Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/za019mNg5B4vaxzpAByb7MssT5w.roa
File: za019mNg5B4vaxzpAByb7MssT5w.roa (raw, json)
Hash identifier: MtbgAzLaSGSi6Tu7LOnzeIlFi0KkvFxqpGFkHeeAP30=
Subject key identifier: CD:AD:35:F6:63:60:E4:1E:2F:6B:1C:E9:00:1C:9B:EC:CB:2C:4F:9C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190DBF6C01CA781ABE514BE915D5F93251B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/za019mNg5B4vaxzpAByb7MssT5w.roa
Signing time: Mon 22 Jul 2024 19:41:39 +0000
ROA not before: Mon 22 Jul 2024 19:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135391
IP address blocks: 109.176.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:f6:c0:1c:a7:81:ab:e5:14:be:91:5d:5f:93:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 22 19:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdad35f66360e41e2f6b1ce9001c9beccb2c4f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:8a:b2:8f:e8:a5:3d:93:a0:94:90:0a:b0:
2f:07:05:b3:b1:93:93:84:d8:d3:7a:5b:be:39:6b:
8e:e2:31:7e:83:b4:5f:18:fd:cb:34:54:30:84:aa:
e4:5e:fb:d8:d8:b9:ec:a4:76:b3:3b:db:93:b8:23:
0b:85:7c:cf:11:06:44:f8:c3:ab:64:72:65:90:5a:
d5:e7:6e:18:55:88:24:4e:79:2d:e8:cc:18:1a:b6:
f4:ea:32:bc:cb:65:4b:d9:5d:a9:64:62:25:73:83:
3e:54:6a:66:5b:f7:30:16:32:98:b5:2c:02:37:66:
39:35:0f:21:4b:98:51:78:9d:7c:1d:64:93:fb:ac:
78:06:62:51:d8:13:11:47:dd:40:87:ac:bd:58:7c:
b4:9f:b9:46:34:7e:76:b2:9d:6b:78:7d:62:dc:ba:
af:3d:a9:c8:73:42:e0:27:4b:14:ef:9c:59:33:f6:
83:b7:20:e9:b8:f5:66:59:18:84:be:5d:5e:c5:65:
42:dd:23:3b:ff:fa:20:ba:4a:43:a8:6a:74:67:f8:
5b:ab:fc:2d:5d:80:26:a3:9d:fd:30:09:a6:a4:93:
b7:f8:50:34:ba:04:08:b0:75:5c:31:74:ac:b0:c3:
25:ff:5e:03:65:c4:7f:b3:f2:da:4a:3b:a9:1f:fc:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:35:F6:63:60:E4:1E:2F:6B:1C:E9:00:1C:9B:EC:CB:2C:4F:9C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/za019mNg5B4vaxzpAByb7MssT5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.248.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8d:92:b9:6d:18:fc:b7:10:30:26:9c:71:04:dd:5d:2b:63:
9e:b3:45:a2:ed:67:d2:cc:2d:bf:d0:79:4c:e9:69:ea:e7:95:
72:e9:12:d9:00:91:a1:92:b5:c9:b6:33:48:b1:d2:49:4b:5d:
67:77:70:1f:e3:9e:22:2f:52:06:72:36:61:91:69:83:7a:04:
08:78:b1:c2:ac:14:25:d2:f3:6e:37:f2:87:1b:4d:4d:9b:98:
4a:6e:5a:89:a2:b9:f8:66:ba:1b:4b:38:8c:b3:a1:10:53:91:
23:73:67:11:6d:11:d8:76:c4:9d:0f:8a:37:58:2b:4e:63:0d:
11:ce:82:be:6e:fe:0e:07:c2:ec:02:89:01:2a:d6:85:19:11:
a8:c7:75:06:74:50:c5:b5:83:63:f4:ff:97:63:9a:47:bf:aa:
60:8d:7b:9d:31:8c:6c:61:6c:09:02:82:9e:57:dd:24:7f:de:
23:fd:8e:98:7b:c0:bc:cd:b3:5d:ad:92:fc:6d:be:1c:b9:72:
dc:95:95:3b:4a:88:56:40:38:6b:07:6b:c1:28:6e:01:1e:43:
3f:9f:4b:de:49:af:b3:3b:1b:dd:22:c3:46:1e:1f:ae:93:fe:
56:91:8a:43:63:70:64:24:28:a6:6d:8a:89:ef:65:a7:78:b9:
4d:35:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:21 2024 by rpki-client on console-ams.rpki-client.org