Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/m49iVjZ3uxuKHX4IHcnkIdallHM.roa
File: m49iVjZ3uxuKHX4IHcnkIdallHM.roa (raw, json)
Hash identifier: YAM7bs+1xP5WFHj2RNNzTOGAphUPvlMUb8yiosbm5eE=
Subject key identifier: 9B:8F:62:56:36:77:BB:1B:8A:1D:7E:08:1D:C9:E4:21:D6:A5:94:73
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019320E416C4C82242215A9F1A9ADF44DD3E
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/m49iVjZ3uxuKHX4IHcnkIdallHM.roa
Signing time: Tue 12 Nov 2024 15:00:39 +0000
ROA not before: Tue 12 Nov 2024 15:00:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 92.60.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:e4:16:c4:c8:22:42:21:5a:9f:1a:9a:df:44:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Nov 12 15:00:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b8f62563677bb1b8a1d7e081dc9e421d6a59473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:b8:1f:f2:8a:54:2f:d2:4d:9a:bb:6b:d7:
d0:43:ee:28:71:6d:87:8f:f0:ce:ff:52:a9:d7:7c:
50:e7:7f:3c:d9:44:08:73:4e:8c:2f:cd:35:cd:b1:
08:82:e8:c7:85:bb:f0:df:50:49:fa:db:a8:a6:9a:
18:1a:8b:23:c1:1f:f4:af:bd:2e:25:77:64:d3:62:
f1:d5:01:2e:5b:5f:48:29:5a:08:23:49:07:b1:db:
93:81:c6:65:d9:36:67:40:58:9b:c9:83:ca:4d:be:
f4:f4:9e:89:a3:f2:f8:fd:2b:44:05:5c:db:9f:21:
e0:0c:ae:5e:a5:36:81:c1:dd:5b:44:a2:d7:57:37:
68:91:37:f6:5d:78:55:1e:8f:27:47:6b:5d:7c:06:
1e:2b:97:63:e7:7c:f8:19:fd:c4:f6:22:84:05:71:
b1:18:71:df:6e:b5:23:d0:3e:c1:8e:ad:56:94:dc:
c4:47:98:6d:a8:19:43:c8:61:90:3f:47:5c:53:fd:
06:e6:f2:ad:1d:9f:75:72:b1:11:b8:8f:5a:9d:d2:
92:3e:07:86:f1:6e:98:2c:cc:76:44:85:07:be:5b:
cd:9f:e7:95:52:3a:7a:ec:c7:c0:30:d4:6a:1e:7a:
36:a0:1a:91:cd:00:ea:22:45:0f:c2:a3:c7:43:2d:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:62:56:36:77:BB:1B:8A:1D:7E:08:1D:C9:E4:21:D6:A5:94:73
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/m49iVjZ3uxuKHX4IHcnkIdallHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:92:37:d6:bf:6f:b0:1a:d6:7c:f1:7c:b9:f6:6d:cf:ed:f6:
75:7e:81:28:28:48:aa:9f:0f:7a:83:b6:ae:e0:e9:56:5d:00:
57:ea:1b:38:a3:b5:ae:a0:4e:89:59:b7:0e:71:28:c5:78:1f:
cd:21:3e:e4:07:c2:f0:c5:2e:cc:f9:4d:5d:43:1a:14:ab:38:
f3:cc:49:76:16:a2:ff:e8:fb:e9:66:3d:2c:63:1e:76:fb:7b:
94:5e:63:25:2e:f5:a7:e7:7a:9d:da:ef:c2:49:07:44:d3:42:
dc:d7:ff:e5:19:95:51:fe:93:90:a4:32:cb:60:46:d4:58:25:
42:1b:cb:3a:83:8e:54:75:ac:ee:c4:bd:13:b7:69:45:0c:49:
42:72:4f:df:ab:4f:e4:3a:a1:62:02:02:73:4c:f7:d8:f4:c9:
13:30:98:27:c8:87:ed:c7:54:c7:c8:86:1c:3f:06:8b:20:eb:
3a:93:89:c6:3b:22:ba:b5:8a:ea:a4:14:12:55:56:9c:15:3c:
f2:d3:86:36:3d:26:13:10:39:3f:71:b3:29:90:f7:ae:a2:2b:
41:d6:3a:42:6c:7b:09:31:42:cd:7f:2d:0d:57:83:23:71:23:
27:db:d2:45:64:11:41:6a:6c:5a:a1:09:af:50:a0:e5:5d:4d:
a5:b9:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:45:02 2024 by rpki-client on console-ams.rpki-client.org