Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/mS64GVdRbmaOQwT8ImvfKnitDBA.roa
File: mS64GVdRbmaOQwT8ImvfKnitDBA.roa (raw, json)
Hash identifier: ovSHOD234wFcNgW14nayu5qbcGWsMGE4HicyOyV0EnE=
Subject key identifier: 99:2E:B8:19:57:51:6E:66:8E:43:04:FC:22:6B:DF:2A:78:AD:0C:10
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 018EFCF1CC8D0130A473013D5EDADC914F74
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/mS64GVdRbmaOQwT8ImvfKnitDBA.roa
Signing time: Sat 20 Apr 2024 19:18:08 +0000
ROA not before: Sat 20 Apr 2024 19:18:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215639
IP address blocks: 45.10.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:f1:cc:8d:01:30:a4:73:01:3d:5e:da:dc:91:4f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Apr 20 19:18:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=992eb81957516e668e4304fc226bdf2a78ad0c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:92:e1:62:4d:66:10:10:62:c7:d2:bf:e7:
8d:dc:c8:8f:b7:00:ed:78:64:cd:73:6a:71:fd:77:
2c:12:cd:93:e4:6b:32:30:4f:37:57:72:b5:eb:1d:
99:7d:bf:b0:63:e8:8f:24:33:c7:b0:01:52:55:88:
59:a3:31:fb:d8:19:9c:ad:dc:22:4d:75:0d:51:f7:
09:7c:a1:4f:d1:78:80:15:04:b8:58:ca:99:ae:8d:
d7:49:90:23:b5:c4:dd:1f:ca:de:ed:5e:fe:3e:80:
07:a6:bd:cd:26:82:c6:fb:4c:dc:7b:d6:c0:b8:dc:
5b:ed:c0:05:ee:a7:9a:7a:9d:6a:c8:98:a0:37:67:
db:f2:9e:a6:9e:23:e0:29:bf:8d:1b:e6:0b:fb:14:
59:4b:60:b7:77:e9:6e:80:69:79:4c:23:fd:26:81:
e7:b5:ef:39:46:e6:0e:84:b6:ce:5a:62:ed:4b:1f:
24:99:de:bc:71:ed:8d:e4:8a:ef:23:69:3e:5e:b3:
c8:81:35:10:3e:f8:1b:76:19:fc:8f:d7:6f:b3:19:
54:b2:f1:f9:7d:99:62:16:a9:9d:44:a0:24:fe:d1:
1e:3c:f2:4a:de:1f:4a:d5:e0:ac:41:86:70:05:25:
97:d6:37:de:67:d2:ff:9b:86:14:10:21:7a:9c:e5:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:B8:19:57:51:6E:66:8E:43:04:FC:22:6B:DF:2A:78:AD:0C:10
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/mS64GVdRbmaOQwT8ImvfKnitDBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.36.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:22:6f:66:00:e1:38:d9:e1:00:a4:b2:fd:71:54:0c:70:
f3:de:81:f0:b6:59:2c:54:df:9c:e8:0c:95:a0:de:2e:62:79:
b1:7c:f4:ec:f8:dc:be:93:31:5d:31:3a:14:15:d0:8e:80:78:
0a:d2:a8:a0:e0:84:6f:7a:63:fd:84:94:7b:30:24:fd:1d:86:
0f:fe:0e:80:8e:2e:82:30:de:7d:11:c5:3f:a9:bc:4d:e3:a4:
cc:a2:ff:8e:11:10:3f:45:30:14:ee:17:02:1d:8e:de:05:10:
61:67:b8:f1:75:36:d4:d1:86:08:ee:98:1d:3d:77:c1:9e:87:
52:3e:d6:ca:79:56:4f:62:9e:ee:64:5f:3c:29:a3:05:c6:1a:
d3:cd:ce:6c:37:80:6d:b5:97:0b:27:2c:13:c7:fa:96:4b:d4:
6e:52:7d:f8:e4:3a:d3:75:11:49:a8:9b:17:2d:8e:cf:9c:e3:
ab:53:79:d3:44:76:3f:e4:13:50:bb:81:72:31:03:55:ac:88:
51:b7:0f:9a:cc:90:63:b7:2a:bb:0a:43:bb:fc:65:9f:9c:2e:
90:fe:d5:d2:aa:92:30:cc:94:4b:37:7f:b7:8e:8b:a7:08:68:
e2:88:84:49:54:d2:f2:09:e7:2d:c6:98:04:3f:b8:9a:15:db:
aa:df:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:50:55 2024 by rpki-client on console-fra.rpki-client.org