Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmYvdg_3J9R2Dx8z00E4b8Fbwpc.roa
File: tmYvdg_3J9R2Dx8z00E4b8Fbwpc.roa (raw, json)
Hash identifier: W15EIkm1tRMiQQBz19qDOjFx9jvbcW9Nd3NMjWtKjqc=
Subject key identifier: B6:66:2F:76:0F:F7:27:D4:76:0F:1F:33:D3:41:38:6F:C1:5B:C2:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01931045FB6322A796C93682DAFB8B6F18B2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmYvdg_3J9R2Dx8z00E4b8Fbwpc.roa
Signing time: Sat 09 Nov 2024 09:34:01 +0000
ROA not before: Sat 09 Nov 2024 09:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:45:fb:63:22:a7:96:c9:36:82:da:fb:8b:6f:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 9 09:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6662f760ff727d4760f1f33d341386fc15bc297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:32:70:0a:28:8f:5c:a5:75:ab:9a:8d:47:
b1:f5:d4:eb:3e:31:1b:f8:a3:d1:f9:99:97:da:cb:
f1:a5:33:78:60:f1:93:83:b8:6b:6a:95:2d:c2:bd:
7f:eb:44:a2:7e:a4:86:f8:35:ac:40:0f:52:1b:6f:
bc:85:69:19:e4:35:a7:08:b1:e3:c6:90:03:f4:70:
14:cd:c8:12:7f:f8:1a:dd:4a:6f:39:41:18:a5:d7:
da:7c:0a:15:ee:7e:b9:a5:0f:ff:cf:77:d5:57:49:
df:97:d5:86:b7:2b:1b:d2:2c:bb:df:bc:04:75:e4:
a1:b8:66:18:41:9e:1f:d7:de:c8:79:b1:84:7d:9f:
58:2f:9a:0b:47:ca:6b:b6:ae:36:8e:86:f3:40:b0:
7f:c1:b7:4a:d0:57:70:ea:5d:b2:ab:59:b5:95:fb:
89:bc:01:34:98:e3:e9:a0:7c:1c:93:06:5b:84:23:
43:37:7b:82:30:bb:78:7f:ef:49:6a:6d:5f:db:68:
73:3c:8a:ca:02:8f:b0:1d:0a:36:13:06:d4:db:f6:
03:fe:f4:38:6a:09:a4:0a:02:e6:a9:b8:e7:77:8e:
ef:a8:f4:51:6d:1a:52:6c:56:c5:02:96:f3:cd:c5:
62:05:c5:1e:2b:33:55:03:06:52:55:7a:f7:d8:95:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:2F:76:0F:F7:27:D4:76:0F:1F:33:D3:41:38:6F:C1:5B:C2:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tmYvdg_3J9R2Dx8z00E4b8Fbwpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
45.144.154.0/24
45.149.234.0/24
Signature Algorithm: sha256WithRSAEncryption
29:13:1f:10:81:ef:59:1c:db:ea:b9:d3:4c:80:a7:37:1e:dc:
9d:a2:1f:07:63:96:60:87:3a:c7:24:1d:69:32:46:a8:4d:18:
b9:41:b8:b9:35:58:a6:f5:bb:54:16:7e:39:9a:0f:63:e4:f2:
23:ae:fb:4a:a1:5a:1e:f2:8a:0e:ac:7e:f8:e5:72:f6:ad:ea:
4a:24:c6:7d:d2:45:ca:cb:ca:10:1b:07:e4:b5:5f:7a:85:cf:
d0:67:9d:d0:60:08:59:a8:87:cc:10:f2:64:fb:23:64:53:f5:
7b:d7:35:d9:f6:19:cf:f1:cc:f7:d8:8a:7f:35:d5:0d:55:59:
f5:b9:fc:98:5d:c5:8b:76:8b:4d:ca:e4:34:3b:db:91:f8:a1:
12:c7:fb:e0:55:86:00:cd:93:18:04:7d:47:29:ae:45:56:50:
54:72:1d:f8:96:22:27:3b:b7:e9:0c:18:77:9e:50:fa:f7:3a:
2c:83:8b:d2:74:eb:eb:71:3b:83:87:ef:06:84:c4:0b:eb:15:
75:22:0b:d8:c1:8e:f4:49:81:07:79:34:48:8e:58:4c:05:b6:
3c:04:b8:dc:29:30:79:c7:4c:ef:14:ed:b3:3a:b5:06:68:df:
7b:ff:61:86:ad:d3:2f:38:d0:31:95:9d:21:43:68:db:b9:63:
43:da:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:19 2024 by rpki-client on console-ams.rpki-client.org