Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DFkrm_And408X3pl4-TspcTZwg4.roa
File: DFkrm_And408X3pl4-TspcTZwg4.roa (raw, json)
Hash identifier: OdXFQoNzGgg5iwgDvNAZzq8w8Wy8EXbc10CqTWewep4=
Subject key identifier: 0C:59:2B:9B:F0:27:77:8D:3C:5F:7A:65:E3:E4:EC:A5:C4:D9:C2:0E
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0192F8FCFA5AEA3B1A73E287C7EF26C421D9
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DFkrm_And408X3pl4-TspcTZwg4.roa
Signing time: Mon 04 Nov 2024 21:03:01 +0000
ROA not before: Mon 04 Nov 2024 21:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.13.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:fc:fa:5a:ea:3b:1a:73:e2:87:c7:ef:26:c4:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Nov 4 21:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c592b9bf027778d3c5f7a65e3e4eca5c4d9c20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:7d:fd:7e:73:c5:4c:10:ad:df:e2:0d:0f:
d3:8b:92:fc:9c:aa:cd:51:1b:6b:17:75:07:ba:62:
9a:c1:ba:43:68:af:38:66:76:9b:cc:47:79:cc:78:
c5:98:b7:89:4e:d3:9e:1a:19:62:86:f8:84:cd:41:
9d:5f:1e:21:27:a4:0c:ad:fa:40:93:6b:6d:11:8f:
a0:f1:c1:53:15:88:19:0d:6c:78:9b:fb:94:da:ce:
62:b3:83:e5:8d:35:af:5c:f3:19:d9:0f:0c:74:d9:
1b:78:6d:4d:cf:2e:23:03:2d:ca:d5:15:cf:cf:d4:
ff:53:da:a2:d0:c3:b9:77:02:70:16:e5:ff:f9:e7:
1e:fd:c2:ae:68:ab:d9:de:48:2d:b2:08:1c:53:7d:
76:e2:6e:c3:15:d2:5e:da:1f:af:4d:58:ee:97:4d:
c1:8e:7d:76:6a:1c:5b:fb:30:33:67:17:1e:14:01:
e2:13:1d:6c:6a:1c:28:fe:db:4b:93:62:f8:05:fa:
8d:c8:c3:18:d0:58:71:f7:6b:7c:75:89:3a:1c:98:
e6:d1:bc:b8:94:72:0a:35:e8:2f:e5:46:e1:ca:e2:
fe:ab:6a:3f:c6:03:00:f4:ad:85:96:57:32:5e:ca:
51:79:52:88:4a:5f:50:67:86:94:8f:2c:be:30:bf:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:2B:9B:F0:27:77:8D:3C:5F:7A:65:E3:E4:EC:A5:C4:D9:C2:0E
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/DFkrm_And408X3pl4-TspcTZwg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:16:50:62:7e:87:09:c9:cb:47:8f:26:67:ab:1f:7b:5f:66:
a9:bf:76:57:35:02:e1:6f:85:51:03:88:aa:8c:2d:59:ba:a1:
a5:38:4d:34:1b:ea:2e:47:77:7f:73:96:12:55:17:dd:29:53:
c2:c4:25:29:a8:0a:e9:9a:ae:b3:ba:58:e0:34:4b:5e:ce:c5:
4e:6c:81:b5:f2:42:c9:03:4a:04:b3:54:9b:27:b7:a7:b7:89:
65:5c:0e:37:45:a9:3c:46:f9:71:65:bf:1c:9a:b4:2b:d2:e1:
a1:60:ed:70:eb:1a:24:a4:9a:06:87:14:5f:fb:c1:6e:20:28:
1f:1a:5e:b9:17:92:69:29:c4:5a:1d:67:6a:fa:39:87:f5:3a:
7d:f7:f8:28:f2:c0:10:0c:2a:f5:b0:12:8b:a6:32:0c:e0:57:
dc:aa:13:a6:fe:26:41:95:f6:18:36:ba:95:5d:73:b8:a5:17:
76:3e:bc:4e:3e:46:3e:0a:84:f2:05:72:df:df:03:08:86:0c:
82:06:71:a7:66:c5:84:b7:b9:f5:b3:9d:96:c6:6d:ea:2d:11:
2c:24:05:88:6f:a1:03:b6:4f:40:eb:65:c9:6c:b0:01:b4:08:
c7:7a:0d:c7:a6:f1:13:2d:af:e2:87:57:dd:a6:09:a0:5a:9f:
cf:e6:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:19:31 2024 by rpki-client on console-ams.rpki-client.org