Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v_agNYfGhZM2xMzvhKZ9ok8hntM.roa
File: v_agNYfGhZM2xMzvhKZ9ok8hntM.roa (raw, json)
Hash identifier: 5GAJSwxRMVkVi/H8EPuS/7qRVlAZ28+V1CxwdaQmZrg=
Subject key identifier: BF:F6:A0:35:87:C6:85:93:36:C4:CC:EF:84:A6:7D:A2:4F:21:9E:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01914B0B56CBB90CDD3E620AAFB2600A3120
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v_agNYfGhZM2xMzvhKZ9ok8hntM.roa
Signing time: Tue 13 Aug 2024 09:21:59 +0000
ROA not before: Tue 13 Aug 2024 09:21:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 94.156.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:0b:56:cb:b9:0c:dd:3e:62:0a:af:b2:60:0a:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 09:21:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bff6a03587c6859336c4ccef84a67da24f219ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:18:a5:db:1e:ff:51:a2:6c:49:c6:e5:9c:d7:
ea:7d:89:74:33:72:4a:39:3f:a5:86:c1:5c:4c:38:
94:d7:ae:df:4f:f0:30:7a:e7:0d:3e:4d:b6:0b:5f:
1a:e6:df:a5:91:24:85:a4:2c:3d:43:07:37:79:21:
67:9c:6d:24:b5:42:30:42:b2:60:57:43:83:59:73:
1c:96:e7:70:88:c8:13:d1:52:bb:8a:f5:8f:fb:f8:
a9:d7:6b:49:cb:6d:fe:36:6b:9e:90:94:35:df:be:
5b:98:f0:da:23:1d:c0:b1:db:a7:f7:b6:56:8d:5c:
94:4e:75:4f:12:41:86:3b:00:c3:99:2a:00:f9:e5:
e6:4a:77:03:9c:53:0c:03:be:18:47:7a:03:06:06:
24:fd:a3:63:40:33:8c:54:4f:0c:4e:bb:b0:72:da:
a2:59:bd:57:df:30:59:3a:36:25:42:91:15:9b:9a:
84:69:3d:26:a7:7c:e8:90:74:f7:8d:e9:1f:c5:5e:
7d:99:ac:47:8e:d9:ca:3e:30:8e:0a:a3:8e:27:0b:
43:e6:05:a6:29:a8:d2:1b:27:f0:d6:ce:1b:57:2b:
04:da:c8:1c:73:f4:d3:e9:68:07:8b:88:87:57:24:
24:e6:67:30:42:97:81:9c:ff:58:9a:e8:c6:55:68:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:A0:35:87:C6:85:93:36:C4:CC:EF:84:A6:7D:A2:4F:21:9E:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v_agNYfGhZM2xMzvhKZ9ok8hntM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
89:89:05:83:64:8b:10:ad:47:36:3e:63:83:66:9b:81:2b:5d:
6e:77:58:e9:b1:b2:07:df:b9:e3:57:4f:34:b8:51:fb:cf:1a:
2b:e6:7d:bd:0e:eb:32:27:6d:e5:6f:ab:7a:e5:36:73:d0:e2:
02:42:a9:7b:7d:bb:1c:c8:61:31:d9:57:88:57:ac:08:a0:70:
b7:2e:14:03:96:8a:9f:6b:9e:fb:66:42:46:0f:ff:4c:ce:85:
10:65:1b:17:0e:51:c3:b1:fb:15:94:ee:f4:88:16:20:f2:f2:
11:2a:01:dc:ea:2c:54:ef:56:16:b5:7f:9f:15:4e:7e:d1:d7:
2f:a8:df:90:04:43:cb:94:4b:d2:a5:64:c1:0f:cd:b0:3f:46:
72:30:d2:c3:ab:ec:0b:81:91:81:e1:67:21:e2:73:9c:20:1a:
0f:3a:ec:30:9e:0c:1d:a2:32:8a:ef:f9:56:fb:bc:a5:23:d7:
9a:e1:3a:36:be:7d:a8:a7:05:32:3a:d4:2c:62:bb:d4:0f:8f:
66:32:da:e6:ad:2f:c9:1d:02:7a:5f:6d:61:17:9c:9f:b4:3a:
6e:7e:7a:a3:c9:fb:2a:9e:e1:bd:c3:43:b8:f7:ab:6e:3e:48:
b5:71:6a:00:7c:fc:32:b2:96:c6:d3:50:07:78:55:5b:d5:9a:
5e:25:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:56 2024 by rpki-client on console-ams.rpki-client.org