Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/9KnfPBD7j9DLqAKLewP-5J5L1r8.roa
File: 9KnfPBD7j9DLqAKLewP-5J5L1r8.roa (raw, json)
Hash identifier: zNuh2xHXH96+Kk9oi9AyyPCv4DU+/4I6SMedEqqFjLg=
Subject key identifier: F4:A9:DF:3C:10:FB:8F:D0:CB:A8:02:8B:7B:03:FE:E4:9E:4B:D6:BF
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01917F51089B4C73F53E9B609E3B1646C00D
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/9KnfPBD7j9DLqAKLewP-5J5L1r8.roa
Signing time: Fri 23 Aug 2024 12:58:22 +0000
ROA not before: Fri 23 Aug 2024 12:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55808
IP address blocks: 46.16.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:51:08:9b:4c:73:f5:3e:9b:60:9e:3b:16:46:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 23 12:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a9df3c10fb8fd0cba8028b7b03fee49e4bd6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:da:0a:8c:fb:69:c5:ee:78:d2:0d:bc:34:
00:21:a4:f6:80:7c:ca:2b:9d:33:2d:12:e4:0f:46:
02:56:e3:c9:77:6a:b5:2f:28:c4:ef:13:1f:74:15:
06:64:35:d8:ea:e0:63:7a:a2:0f:aa:a0:ba:93:4c:
93:93:a4:41:74:13:14:2f:82:10:9c:20:6b:ca:a7:
67:38:14:7f:93:d3:97:25:f2:ab:54:80:07:65:b6:
02:2d:78:9d:09:b4:ee:82:4d:9d:c3:c4:17:be:ca:
8e:1a:8b:e5:06:da:5e:76:3c:7f:a1:8b:f7:99:84:
9b:ac:99:10:bb:24:82:1f:bf:4a:16:10:58:d1:fa:
71:55:50:fe:28:1e:17:31:76:36:97:80:71:55:de:
c0:e4:55:36:b6:64:00:54:4c:b9:d7:3d:5f:4c:d6:
dc:c3:68:f9:3c:cf:c1:7d:e3:62:22:b7:57:48:89:
fa:17:3f:38:ff:69:8c:04:43:e5:58:d7:ca:a1:4d:
32:67:6f:76:fd:1f:13:cc:ec:e0:02:43:c1:79:c2:
75:bd:3e:63:fb:0d:c1:c9:d8:9a:cf:0b:12:23:0c:
6a:43:1c:06:50:76:72:b3:aa:72:98:0d:63:bf:62:
8b:32:b3:b6:41:55:68:48:cf:cd:8f:1a:7f:df:1b:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:DF:3C:10:FB:8F:D0:CB:A8:02:8B:7B:03:FE:E4:9E:4B:D6:BF
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/9KnfPBD7j9DLqAKLewP-5J5L1r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.129.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d0:63:8d:a2:d8:ea:5f:5b:62:2b:8e:ae:89:08:f2:ae:3e:
f0:44:66:31:0d:ec:6e:50:c4:6a:17:1f:79:7f:63:ba:2a:00:
8a:70:91:d2:8f:b2:2f:40:ae:a0:ed:51:ae:15:fa:9d:c2:60:
3a:f7:9e:43:2c:97:c8:df:d6:f1:f4:27:98:72:17:a9:68:2b:
c7:78:31:70:68:93:ca:83:64:e8:07:1b:6b:da:68:4e:e1:f7:
83:33:b8:26:e9:dd:8e:dd:97:b2:6a:b0:e7:87:56:17:cb:0b:
9a:19:df:86:7b:ee:b1:f2:e5:2e:98:80:b5:1f:06:7b:9c:b0:
d0:56:d5:86:f6:f5:94:a8:9c:ef:de:47:36:34:99:3d:d1:4a:
21:61:f1:d9:80:9f:69:7a:f0:19:a2:92:03:9c:0e:79:2a:45:
3a:05:00:a1:50:9a:36:da:7f:17:e2:82:51:95:82:c4:10:43:
b4:1e:59:15:89:06:35:9c:63:47:b0:ed:e2:06:bd:07:dd:0e:
7b:c2:8d:59:de:38:f3:a6:52:a6:f9:80:4e:85:ca:72:c7:af:
12:01:5d:49:13:02:d4:4f:94:df:44:48:14:11:17:20:ba:b8:
b6:3f:fb:b0:37:81:cd:dc:64:5d:12:24:a4:02:83:39:8a:ef:
be:45:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:43:55 2024 by rpki-client on console-fra.rpki-client.org