Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0ynQw3Z8jP3a_1sRhRu4bTO9l_o.roa
File: 0ynQw3Z8jP3a_1sRhRu4bTO9l_o.roa (raw, json)
Hash identifier: RVCRXDN3rYD6D7uZoUUOAWofApRGwMER4zEgosM9wbQ=
Subject key identifier: D3:29:D0:C3:76:7C:8C:FD:DA:FF:5B:11:85:1B:B8:6D:33:BD:97:FA
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0191836C1086E832C4E880F22C5AF43E7DC9
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0ynQw3Z8jP3a_1sRhRu4bTO9l_o.roa
Signing time: Sat 24 Aug 2024 08:06:23 +0000
ROA not before: Sat 24 Aug 2024 08:06:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31715
IP address blocks: 45.149.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:6c:10:86:e8:32:c4:e8:80:f2:2c:5a:f4:3e:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 24 08:06:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d329d0c3767c8cfddaff5b11851bb86d33bd97fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:d9:95:76:6e:c1:02:b5:5e:87:5c:7d:fb:
fb:33:1c:1a:dc:2f:5e:78:4c:ce:5e:2b:41:68:05:
2c:ee:f8:1d:6e:37:13:aa:0e:6d:6b:01:0e:da:b6:
8d:6f:b0:75:82:64:89:ce:aa:1a:e7:70:26:29:69:
a1:d5:08:d0:31:c6:dd:b5:13:63:00:89:f7:63:43:
81:db:38:11:39:c2:53:7d:5e:c0:7b:ec:12:af:7c:
9e:14:0d:47:9f:39:e0:6f:b1:ee:d9:f0:8c:83:71:
ff:4a:2d:68:4f:05:ed:1a:69:24:0b:8b:d7:14:f5:
96:bf:18:87:ff:41:c1:34:9c:59:76:e1:53:d9:b1:
18:fd:11:ce:96:95:6d:f9:1d:bc:6a:23:aa:99:57:
12:86:9a:a0:4b:94:d0:19:23:38:2b:16:f8:f0:46:
db:61:58:d5:30:47:17:6a:eb:3a:77:a2:78:70:17:
9b:81:e9:2e:9f:28:f1:68:41:0c:e2:48:8f:bf:5f:
02:22:48:1d:a3:53:3c:2a:e9:82:93:23:2c:82:32:
5f:d2:2d:95:27:29:97:a7:f8:6e:d5:2e:90:60:35:
75:83:60:7c:89:6a:c2:42:17:67:08:b9:aa:6e:b3:
44:d3:d1:3e:ad:8f:99:8d:6b:8e:2e:59:9c:d4:96:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:D0:C3:76:7C:8C:FD:DA:FF:5B:11:85:1B:B8:6D:33:BD:97:FA
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/0ynQw3Z8jP3a_1sRhRu4bTO9l_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e7:7b:47:f7:ea:ab:77:5c:60:39:e7:e2:d9:66:33:8e:64:
ad:98:f5:84:33:b3:bc:4e:3c:e8:27:e3:19:f0:77:e8:42:5f:
94:ac:b5:83:63:26:de:29:71:8a:00:42:a3:a2:ec:40:66:db:
48:28:84:2c:36:dc:fb:7c:b0:45:0e:0d:68:4c:5f:d5:4f:9b:
0d:fa:f7:15:e2:36:39:98:0a:b7:95:3d:96:ed:2e:76:47:8c:
62:c8:70:29:b3:48:97:78:a4:62:65:ab:34:ed:af:7b:da:74:
2f:e5:c9:4c:35:b4:c4:7a:10:fa:20:02:70:da:c9:97:cf:b3:
0a:76:05:1e:92:d3:45:37:38:7c:74:5d:44:f5:cf:c8:6a:af:
4d:da:0f:ac:fe:5d:df:50:84:ce:f7:fd:a1:f9:e7:cc:8f:83:
33:c2:c8:e5:80:91:4d:28:b8:27:a6:61:3e:f2:6a:28:76:f1:
ea:5f:86:3e:cc:7d:04:b5:f7:1d:a6:09:84:88:8b:76:f3:9c:
3c:77:7a:3d:99:a2:46:5b:9e:d8:f0:4a:1d:58:4c:96:69:66:
a7:12:cf:53:90:08:95:3f:bb:19:ef:a3:c1:e9:ae:bd:bb:a2:
07:0a:ee:4b:c3:61:60:69:9e:ec:e7:3b:23:ed:bd:42:86:a6:
9e:2d:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:09 2024 by rpki-client on console-fra.rpki-client.org