Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wTaTDt-Vv6g4akoUoZOidc6Bqgs.roa
File: wTaTDt-Vv6g4akoUoZOidc6Bqgs.roa (raw, json)
Hash identifier: 8Y2K4u05A9OIgpoz81EaWKJa5r30ooo1bglTSZABwQU=
Subject key identifier: C1:36:93:0E:DF:95:BF:A8:38:6A:4A:14:A1:93:A2:75:CE:81:AA:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B3E8E510C397897960530A3775C65287
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wTaTDt-Vv6g4akoUoZOidc6Bqgs.roa
Signing time: Tue 22 Oct 2024 11:07:17 +0000
ROA not before: Tue 22 Oct 2024 11:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215316
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:e8:e5:10:c3:97:89:79:60:53:0a:37:75:c6:52:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 11:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c136930edf95bfa8386a4a14a193a275ce81aa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:3f:83:c9:c4:eb:47:f1:e1:2e:53:1c:13:
87:ac:d9:b1:47:b5:78:d5:e9:89:ca:15:38:6c:de:
8a:cb:e0:c2:99:be:e8:04:aa:7e:79:ff:e8:e2:bd:
92:3d:3d:98:63:9b:75:7f:62:19:3f:26:ad:eb:ed:
eb:98:be:b0:92:e8:06:53:0c:6a:47:29:19:d1:33:
fa:5c:a5:6f:4f:4d:10:71:e0:ac:56:15:40:3e:15:
ec:e4:20:c1:23:fb:e7:42:42:85:e4:fe:a0:74:81:
47:99:8e:05:c8:ee:f3:41:1b:c8:fe:bc:eb:e9:c1:
3d:c8:be:d4:0e:50:5c:11:7e:13:c4:13:1f:f2:67:
48:47:18:1f:6a:f3:33:62:58:67:39:ab:59:44:88:
36:c2:2b:8a:03:0c:27:c0:0a:c5:c5:37:5c:19:6b:
63:98:8f:85:0a:62:5b:03:af:09:18:ea:a6:a2:c4:
eb:71:1b:93:6d:b4:e5:03:16:5b:cf:65:31:7f:d8:
7c:a3:ea:2f:b5:bd:3e:ed:ed:8f:d2:8f:70:15:31:
b1:ba:de:8d:5f:f5:e1:09:59:b4:56:3a:ca:7d:0f:
c2:03:dc:d4:f2:5d:0d:a2:9a:02:ad:93:87:ac:20:
4a:3c:24:b4:12:87:72:73:e9:ed:48:1e:7b:7c:a9:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:93:0E:DF:95:BF:A8:38:6A:4A:14:A1:93:A2:75:CE:81:AA:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wTaTDt-Vv6g4akoUoZOidc6Bqgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:43:96:b2:56:cd:9c:0d:18:b6:ce:ce:89:d2:32:d3:96:17:
53:6c:33:09:ae:90:de:72:3e:eb:8c:92:65:3b:66:f0:cf:2f:
76:b7:95:be:e4:ed:35:04:9e:02:24:ab:4b:bf:74:e2:df:56:
76:20:8b:50:09:80:da:bd:87:ea:45:ce:12:f4:8c:44:0d:ab:
ca:5b:92:49:e7:30:f7:9e:8e:df:67:2a:d4:f1:07:21:5a:15:
8f:62:95:c7:d4:63:f3:79:00:92:9d:77:5d:3c:92:03:b8:0d:
60:c0:68:6e:67:ea:eb:9d:24:6f:c1:63:22:e5:65:00:9f:4c:
2e:f1:b6:88:e0:b7:1b:8a:ba:95:19:cf:bf:6d:e1:bb:39:b1:
f6:94:f8:e0:05:99:3a:38:5c:a6:3a:e2:f5:24:7d:32:23:8b:
98:cf:df:65:d1:5d:46:24:50:5a:5d:d2:f3:ab:39:a0:83:76:
b5:7b:dd:b5:07:e0:5b:66:f7:d7:86:6b:f6:eb:d0:06:69:1d:
25:b6:bf:01:9e:55:b3:9e:23:dc:6f:30:83:fc:23:a5:19:0a:
d1:eb:41:b7:60:58:b8:1b:be:57:0e:f7:1c:c8:2e:f6:1c:fc:
e9:17:40:fe:23:60:1e:d7:43:02:0b:3e:d5:12:78:46:f8:68:
2c:b4:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:19 2024 by rpki-client on console-ams.rpki-client.org