Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/aNMSYQbhe9W00nQs_Qy5NjrXt1Y.roa
File: aNMSYQbhe9W00nQs_Qy5NjrXt1Y.roa (raw, json)
Hash identifier: 1eMwPM/+L7oDLGcp3KOyRoSWbmrJY07Zca4lje8hpo0=
Subject key identifier: 68:D3:12:61:06:E1:7B:D5:B4:D2:74:2C:FD:0C:B9:36:3A:D7:B7:56
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019302001A2447A637AEE4C019AEA1631E0F
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/aNMSYQbhe9W00nQs_Qy5NjrXt1Y.roa
Signing time: Wed 06 Nov 2024 15:03:01 +0000
ROA not before: Wed 06 Nov 2024 15:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62356
IP address blocks: 185.39.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:00:1a:24:47:a6:37:ae:e4:c0:19:ae:a1:63:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Nov 6 15:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d3126106e17bd5b4d2742cfd0cb9363ad7b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:ee:5a:7c:ec:00:71:59:bd:39:c4:a2:7c:
92:c5:95:89:92:1b:93:d4:5a:0c:80:16:a4:cd:1b:
9d:a4:c1:96:e2:79:d9:d5:14:e5:47:73:71:51:41:
f7:8e:13:0b:3a:68:f3:7b:c8:34:e4:ad:b5:72:01:
d6:36:67:7e:cf:83:ad:0e:26:16:99:42:b9:57:b2:
e8:94:e8:50:be:3b:d8:3c:f7:2e:2b:80:a1:c9:56:
fb:de:86:42:c5:35:4a:c7:71:fb:9a:a4:0f:1b:e6:
b4:99:9e:ff:b0:21:93:24:8e:d5:10:b3:c9:9a:4e:
4f:61:86:78:89:01:a3:33:41:30:52:c0:d4:ac:36:
d6:79:15:88:fd:3d:dd:db:3a:f3:8d:8e:bf:70:53:
bc:8f:e3:20:e6:b4:0f:8a:4b:87:a4:99:b1:e8:eb:
1e:d3:28:1b:f1:d8:1c:bb:b1:31:0f:c7:02:bf:ca:
81:6e:9c:ca:51:6d:fa:6d:b6:bd:f4:d8:a9:72:95:
29:e8:c8:39:5b:94:c7:73:07:4f:a6:54:a3:2b:28:
76:0a:03:d7:ea:87:66:6b:9a:73:ff:9c:75:71:c1:
24:60:59:a5:5f:e0:47:1c:17:a7:bc:8c:0d:6f:ac:
40:f2:98:ad:1d:aa:36:2c:40:38:1b:5f:18:4c:ac:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:12:61:06:E1:7B:D5:B4:D2:74:2C:FD:0C:B9:36:3A:D7:B7:56
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/aNMSYQbhe9W00nQs_Qy5NjrXt1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.4.0/22
Signature Algorithm: sha256WithRSAEncryption
66:77:ae:8d:e3:c4:dc:b4:e0:3e:87:89:ca:75:95:6e:be:b3:
a1:96:19:17:89:0e:65:17:11:00:d1:02:2a:85:f8:8c:08:ce:
e2:67:4c:d4:d9:5e:41:cb:e9:d2:0e:ff:cd:25:18:b2:24:17:
0b:7d:3a:20:3b:6c:28:f5:02:a1:dc:c8:29:81:ba:b3:8e:37:
06:bd:dc:78:f8:67:32:e7:83:45:c9:03:49:ed:f3:b1:ee:0b:
d2:52:4d:9b:12:d7:f9:36:c9:65:8a:5f:49:8c:7b:50:a1:ed:
22:37:02:f3:3c:f2:c4:08:1b:84:cc:d0:76:99:50:b0:a0:f0:
f6:7c:76:ea:4a:ad:bd:f1:1e:e8:b2:f5:be:02:78:b3:95:91:
83:6a:b2:e0:5f:3f:a9:aa:4f:ed:34:ee:10:b6:b4:46:55:ef:
ac:27:a6:9d:0b:d6:63:04:cd:c8:8c:d9:ee:37:18:aa:20:bc:
2b:6e:23:eb:40:57:df:bb:03:71:32:2b:89:29:b9:e0:da:9f:
9c:cd:59:3e:28:2f:6c:de:3d:b0:7e:1c:ba:dc:8b:be:00:fa:
3c:29:48:e2:e4:54:a9:04:97:2e:64:83:0f:89:ba:05:95:d2:
71:2a:d6:ce:73:d0:24:8a:2a:5c:d6:6b:75:4f:e3:1c:99:ad:
2a:63:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:03 2024 by rpki-client on console-fra.rpki-client.org