Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/MNCSi_1S4DU2j3oB88CJwA_SMoI.roa
File: MNCSi_1S4DU2j3oB88CJwA_SMoI.roa (raw, json)
Hash identifier: hk7386fkgpuCsd3ixP2jEqkF5BKHvE4gVhsxnSzdmdo=
Subject key identifier: 30:D0:92:8B:FD:52:E0:35:36:8F:7A:01:F3:C0:89:C0:0F:D2:32:82
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 018CC72717C1C814152F44FF7E6234FCB89A
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/MNCSi_1S4DU2j3oB88CJwA_SMoI.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 194.104.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:17:c1:c8:14:15:2f:44:ff:7e:62:34:fc:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d0928bfd52e035368f7a01f3c089c00fd23282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:fb:b1:16:e7:77:50:16:64:61:bf:32:58:
f4:b0:bc:60:73:4f:84:7b:6f:21:4b:00:44:65:14:
92:3f:79:02:f7:26:2f:ce:5c:03:ff:bb:cf:a1:51:
3e:ae:7d:c9:44:a7:c9:76:3f:13:ee:32:57:5e:da:
0e:b5:ec:c3:84:e6:1a:6c:56:f8:70:b0:57:ca:37:
28:7b:85:c4:fd:b5:25:32:a5:ba:95:d8:5a:69:c8:
f5:1a:6f:bd:58:fb:be:b8:7c:5f:8e:21:bc:96:72:
a0:24:bb:48:8c:97:5c:3b:b3:42:f6:9f:68:ea:f2:
43:a1:85:17:82:49:fe:13:fd:bd:98:55:cd:f7:63:
ff:9c:33:61:6f:0d:22:58:77:ff:30:e9:a3:45:7f:
76:9b:5a:27:ca:39:d4:79:0a:df:3b:02:71:2a:fa:
92:48:ec:5f:64:e2:ac:15:02:cd:90:79:ea:0e:fe:
8e:50:16:3a:51:0e:15:d7:59:9c:9e:30:5e:f9:01:
5e:86:90:05:4a:8c:7c:d3:81:8b:dd:b9:c3:3b:53:
52:3f:96:b7:35:7a:f0:34:f3:fa:ee:b6:4f:b1:ce:
0c:e4:19:40:34:1a:b3:84:ee:4e:d2:ce:7f:7a:7a:
72:76:5b:4d:39:cd:2d:5d:d4:7d:7f:75:44:a2:76:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:92:8B:FD:52:E0:35:36:8F:7A:01:F3:C0:89:C0:0F:D2:32:82
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/MNCSi_1S4DU2j3oB88CJwA_SMoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c0:d7:8a:86:b1:82:2c:33:7b:f4:1b:c2:0b:36:c3:ed:36:
08:af:02:6a:bb:cc:2b:a0:15:bc:29:ba:5f:8a:3c:e3:23:ec:
81:8b:46:01:3e:2f:f3:a7:1f:0e:14:29:95:79:18:1a:16:40:
12:ff:28:af:02:95:df:d9:35:ec:d9:ee:3c:b3:ac:69:b0:2c:
e1:b4:b8:0a:d3:7b:ab:13:96:ae:40:dc:76:d0:42:22:13:56:
09:7b:78:fb:ce:6c:82:64:f9:d5:c9:57:8c:ab:30:fb:c0:bc:
9a:d2:ae:aa:d6:43:3d:8c:d6:3f:92:e9:0d:08:94:2e:7b:c1:
0a:12:9c:5c:0a:c0:fe:0b:67:d7:d6:60:30:ea:e7:15:f7:b1:
5d:95:0e:ce:13:8f:c3:87:52:e9:d1:27:af:fa:46:ca:ef:49:
94:f9:aa:20:03:20:4d:29:64:ab:81:01:79:64:ad:13:2e:98:
e4:4b:5d:37:54:6a:9f:90:cd:1b:be:4a:aa:fb:eb:f9:59:3d:
13:58:7f:ed:75:34:a6:6e:0b:f5:ec:71:4d:cb:1c:21:64:06:
a8:32:7f:db:52:ee:53:22:ea:59:26:bd:04:2f:f2:fb:a1:24:
9e:f2:96:fe:7f:0f:92:fd:f3:c0:fc:65:61:ef:da:8c:e9:88:
3b:53:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:42 2024 by rpki-client on console-ams.rpki-client.org