Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ni424xmBmva3YqbdYD56m0-yoyY.roa
File: ni424xmBmva3YqbdYD56m0-yoyY.roa (raw, json)
Hash identifier: KQc9wRzNZBdK4U7XZxUHn+4oZPc0ZzDapj7My7EjyCY=
Subject key identifier: 9E:2E:36:E3:19:81:9A:F6:B7:62:A6:DD:60:3E:7A:9B:4F:B2:A3:26
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019141735B214B1FE964B8A939E667ED54A2
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ni424xmBmva3YqbdYD56m0-yoyY.roa
Signing time: Sun 11 Aug 2024 12:39:24 +0000
ROA not before: Sun 11 Aug 2024 12:39:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 45.138.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:73:5b:21:4b:1f:e9:64:b8:a9:39:e6:67:ed:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Aug 11 12:39:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e2e36e319819af6b762a6dd603e7a9b4fb2a326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:0b:fe:c9:de:73:ff:2b:61:7e:7c:2b:5c:
98:e5:60:26:3e:11:e1:bf:3a:b0:2d:c3:45:39:23:
af:80:ef:94:82:7f:0c:4f:68:21:a0:f6:df:dc:85:
10:f8:2a:83:86:a1:9a:ee:37:73:14:f2:0d:2e:34:
e4:2e:1a:27:ca:02:ce:a8:7f:12:ab:39:ea:af:1b:
40:65:bc:90:44:9a:61:31:ee:c7:5d:ca:16:5a:a5:
2d:79:5b:ba:95:4e:1f:eb:33:5e:bf:1a:9a:7b:ba:
7f:27:79:c0:c3:99:a7:a0:7e:03:48:af:cd:09:61:
44:11:f1:2c:9b:df:30:7b:35:4d:7e:1f:cc:c0:ea:
11:03:08:4b:67:77:9b:cb:00:ae:c5:c6:34:3f:86:
00:11:0b:64:f0:aa:fb:64:96:8c:a4:ad:86:bf:35:
86:32:cb:c9:6c:53:e7:59:b4:1c:21:cf:2b:00:3b:
d7:c6:27:36:67:de:54:cb:a8:cf:57:46:c7:18:4d:
75:76:63:4e:05:0b:58:34:30:6a:5f:94:2f:c0:4c:
1b:c7:7d:28:7c:47:32:a7:87:d7:b5:75:7b:01:28:
07:c0:15:e8:97:82:73:a6:47:96:39:d8:74:23:cf:
41:4a:8c:fb:6d:7e:5e:dd:7e:3b:b2:03:8c:87:db:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:36:E3:19:81:9A:F6:B7:62:A6:DD:60:3E:7A:9B:4F:B2:A3:26
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ni424xmBmva3YqbdYD56m0-yoyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.99.0/24
Signature Algorithm: sha256WithRSAEncryption
82:07:54:4d:8e:ee:e2:bb:0c:8f:8f:12:ae:22:ec:2f:4f:c6:
52:78:6a:e6:e3:4f:b2:49:6e:c5:0e:c3:22:ec:b2:97:99:29:
cd:6b:5f:63:e0:a1:a1:29:08:b8:17:af:07:92:71:86:2d:e6:
df:cb:30:16:92:3b:66:c1:b1:5e:26:89:aa:c2:d7:73:ab:66:
32:65:1d:b6:1e:ab:9e:9c:fc:52:7c:ff:53:ed:2c:8b:29:90:
62:ca:de:da:c3:4b:c2:81:ac:34:d8:82:c4:bd:9e:fa:02:7e:
c7:52:f2:8b:d1:6e:99:5e:eb:db:7a:94:e4:a5:1d:1e:55:d2:
56:f8:8b:3a:db:f5:4e:23:2b:31:ad:18:21:4d:14:88:73:8b:
2e:84:80:bc:aa:ba:06:dd:e0:ab:5b:fd:8f:f8:93:53:00:6a:
44:c2:7e:bd:2d:96:05:bd:24:7b:e3:51:36:61:2f:61:d6:03:
c2:eb:10:01:ab:c4:2c:38:62:fd:c9:88:b8:52:30:8a:f4:bf:
f1:17:23:f0:3b:a7:72:7e:f5:a4:cb:01:e6:4d:86:84:0d:5e:
dd:5a:03:49:5c:4b:49:1d:b0:7b:7a:87:44:d6:46:91:d4:6e:
09:e6:7f:fd:a7:27:6e:2d:96:ee:a4:81:ea:08:d7:dd:df:c8:
77:8d:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:28:57 2024 by rpki-client on console-fra.rpki-client.org