Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4766.roa
File: AS4766.roa (raw, json)
Hash identifier: iSCUAa4euiYrhTN4h5NjxvsOLh+AFLQhbxm5ASXPUxQ=
Subject key identifier: 8D:F8:6E:A5:6F:02:04:00:17:79:AE:BF:8E:65:44:56:22:96:28:67
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14E2EBB43068392CA624F734114A03F06773A611
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4766.roa
Signing time: Thu 14 Nov 2024 00:01:17 +0000
ROA not before: Wed 13 Nov 2024 23:56:17 +0000
ROA not after: Thu 13 Nov 2025 00:01:17 +0000
asID: 4766
IP address blocks: 92.112.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e2:eb:b4:30:68:39:2c:a6:24:f7:34:11:4a:03:f0:67:73:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 13 23:56:17 2024 GMT
Not After : Nov 13 00:01:17 2025 GMT
Subject: CN=8DF86EA56F0204001779AEBF8E65445622962867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:96:20:a2:b3:1d:c5:8f:3a:95:d5:a7:09:
d3:51:9a:c5:0c:51:e3:31:3b:3b:22:ad:d8:8b:e7:
83:10:7d:88:ac:ab:3f:85:69:81:ad:a3:8a:a1:55:
1c:08:7b:cf:fd:d6:7b:b7:24:ad:cf:9e:17:fc:09:
25:cb:2e:5c:63:08:c4:f8:bd:b9:ae:cb:e8:22:e2:
c6:e2:37:c9:15:fa:ca:20:70:35:98:ee:f0:cc:09:
76:01:4b:6f:54:bd:27:83:9d:35:3a:e7:a0:cb:f9:
99:af:d5:fb:ea:c1:38:83:34:e2:62:75:a0:de:be:
cb:5b:e3:40:57:5e:cd:91:26:c5:28:66:ee:80:4d:
ee:56:e9:1d:56:a7:17:da:f9:b9:1f:d4:69:86:13:
49:5e:26:a0:b5:e1:f3:f0:cb:50:1e:f6:79:1d:ce:
6f:e7:be:65:01:28:2c:e4:8e:02:6a:97:ba:44:74:
8e:aa:95:4f:67:a1:1d:80:dc:7a:d0:69:f1:70:59:
92:14:ff:db:a4:35:84:b4:84:0a:b0:c6:2c:28:24:
bb:9d:50:28:2a:ab:b0:cc:f9:e0:f3:75:1d:9f:f3:
ce:30:79:1e:bc:93:10:45:cf:cf:75:ae:98:c7:e5:
c5:64:c4:5a:d9:04:df:03:75:d5:cf:d2:13:bf:e8:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:6E:A5:6F:02:04:00:17:79:AE:BF:8E:65:44:56:22:96:28:67
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.57.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2d:ba:d7:d8:05:52:f5:95:63:62:f5:2b:73:09:a5:cb:64:
88:c6:84:1e:08:29:17:6c:1c:37:fd:4c:ac:bd:40:1a:34:c6:
44:99:e4:3b:18:a4:78:e6:2a:5d:73:3d:ed:9c:2c:47:24:22:
b2:94:8c:ae:f6:a3:ba:2b:2c:61:39:c8:6c:6b:17:b4:74:cc:
85:1d:ba:14:21:d2:07:ca:20:1c:26:a2:83:81:a4:97:09:3e:
3c:4d:ca:4c:7a:25:36:2f:0a:8c:5f:2b:95:db:b5:81:bf:73:
f0:51:35:5a:5e:90:04:0e:71:1a:26:78:3b:f7:49:38:98:df:
74:9e:48:48:90:2f:3a:57:79:2b:38:e6:23:e2:59:f5:e5:03:
18:87:eb:3d:7a:6a:ee:1e:7b:5f:7b:48:0b:4b:26:fb:18:09:
16:c4:84:11:6a:7b:89:19:b7:d3:89:b7:f7:fa:ce:49:52:d1:
51:f3:d2:54:fa:93:80:77:c5:f6:ad:29:bc:bb:b8:0c:2b:1c:
2b:1e:e6:6d:24:b6:b0:b5:2d:ad:3d:db:65:c5:dd:7c:c7:c4:
67:bd:aa:e8:06:b4:ec:eb:1a:d7:bb:80:c6:6f:4f:92:60:40:
31:0c:b0:fa:e4:f8:da:23:cd:35:8c:50:48:3c:84:c1:ed:ac:
8c:7f:04:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:42 2024 by rpki-client on console-ams.rpki-client.org