Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnAtiAPhLOGq5IZOT4DD7zQhc9w.roa
File: tnAtiAPhLOGq5IZOT4DD7zQhc9w.roa (raw, json)
Hash identifier: b3qvfPMyMgo8DWKJOP4jfyj1vBOG7pH5fwmJOYFvW9Y=
Subject key identifier: B6:70:2D:88:03:E1:2C:E1:AA:E4:86:4E:4F:80:C3:EF:34:21:73:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191A2CFA5B0BECB3C4E6BC48C263EB4A9CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnAtiAPhLOGq5IZOT4DD7zQhc9w.roa
Signing time: Fri 30 Aug 2024 10:23:22 +0000
ROA not before: Fri 30 Aug 2024 10:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214309
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:cf:a5:b0:be:cb:3c:4e:6b:c4:8c:26:3e:b4:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 30 10:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6702d8803e12ce1aae4864e4f80c3ef342173dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:78:33:27:39:94:05:ba:89:14:7b:7a:25:
af:7a:30:9f:11:78:f7:5c:b1:e5:5f:90:b5:98:b4:
28:7b:6f:6f:68:91:e7:db:1e:09:31:45:b7:61:71:
6c:db:3c:cb:2d:d3:23:30:fa:42:57:ff:f1:8f:16:
cc:8b:3a:81:46:4e:8d:9d:60:df:bc:2e:b1:59:64:
8a:89:c0:49:d4:4f:d0:19:bf:59:9a:8b:0c:e2:14:
66:ba:ef:ff:95:e5:9d:a3:17:77:ad:db:4b:0c:45:
02:43:5b:cf:c7:a4:20:80:dc:f8:c4:d6:7a:ce:77:
dc:e0:9b:ae:cb:b9:21:d9:38:c1:e5:0a:e5:df:1d:
46:f7:ad:b0:c6:a9:e8:fc:f8:39:65:2e:b4:e9:ea:
92:4c:f0:5a:55:ca:03:4f:fb:3e:7b:bc:e3:c7:e5:
73:c7:10:68:d3:ec:b8:e1:ad:94:11:04:3a:2e:47:
46:e2:a7:86:f4:eb:ae:17:7f:2a:04:da:52:99:36:
83:01:3b:ba:41:70:bd:99:84:2e:b7:37:cc:26:8e:
59:8e:d1:a3:9b:79:54:5a:ec:ea:01:1d:52:c1:26:
27:10:e2:41:c2:b2:9a:e3:a0:db:fb:e5:d4:96:ab:
b9:b1:22:59:55:66:bd:9b:ed:93:18:3e:c8:5d:40:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:2D:88:03:E1:2C:E1:AA:E4:86:4E:4F:80:C3:EF:34:21:73:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tnAtiAPhLOGq5IZOT4DD7zQhc9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ba:84:d3:22:b7:f1:b9:a3:e5:6c:44:a8:70:ee:ff:a3:74:
db:57:33:67:81:2b:c7:1b:1b:e9:ce:53:ae:3c:31:8f:f9:60:
a4:55:af:65:d0:75:43:c1:48:b6:f9:8a:42:e7:97:88:fd:ab:
f3:09:64:b8:86:ab:52:1b:05:79:fe:ca:a0:7c:34:d0:ba:fe:
79:9e:18:d5:87:1f:d6:fa:0a:4b:70:06:a1:8f:f3:ce:4e:2a:
d8:c9:1c:ea:31:e8:fb:a2:66:2f:47:c1:20:08:e6:3f:05:b3:
53:75:d3:c0:c6:a1:c3:20:81:cd:ce:6b:3d:94:34:5d:47:c3:
d3:75:78:b7:7e:3c:e3:79:74:d1:b7:e2:67:ae:8d:b3:52:e3:
01:e7:f4:77:33:cb:74:84:ba:e8:b6:2a:97:af:a9:a5:04:db:
52:03:29:62:1e:2a:65:40:ef:17:4d:54:43:8e:d4:48:ce:a7:
81:77:16:f2:88:08:85:ea:3b:3b:41:2d:ca:94:d7:f2:ae:bf:
34:fa:0a:03:f6:bb:3f:b7:b9:f8:93:6b:77:62:07:c8:22:50:
4c:b1:6c:b8:a3:33:95:22:49:4e:82:88:d1:97:9c:c6:06:f8:
f9:6e:40:86:16:4f:92:91:47:72:2e:bf:88:3a:27:46:c3:d3:
3f:e6:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:40 2024 by rpki-client on console-ams.rpki-client.org