Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSD7dBW77loWTOs-uF3MvNy-oF4.roa
File: wSD7dBW77loWTOs-uF3MvNy-oF4.roa (raw, json)
Hash identifier: 4+UKCtKsprJzt2QLHna8MHb5DgytGF1lmKCG/ZE0bGk=
Subject key identifier: C1:20:FB:74:15:BB:EE:5A:16:4C:EB:3E:B8:5D:CC:BC:DC:BE:A0:5E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190FD81DFA25D0350AEE04E0122D28D934F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSD7dBW77loWTOs-uF3MvNy-oF4.roa
Signing time: Mon 29 Jul 2024 08:01:05 +0000
ROA not before: Mon 29 Jul 2024 08:01:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400536
IP address blocks: 93.123.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:81:df:a2:5d:03:50:ae:e0:4e:01:22:d2:8d:93:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 08:01:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c120fb7415bbee5a164ceb3eb85dccbcdcbea05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:d1:62:1e:2d:52:56:f3:8f:f7:54:49:52:
89:05:97:41:45:c9:1f:c4:1a:e8:e4:4b:85:83:7b:
cb:d5:3c:0e:bc:ef:df:79:d1:98:e6:df:34:f9:44:
c7:e4:8b:cb:74:c4:c1:67:53:17:91:20:37:f8:00:
17:9e:a3:06:88:e1:0a:7d:ad:a1:5e:db:19:86:e5:
0f:07:71:ad:01:37:96:16:22:5d:3c:0e:80:6b:00:
93:51:a7:7d:4d:0f:69:87:39:07:f4:35:ed:04:ca:
80:1f:2b:af:21:c6:1f:eb:5a:eb:39:0b:e2:f5:66:
15:10:e2:4a:ae:92:c5:b8:7c:fa:a5:e0:c4:70:ed:
2f:77:4d:1c:4a:06:24:b6:46:ca:59:13:fa:3c:6a:
5a:e6:55:dc:f5:1f:26:95:24:ab:46:c1:88:bc:98:
5f:60:18:8e:73:c5:ac:b9:db:ce:a7:44:ff:8a:98:
8c:d7:7c:37:38:61:45:a6:3f:f6:03:34:95:0e:f9:
c9:d7:b0:bf:1b:85:25:20:26:87:d4:c6:5e:b1:c7:
f0:00:fa:e6:08:31:c9:90:45:2e:7a:d2:e1:d0:24:
79:21:df:97:c7:4b:95:51:f5:da:c2:cf:1b:b4:e0:
1a:c8:87:fc:76:1c:bd:d7:d6:2a:3a:7d:45:9a:c9:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:FB:74:15:BB:EE:5A:16:4C:EB:3E:B8:5D:CC:BC:DC:BE:A0:5E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSD7dBW77loWTOs-uF3MvNy-oF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:00:64:4e:50:dc:d7:08:40:e4:a9:55:ae:a9:00:c2:28:34:
59:06:5e:1e:c0:b1:d3:35:60:7a:ed:08:65:e0:78:7d:3f:a2:
83:02:14:7e:2d:2a:72:45:4e:0d:ad:7e:b6:47:bb:dd:d9:c0:
56:30:f4:c0:6f:05:4e:2b:7c:45:66:5d:da:ec:bd:4c:07:c5:
a6:6a:01:f4:26:cc:61:04:29:61:24:08:79:dd:40:9e:39:91:
22:22:77:d8:00:a1:a5:2f:af:1e:31:bc:ad:e2:7f:ff:ef:7b:
13:55:2e:94:fa:4f:e9:a0:97:5d:d4:af:24:52:b0:29:dc:06:
4a:86:bd:62:17:97:cc:4a:67:05:08:1c:e1:de:0c:f2:27:aa:
62:07:52:7a:e8:0b:21:21:5d:37:42:2d:95:a7:30:18:dd:bc:
e8:0c:06:c6:b5:21:05:13:f0:52:c3:02:9a:53:4d:a3:df:92:
40:9a:81:07:65:e4:d5:dc:d5:bb:fa:95:cb:d4:ea:70:67:9d:
c9:60:f5:6a:17:cb:f2:ee:cb:07:81:7b:7c:e7:a0:61:e2:c6:
b8:3a:d4:a0:ab:29:7e:1a:a8:01:44:fe:4b:fa:cc:25:e6:33:
c3:f4:98:25:a5:6c:06:78:b8:af:d0:80:24:77:be:27:50:02:
0d:13:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:08 2024 by rpki-client on console-fra.rpki-client.org