Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M9XR5WWenIOqECJCjHFmwa_AYG4.roa
File: M9XR5WWenIOqECJCjHFmwa_AYG4.roa (raw, json)
Hash identifier: EB+F3zV+LncAeQ9eG5MGylay9uzsqowGPJOEIvUT2YA=
Subject key identifier: 33:D5:D1:E5:65:9E:9C:83:AA:10:22:42:8C:71:66:C1:AF:C0:60:6E
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8C16369800A494378A5205C06262
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M9XR5WWenIOqECJCjHFmwa_AYG4.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199371
IP address blocks: 178.16.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:16:36:98:00:a4:94:37:8a:52:05:c0:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d5d1e5659e9c83aa1022428c7166c1afc0606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:31:c2:2c:b8:96:89:b7:91:85:47:22:11:
0c:d7:cf:5e:0f:af:42:00:53:53:ca:5e:16:8f:90:
32:29:ce:c6:30:d6:1f:a8:2a:35:e7:3e:47:df:ed:
8f:ed:7e:36:7e:01:c2:c1:fc:ee:71:1f:60:21:b8:
77:a8:b8:89:f9:85:a0:6a:3a:84:f0:6a:e6:e0:62:
91:b0:17:a6:c4:91:2d:a2:a9:4b:a6:fe:f1:b5:cc:
45:cf:0d:64:a5:ec:16:73:d9:3d:26:b1:6c:9c:73:
5a:f3:3d:d8:b3:6e:f8:93:4b:3e:90:38:6f:18:12:
b9:5a:b1:d7:e2:72:09:05:6e:0c:95:4e:5c:fb:f5:
69:65:57:10:35:ad:dc:39:6b:22:0a:d2:b6:bf:95:
d8:26:5f:7e:df:41:41:5f:9b:15:5b:ed:ec:62:d1:
e3:15:5d:c7:44:cd:6c:cc:fe:66:f2:38:80:36:5b:
ea:54:ea:49:31:bf:54:8d:e9:4e:2d:19:58:02:24:
17:3c:ab:9d:1b:1e:2b:9c:9c:99:82:05:f1:00:1e:
a4:45:7d:6d:4f:ca:11:48:11:77:29:4f:8d:72:c1:
f7:e8:f6:aa:62:03:86:3a:9f:f2:84:29:5e:0a:71:
db:a7:0c:3f:dd:69:5e:1a:ab:70:e8:e9:9d:b4:0d:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:D1:E5:65:9E:9C:83:AA:10:22:42:8C:71:66:C1:AF:C0:60:6E
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M9XR5WWenIOqECJCjHFmwa_AYG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:78:f6:7b:5b:81:ea:b1:ba:1f:2b:ac:7a:db:19:80:e1:3c:
c2:7b:43:4d:cf:67:f2:2a:4a:34:50:35:bf:33:0b:6a:93:a5:
c5:e2:78:64:a7:8e:c3:36:95:ec:61:b3:52:ca:bb:89:5b:e7:
a6:58:ed:07:4d:9b:96:13:55:d6:72:d5:ca:a4:af:ab:74:2a:
63:31:d6:48:b9:0c:c9:67:e5:9b:1f:45:20:a8:15:4c:57:44:
b1:ed:92:df:73:00:c6:ac:bc:e5:07:cd:f6:60:ed:6d:ec:c1:
53:08:a0:20:4f:fc:ca:29:dc:0b:bc:b0:dd:33:82:7f:0f:d1:
4c:56:dc:e2:75:11:78:d7:47:4e:ab:7f:70:e7:ff:82:93:84:
17:ba:c1:bd:81:41:dc:18:75:00:b9:41:5f:4f:95:19:c7:35:
44:de:1d:ce:71:3f:e6:a1:9c:4a:c8:98:18:3a:ac:7b:aa:e8:
06:84:fc:67:91:08:4e:10:af:24:cf:fe:f2:fe:85:2f:c8:a7:
12:70:6b:fd:68:50:14:1e:c1:04:3e:34:60:71:96:17:1b:39:
e2:9f:68:ab:20:e6:d1:fd:51:3c:a0:0f:94:00:a1:97:1b:36:
d3:76:f3:d0:0f:dc:6d:8f:8f:66:d2:63:16:90:df:90:39:62:
29:19:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org