Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tZmxl53f6dQqBm4MQmulWxBugSc.roa
File: tZmxl53f6dQqBm4MQmulWxBugSc.roa (raw, json)
Hash identifier: V5Wws3UEJHm25Nlt4lBWszKbcjwJcCowNRs/ggCiVrE=
Subject key identifier: B5:99:B1:97:9D:DF:E9:D4:2A:06:6E:0C:42:6B:A5:5B:10:6E:81:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E0E73EB74054557C60814D189FE9F74B6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tZmxl53f6dQqBm4MQmulWxBugSc.roa
Signing time: Tue 05 Mar 2024 11:51:01 +0000
ROA not before: Tue 05 Mar 2024 11:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 45.141.158.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:73:eb:74:05:45:57:c6:08:14:d1:89:fe:9f:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 5 11:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b599b1979ddfe9d42a066e0c426ba55b106e8127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:e8:c6:43:7c:ba:62:90:d8:01:d5:9a:0d:
b7:e1:64:d6:38:97:e5:c1:c1:9a:3b:42:32:8f:f1:
d9:07:d3:9d:9e:17:9c:e5:08:28:d4:f4:4f:3a:47:
c2:26:65:3f:81:70:0a:83:d8:50:81:6d:cd:82:c1:
e6:cb:98:16:6d:13:84:a5:a7:fa:b4:bc:bc:05:04:
24:86:19:5c:6f:27:2e:d4:8e:87:71:e5:93:77:47:
b5:82:28:52:b9:48:e3:02:39:08:d1:eb:13:4f:00:
ac:fc:b4:f9:28:72:1d:0d:bc:30:3d:d1:5b:37:81:
a0:ed:8d:7b:bd:e0:e2:5b:e8:bd:83:c6:16:c0:c1:
a5:5a:a6:77:b8:d5:c1:bf:e3:02:ac:66:02:dc:af:
ac:fd:e0:e9:fb:4e:50:e3:76:1c:1b:51:85:98:9f:
c7:8c:9d:3a:ca:90:e6:c6:b4:f6:6a:91:e7:bf:4e:
3c:2d:af:e0:ce:29:c3:09:75:44:eb:67:7b:1a:74:
37:67:25:b6:7a:30:30:31:21:ca:60:75:35:05:d3:
e7:70:d8:71:de:5f:21:6b:8c:28:a6:6e:06:c6:7f:
72:5b:4d:30:c7:85:7f:29:cb:e7:31:3d:2e:a7:89:
2d:01:3a:56:f6:80:77:96:3c:f7:19:4a:15:c0:69:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:B1:97:9D:DF:E9:D4:2A:06:6E:0C:42:6B:A5:5B:10:6E:81:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tZmxl53f6dQqBm4MQmulWxBugSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
87.121.124.0/23
87.121.162.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:c4:6e:fe:6e:c1:de:d5:e1:3f:e3:74:aa:24:25:4d:c3:
3c:20:dd:6e:3c:1a:ce:ea:6c:1d:6d:af:b3:a2:0f:03:98:c3:
8f:0e:bd:c8:ca:62:11:aa:f7:80:af:7d:84:8e:cf:77:c3:3b:
5c:2a:73:f1:2d:ab:a2:30:db:58:07:42:dd:e9:53:7e:30:39:
83:cc:c0:2e:15:f4:04:0d:3d:e9:59:ae:67:98:43:08:4c:c7:
3a:04:a9:08:45:4a:9c:d9:70:af:f5:ed:51:0b:ab:6f:50:ac:
3c:1b:83:f4:ce:9f:4f:a1:82:f3:79:42:39:82:b1:61:43:5a:
72:38:82:42:a4:4b:c9:cd:af:97:b5:b1:23:98:b3:2d:66:55:
0b:7f:84:cf:cc:fb:17:75:3e:55:ad:80:4f:0e:26:8e:00:61:
7a:e4:ee:e0:4b:06:dd:ad:f0:2b:a8:59:f3:d0:2d:6b:26:60:
bc:c8:03:67:e5:05:e5:b6:ed:75:01:bb:bf:78:d9:23:36:f1:
f5:65:a5:b6:dc:3d:8d:b9:22:a2:a6:fc:21:38:33:35:f6:ee:
4d:9a:06:31:f7:fd:37:91:fb:84:ef:f7:ae:06:f9:f1:43:bc:
3c:f8:ae:ff:46:11:37:bd:c6:ec:f1:03:99:fa:e5:01:2f:a3:
ff:97:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org