Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: 1/dHUT7CxpOWVwexn2L4cNb80aDYN0TsYuMvYo+xJDc=
Subject key identifier: D6:98:0B:9A:01:9D:87:8D:1B:B8:34:90:50:5F:D5:27:F5:D4:4C:D3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6144157FED2A250DAE9713DE3258877018BFCD78
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397423.roa
Signing time: Wed 21 Aug 2024 18:16:33 +0000
ROA not before: Wed 21 Aug 2024 18:11:33 +0000
ROA not after: Wed 20 Aug 2025 18:16:33 +0000
asID: 397423
IP address blocks: 92.113.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:44:15:7f:ed:2a:25:0d:ae:97:13:de:32:58:87:70:18:bf:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 21 18:11:33 2024 GMT
Not After : Aug 20 18:16:33 2025 GMT
Subject: CN=D6980B9A019D878D1BB83490505FD527F5D44CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:aa:87:31:76:fa:c2:60:61:75:23:e1:ae:
c4:c9:b5:df:07:b8:0a:af:18:bd:15:57:5a:07:7d:
16:cd:49:30:45:1a:e9:26:55:7a:42:2a:75:61:60:
0e:17:55:64:5f:7c:86:8f:44:96:49:e0:75:b3:13:
d6:ca:64:34:b7:23:15:9e:dd:29:02:3b:75:35:fd:
7f:d7:49:16:87:d8:fa:70:14:d2:08:00:aa:09:e0:
0a:6c:8e:b9:d5:45:d0:8c:e2:5f:e7:b7:62:d8:1d:
fd:99:f4:f0:41:22:5d:94:e5:68:7d:99:4d:f5:b2:
3a:48:97:d1:35:e7:9a:95:0d:86:79:15:f6:cb:f7:
7c:46:c9:0c:a7:91:41:17:a0:23:5f:54:d5:e5:ce:
95:79:8b:f0:14:1f:b8:c7:c4:c5:7a:a4:d6:43:3c:
14:02:d0:03:ad:79:12:82:9e:3e:33:40:84:2c:05:
b4:36:f9:35:b3:b3:82:da:80:c3:ae:b8:1a:69:8f:
85:d1:a2:d7:5b:87:c4:38:ce:45:8c:37:dc:f1:7a:
db:40:17:2b:d3:b2:0c:f2:bf:c8:58:89:2f:4f:81:
b7:6d:55:91:8a:4f:78:76:b9:32:f6:84:23:80:94:
d4:3a:bb:8f:b5:74:bf:38:44:b0:7f:65:a1:03:2c:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:0B:9A:01:9D:87:8D:1B:B8:34:90:50:5F:D5:27:F5:D4:4C:D3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:b0:3f:05:4e:0a:b8:43:6d:d8:8a:20:c5:03:88:5e:e4:
34:aa:ac:2c:a8:d9:74:98:91:7f:e5:48:65:8f:00:9f:83:00:
85:4d:fd:96:f5:02:32:26:cb:5d:e3:3c:85:4f:59:9e:c9:d3:
73:57:fd:8f:eb:70:2f:85:50:cc:f3:54:0c:13:42:62:ec:4e:
d3:f8:c5:21:75:af:b3:e2:6a:dc:a0:e6:c6:fa:b6:af:b7:43:
00:70:ec:73:3e:a4:63:c8:f9:4d:25:ea:ed:11:76:72:37:2a:
da:cf:97:0f:dc:5c:30:57:63:a6:64:30:ec:cd:a6:9d:de:d7:
15:30:ba:01:2d:9e:cd:ea:73:fd:4c:0c:eb:c0:64:d2:7f:69:
19:97:29:4e:d3:df:95:f3:19:c6:1f:23:55:e7:69:e7:c0:51:
2c:f5:95:ea:90:9a:74:39:8d:14:f2:9b:82:5f:11:00:45:38:
ec:88:8a:e2:5f:07:de:01:a9:f3:0d:82:bc:a9:f8:a5:f4:84:
2c:cd:00:22:b7:5c:53:ad:6c:40:62:08:79:e6:8e:91:a0:d2:
91:1f:64:60:a3:10:9b:b0:6b:e5:ce:ab:7c:85:ed:48:06:4f:
18:ba:9a:32:e8:59:9a:76:cd:97:1a:33:55:18:dd:96:e4:3a:
4d:ef:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:51 2024 by rpki-client on console-fra.rpki-client.org