Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/ANM-v9-I63cEw8UYmAlep2Pbk70.roa
File: ANM-v9-I63cEw8UYmAlep2Pbk70.roa (raw, json)
Hash identifier: U4kwAhVQkG03CjYTrLkiTa8Bs9RnjuessfCM72NjLh0=
Subject key identifier: 00:D3:3E:BF:DF:88:EB:77:04:C3:C5:18:98:09:5E:A7:63:DB:93:BD
Certificate issuer: /CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
Certificate serial: 018D65E2C31F88D1F87480C22C442CE8340E
Authority key identifier: 55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/ANM-v9-I63cEw8UYmAlep2Pbk70.roa
Signing time: Thu 01 Feb 2024 18:16:16 +0000
ROA not before: Thu 01 Feb 2024 18:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 159.253.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:e2:c3:1f:88:d1:f8:74:80:c2:2c:44:2c:e8:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5529dada5c1f4367a33cbc75d4ce9a9001783294
Validity
Not Before: Feb 1 18:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00d33ebfdf88eb7704c3c51898095ea763db93bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:c0:c8:40:d7:94:f3:61:b4:8c:32:40:60:
9e:ea:e3:62:05:48:84:5f:bd:48:6d:a9:de:f4:09:
70:95:14:70:72:76:fb:85:6f:19:a7:44:0c:e5:cd:
22:31:c1:c2:98:9e:3e:f9:1a:44:fc:92:6b:e3:a4:
21:59:84:50:5f:21:ac:8c:38:02:6d:50:db:1b:5f:
d1:1f:98:20:7b:02:28:ba:e3:b4:f9:f6:d7:42:26:
8f:07:4f:5d:65:98:9e:aa:4b:48:95:fb:ba:13:fb:
a3:3a:45:26:ea:22:ec:35:09:1d:b3:e8:9e:d6:57:
2c:43:35:88:1a:b8:24:82:26:9b:21:a2:2a:fc:d1:
c4:b6:8d:4f:a3:04:4d:5a:6e:7f:72:f3:10:fe:49:
bf:c2:46:fb:61:2c:1d:97:83:6e:b5:1b:6b:22:7f:
63:3a:0d:34:6c:cd:b7:ab:80:89:e2:e1:d1:3b:69:
2f:56:3b:17:65:b3:28:e3:52:7f:d4:12:a8:c5:a5:
9b:98:a9:11:52:94:27:5b:d4:67:9f:03:c4:45:da:
30:e1:2e:5c:f8:68:d4:8c:8f:e2:7d:e9:3e:a0:8b:
1e:e7:0c:17:99:05:e9:9a:4e:53:fb:70:06:d4:d6:
4e:3c:52:ea:4b:73:43:c3:1f:6a:0f:df:af:5a:b5:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:3E:BF:DF:88:EB:77:04:C3:C5:18:98:09:5E:A7:63:DB:93:BD
X509v3 Authority Key Identifier:
keyid:55:29:DA:DA:5C:1F:43:67:A3:3C:BC:75:D4:CE:9A:90:01:78:32:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSna2lwfQ2ejPLx11M6akAF4MpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/ANM-v9-I63cEw8UYmAlep2Pbk70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44ecc3-1525-45a6-9248-99528cf45a98/1/VSna2lwfQ2ejPLx11M6akAF4MpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.120.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:68:29:d7:82:ec:68:f5:27:08:3f:b8:27:f8:ab:97:d3:d7:
f9:8d:a4:0e:13:b6:fc:80:61:1f:50:e1:8b:2a:ff:43:c7:d7:
29:0e:bd:37:d6:84:d4:ac:0c:28:52:46:17:07:ee:b3:ec:f0:
34:f6:4f:0b:9c:05:d5:0f:27:46:d5:c8:60:7b:99:95:e2:a4:
f6:e4:41:57:00:02:67:f4:6d:4f:b9:f6:42:04:bc:b8:55:73:
c1:1b:b3:f3:71:92:71:6e:ee:04:a2:2d:83:eb:99:c7:40:bc:
7e:b8:86:80:99:ad:11:49:e8:c8:99:e4:fa:71:da:fb:f3:06:
1e:ec:be:f0:ed:01:0b:ef:d8:62:2f:20:af:b5:4a:fb:53:5c:
c1:9d:fb:f4:ee:37:79:20:38:a8:cc:cb:6c:2a:24:02:15:10:
41:ae:73:09:56:d8:56:e4:d8:bb:0c:f8:62:fa:99:53:12:3b:
02:c8:1a:41:d0:76:20:98:c7:27:38:87:e0:92:e3:43:20:d6:
50:5b:17:0b:1d:38:b6:f1:fd:58:45:8e:0d:92:ff:05:d1:52:
04:8f:fd:c8:94:6e:9f:5d:99:73:b6:b8:f8:3f:19:e3:69:2b:
c7:2b:9f:40:f7:43:3d:a6:1c:ee:f9:68:26:92:35:7f:94:bd:
69:42:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 12:06:22 2024 by rpki-client on console-fra.rpki-client.org