Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4DIJssvNwrW5_vBbDSqb35n0VpI.roa
File: 4DIJssvNwrW5_vBbDSqb35n0VpI.roa (raw, json)
Hash identifier: xdUKb1KWNzrmGrT22Gn295wOwrIVGAqxlCUH4TidAaQ=
Subject key identifier: E0:32:09:B2:CB:CD:C2:B5:B9:FE:F0:5B:0D:2A:9B:DF:99:F4:56:92
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01910304B0FAA6877F41A2BDE5EEFF1E20E4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4DIJssvNwrW5_vBbDSqb35n0VpI.roa
Signing time: Tue 30 Jul 2024 09:42:04 +0000
ROA not before: Tue 30 Jul 2024 09:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:04:b0:fa:a6:87:7f:41:a2:bd:e5:ee:ff:1e:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 30 09:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e03209b2cbcdc2b5b9fef05b0d2a9bdf99f45692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:96:a8:9f:b4:e1:2c:40:f8:09:25:bd:9c:
a3:9c:0b:b0:ac:6a:f4:11:c1:ec:17:d6:dd:46:06:
2a:95:fd:37:5a:7c:36:20:96:9e:00:ce:d2:17:01:
74:11:7a:f0:37:67:e9:e4:56:72:d4:d0:53:f4:ea:
1f:1d:f4:3e:9b:6a:45:5a:ae:9c:65:74:7c:07:15:
ee:9e:7c:a1:97:d0:cf:30:9d:77:7d:74:2e:f1:5e:
0c:42:c1:ed:3d:b4:01:15:3b:16:0c:e4:25:f8:84:
05:a1:41:fb:67:20:c9:23:3b:bb:a3:87:23:ac:36:
2b:de:7b:40:83:88:b7:89:1e:76:69:35:f1:4d:1e:
87:80:8f:e8:04:c4:33:5a:1d:59:a3:ec:32:10:f7:
87:fd:0d:b7:a5:96:ff:34:2e:34:76:8e:f3:7b:a2:
48:ca:8d:1b:26:15:25:bc:d7:c9:53:61:d9:24:e8:
9c:c2:59:3f:5a:8a:0b:d0:cc:3a:39:16:85:0b:d3:
93:7e:b2:b7:08:53:f9:ac:4b:b3:6f:ac:45:fb:b1:
27:97:c4:7e:97:18:0c:63:5d:7a:06:e3:1b:44:c9:
4b:f1:c1:71:61:47:4b:b5:4c:99:b3:57:3a:94:23:
75:72:91:c1:83:4d:b2:34:57:89:db:b4:4e:38:12:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:09:B2:CB:CD:C2:B5:B9:FE:F0:5B:0D:2A:9B:DF:99:F4:56:92
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/4DIJssvNwrW5_vBbDSqb35n0VpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.236.0/22
Signature Algorithm: sha256WithRSAEncryption
83:67:17:a3:4e:37:28:dc:08:ab:f2:78:de:b6:70:d3:18:71:
e6:1e:27:d3:06:c8:00:fa:f6:7a:46:0e:69:a4:ba:b5:9e:36:
84:d4:71:dc:d7:32:6e:02:64:cf:83:b1:04:08:e3:48:d8:a3:
8a:2d:5a:cc:5a:4b:fb:18:20:eb:98:c4:42:4c:1c:0e:ef:2a:
63:95:25:12:01:57:70:5b:0d:14:98:4f:3f:87:3a:cd:64:77:
4c:8f:b3:64:2d:db:ab:83:1b:42:cf:49:1a:3d:ab:b4:17:8e:
15:31:e9:eb:74:33:d9:cf:7b:07:f8:89:38:9d:80:94:89:8b:
ff:e5:6d:26:ac:d9:0a:69:ab:e2:89:95:39:59:02:b1:a2:20:
aa:c0:6b:b5:63:a0:f2:2f:c7:bb:ca:5c:66:93:10:db:71:d6:
6b:96:15:93:e8:26:2f:5f:4c:7a:96:55:8e:d8:4c:f9:01:2e:
24:c5:81:eb:fa:64:20:d5:92:0e:1f:e0:7e:e9:d4:d8:74:8e:
f2:f4:ce:c3:d6:f2:d5:a3:67:4f:60:03:62:72:83:81:e0:b9:
d2:9b:02:9b:17:b5:ee:7b:d1:59:b9:89:73:2a:b5:82:ea:ae:
07:42:87:39:96:37:6c:74:c2:e9:83:ea:d2:67:d1:c1:01:09:
1f:e8:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:43:05 2024 by rpki-client on console-fra.rpki-client.org