Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/S2fZs-VR-eebGiVR3rK_DqwXhPo.roa
File: S2fZs-VR-eebGiVR3rK_DqwXhPo.roa (raw, json)
Hash identifier: wIH0LExHe14CQWK6cY5RGN0R12MwcJUplRMlwf4Gm/k=
Subject key identifier: 4B:67:D9:B3:E5:51:F9:E7:9B:1A:25:51:DE:B2:BF:0E:AC:17:84:FA
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01931B79895DB09C0365DDF0AEE92D67DD12
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/S2fZs-VR-eebGiVR3rK_DqwXhPo.roa
Signing time: Mon 11 Nov 2024 13:46:10 +0000
ROA not before: Mon 11 Nov 2024 13:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 109.104.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:79:89:5d:b0:9c:03:65:dd:f0:ae:e9:2d:67:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 11 13:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b67d9b3e551f9e79b1a2551deb2bf0eac1784fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:da:45:42:f6:5c:79:e5:80:9c:20:49:01:
c7:08:ea:65:e4:08:32:82:66:9a:40:ab:cf:f0:a6:
a7:e9:c7:3b:e4:f6:4a:d5:9d:b4:44:be:ff:02:ef:
16:fd:a2:5e:e3:28:f4:aa:ba:84:71:d0:ba:66:d4:
f4:6a:69:b8:9e:89:5f:39:9d:42:98:9e:85:0b:7f:
77:5e:4e:54:eb:f1:ec:d6:57:5d:fd:35:3e:a6:76:
85:f4:76:a8:8b:c9:d8:73:84:48:e8:8d:af:d3:72:
6c:a8:3a:5d:0c:84:43:f9:10:3d:59:7b:53:88:d3:
81:e2:4a:cd:ce:80:14:eb:6d:d1:14:48:12:21:57:
dd:9d:1d:1d:dc:a1:50:dc:9c:ab:22:fc:4f:1a:7d:
47:ba:df:2d:ec:76:f0:53:f0:19:ad:be:b1:97:76:
fa:05:68:81:7c:a0:b7:72:6b:26:e3:17:39:2d:71:
51:ae:92:95:c9:d8:c8:56:3f:ae:1c:b1:31:22:67:
f0:7d:77:23:32:c8:5f:1a:0f:31:df:c8:33:61:26:
4c:ae:09:48:31:3c:2c:51:8e:f9:ed:7e:27:29:5e:
fb:1a:65:5f:ef:67:94:c8:1f:02:a7:4d:de:ae:eb:
76:c6:a4:15:fe:ef:f7:2c:82:5d:48:56:1f:22:60:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:D9:B3:E5:51:F9:E7:9B:1A:25:51:DE:B2:BF:0E:AC:17:84:FA
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/S2fZs-VR-eebGiVR3rK_DqwXhPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f9:70:54:75:7e:9f:9f:c2:7c:0f:48:aa:59:b7:a6:f2:43:
88:fd:9a:d4:10:4a:fa:ed:f9:ec:55:6d:c6:66:64:31:ef:f7:
07:48:1a:c9:40:a5:31:7d:79:bd:26:fe:d7:06:4f:4f:39:67:
8a:49:ce:44:f1:78:7b:68:c0:10:37:f0:96:d4:95:94:b6:00:
ce:ff:b0:93:51:cb:de:8e:0a:45:80:0a:c4:99:f6:dd:9e:19:
5c:e0:76:45:10:86:82:e8:0e:a8:19:7f:c1:2a:92:ed:8b:e5:
32:0a:ad:10:75:2c:45:cd:40:7f:cb:30:fc:cc:6e:a7:72:23:
f0:33:eb:48:dc:15:8d:06:0c:2f:1a:61:24:08:5b:10:f8:c9:
6a:0d:01:ce:29:e2:dc:9a:4a:2f:59:ea:ba:4c:e6:5f:02:ce:
ed:f1:2c:b7:43:47:53:bb:82:df:7f:1a:04:f0:e4:64:17:ff:
dd:a9:93:53:8e:ad:d3:58:bc:6c:cb:a7:6d:78:a7:03:55:82:
91:a9:a6:80:4b:27:ab:33:8a:c5:3d:7d:34:17:0a:57:57:25:
04:88:70:37:8f:54:9e:e0:9d:5e:1e:f2:9d:d6:4f:c9:fe:e8:
9c:ca:ee:a4:7c:80:9c:0c:cd:17:46:69:20:c7:86:b5:e3:f6:
4a:19:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:10 2024 by rpki-client on console-ams.rpki-client.org