:
9b:ad:fd:34:3c:65:1a:09:ee:b1:35:45:a2:84:9a:6b:69:d6:
9c:3b:b0:3c:6d:6b:b1:2a:84:69:d6:fd:df:94:6c:94:85:09:
93:c6:3f:7a:5e:3d:a8:f8:28:87:bc:b6:22:1a:d3:20:81:51:
9c:3d:f1:db:f7:95:53:7b:6b:5a:b1:36:b7:21:79:51:21:25:
0b:88:d6:d3:38:eb:c0:60:f9:d3:60:f1:b6:a0:4d:6c:de:43:
41:27:31:bb:68:02:ae:46:d7:b7:88:ad:19:62:b9:d1:5d:3d:
d0:ae:62:8a:fd:f6:25:df:bb:fd:a5:fa:9c:64:61:5d:ad:96:
e1:67:7d:f0:c5:b1:11:f8:77:17:15:b5:7a:0c:5d:74:f9:dc:
e7:ad:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:19 2024 by rpki-client on console-ams.rpki-client.org