Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vYx0OabfbaikXt9SPn6-6fjsqoM.roa
File: vYx0OabfbaikXt9SPn6-6fjsqoM.roa (raw, json)
Hash identifier: QpWjhiKGgacoM6IzH6EHVG5hUaFeP2pjto/9L1sOdMQ=
Subject key identifier: BD:8C:74:39:A6:DF:6D:A8:A4:5E:DF:52:3E:7E:BE:E9:F8:EC:AA:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019222C1F6B77BBAC4A32D6904921586B1E9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vYx0OabfbaikXt9SPn6-6fjsqoM.roa
Signing time: Tue 24 Sep 2024 06:39:49 +0000
ROA not before: Tue 24 Sep 2024 06:39:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401120
IP address blocks: 45.88.88.0/24 maxlen: 24
93.123.39.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:c1:f6:b7:7b:ba:c4:a3:2d:69:04:92:15:86:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 24 06:39:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd8c7439a6df6da8a45edf523e7ebee9f8ecaa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:25:a1:65:7e:3b:c7:f4:4f:9a:c9:f0:5a:
fd:82:18:c3:11:e3:86:73:f4:5e:a3:1a:45:8f:05:
90:36:5e:11:f1:90:65:7e:d2:44:fd:25:e1:83:16:
84:77:fa:a9:15:e8:96:08:92:b8:67:b4:74:4f:d7:
a5:cd:cc:fb:49:31:6e:7b:cd:b0:8f:ef:14:20:6e:
f8:ee:7a:c3:f4:8f:1f:e6:c5:99:cb:9a:be:ba:0c:
59:df:ce:91:80:99:32:d4:5f:8f:66:39:0d:89:26:
c8:54:dc:c9:88:74:55:40:43:7e:26:71:97:11:77:
28:d5:05:56:4a:53:fa:67:9c:1e:b5:49:6d:04:e8:
1a:65:1c:e5:29:28:04:ec:8f:cb:e0:56:8a:15:e1:
c2:08:67:34:2b:4e:1d:ed:3b:32:b5:4b:bb:c3:4b:
94:47:d3:e3:84:08:86:61:e3:cd:94:a1:0b:4c:f6:
a7:6e:7c:08:8e:0a:9b:8a:5f:bb:08:1f:0e:2f:0b:
13:57:c9:50:5b:07:54:a3:f1:50:53:aa:b7:b4:a9:
bb:e2:7b:a4:7f:d1:bd:89:e2:d6:50:63:59:1d:8b:
92:ef:d8:e1:bf:55:af:c5:20:d7:a5:43:58:0d:e6:
9a:81:e5:fd:16:89:2a:93:e7:c0:1e:2f:6c:12:29:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8C:74:39:A6:DF:6D:A8:A4:5E:DF:52:3E:7E:BE:E9:F8:EC:AA:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vYx0OabfbaikXt9SPn6-6fjsqoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
93.123.39.0/24
94.156.104.0/23
94.156.166.0/23
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8b:b0:32:06:d1:80:8a:c4:44:f5:72:37:0c:c2:2e:8f:63:
a1:f9:27:a5:1e:72:da:f0:aa:9b:55:97:52:bf:db:4a:85:54:
8c:42:a8:2b:69:33:23:ea:a4:4f:0f:80:9f:b3:0e:a4:09:71:
83:be:c5:63:5c:00:e4:35:e5:13:b6:71:e7:5c:78:22:b4:d2:
b7:43:de:b6:7d:59:5a:77:b7:3c:20:d5:bc:54:1a:9c:8e:c9:
8e:f6:07:44:05:c7:e1:86:4c:68:de:c3:4b:6e:36:d5:7a:08:
74:ab:e1:82:17:b4:60:39:b5:7d:71:84:a4:48:f4:96:75:38:
e3:c6:84:2a:b0:11:0d:7c:dc:d1:a9:11:f0:40:be:96:97:05:
26:10:69:04:b7:a2:a8:14:95:4c:dd:f6:c7:32:40:cb:8a:b4:
f1:8c:af:d2:33:f2:94:96:f8:77:53:17:35:69:08:e6:d8:66:
2f:c0:a5:0e:26:e0:a9:ea:b9:47:0b:67:39:aa:86:81:0d:d5:
2e:14:58:b4:ea:18:0a:ff:fe:db:74:ed:0d:36:91:2f:38:d0:
cc:80:f5:1f:c3:d2:54:89:02:dd:db:33:1b:ea:d8:43:fe:9b:
a2:15:c1:88:28:e6:28:99:6a:30:85:89:e5:e5:c2:c8:4e:d9:
48:58:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:35:58 2024 by rpki-client on console-ams.rpki-client.org