Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SWVXnO0nadsmvoTtKx7_jiKyxjw.roa
File: SWVXnO0nadsmvoTtKx7_jiKyxjw.roa (raw, json)
Hash identifier: 8+zBT7r6VrNaskkXCczHbicW+6CIkBeo3prvh2HcdFY=
Subject key identifier: 49:65:57:9C:ED:27:69:DB:26:BE:84:ED:2B:1E:FF:8E:22:B2:C6:3C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F0B2BC5B2295F41A659A8BBF27CBD7C64
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SWVXnO0nadsmvoTtKx7_jiKyxjw.roa
Signing time: Tue 23 Apr 2024 13:36:09 +0000
ROA not before: Tue 23 Apr 2024 13:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212669
IP address blocks: 109.176.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:2b:c5:b2:29:5f:41:a6:59:a8:bb:f2:7c:bd:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 13:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4965579ced2769db26be84ed2b1eff8e22b2c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:b3:98:bb:9d:c6:5c:3d:0a:4d:78:06:ac:
0d:e0:02:d4:b2:92:0a:8c:df:b2:1a:39:6c:3f:13:
72:36:ad:77:87:4d:d3:2f:ac:c6:ea:f7:ab:7b:dd:
63:93:cc:2d:14:c0:52:3a:f8:ae:db:18:13:8d:ee:
53:16:1e:5c:db:a3:29:bf:16:aa:f5:33:b6:b1:a4:
b4:38:53:7b:af:0e:bf:5c:1d:70:64:e5:33:d7:2d:
18:16:6b:8e:e5:1b:aa:0f:8f:98:13:67:7d:ed:31:
75:e2:53:cf:1a:62:91:da:91:1b:c3:ca:5e:3c:e9:
29:ee:d2:8a:70:62:5b:7f:5d:09:df:5b:07:24:fa:
93:a7:66:b8:f5:43:2d:6c:dc:4a:a3:fa:b1:7b:23:
ae:ca:97:82:11:09:63:71:f1:75:16:83:42:0b:26:
9d:8c:cc:77:a9:b7:5e:84:15:5f:00:ee:a1:21:98:
40:3c:f9:2a:54:b0:7c:7a:cd:4b:a8:ce:fa:ce:0b:
af:ba:e9:6f:0e:10:a0:43:22:0b:a3:2e:a7:f5:a4:
51:aa:65:31:3d:03:eb:5d:83:1b:06:95:58:a4:9c:
c3:b0:5f:1e:42:fc:b7:47:56:00:01:81:e9:f6:02:
90:0b:f0:32:f3:c2:86:5a:96:e0:ed:21:57:48:ca:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:57:9C:ED:27:69:DB:26:BE:84:ED:2B:1E:FF:8E:22:B2:C6:3C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SWVXnO0nadsmvoTtKx7_jiKyxjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ff:8c:3d:9a:3e:3e:13:79:48:95:ef:fc:e4:7f:e0:6c:ae:
34:c3:54:b7:09:ae:f3:98:99:9f:6a:69:e9:91:3b:65:d5:62:
5d:07:9b:f4:c3:20:7d:50:79:6f:6b:58:2e:aa:ff:41:01:2a:
e9:61:7a:76:e1:cd:cf:08:87:d5:96:c4:b5:25:15:ba:a8:02:
d7:a8:67:df:ac:61:d6:cf:99:b6:6f:b0:3b:9a:6e:24:e0:27:
65:15:04:53:7d:a4:36:8c:0d:b6:8d:35:f8:3b:38:29:12:08:
64:28:7f:e6:7d:f5:78:a4:02:16:82:51:02:91:a2:ec:d3:09:
a7:fa:19:0a:9c:a7:b4:ae:f4:cb:cf:18:80:69:c1:e9:5b:1b:
d4:59:cd:97:bd:c8:59:11:62:74:04:43:48:71:f8:85:ae:7b:
9a:ec:85:ee:ed:d4:a3:0e:d4:3f:04:ea:c7:6d:27:a0:10:6e:
73:45:9a:3d:7f:ac:31:61:1a:cd:9e:e6:f7:52:71:bd:b4:9c:
55:11:ee:17:13:79:da:27:e6:5e:a6:68:60:b4:5c:0f:cd:74:
f9:af:43:49:af:80:cb:90:96:8c:30:fb:53:de:0a:63:2b:ae:
34:e7:c6:72:32:3c:08:97:04:9c:4b:9f:ef:1d:c3:25:db:a4:
70:55:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org