Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mnQjekngmweam_ujF4KxuEOBNVQ.roa
File: mnQjekngmweam_ujF4KxuEOBNVQ.roa (raw, json)
Hash identifier: klyk2bh0nGQt8dVTHC8Kfc6Xb1UhrH62OIw60hWxFig=
Subject key identifier: 9A:74:23:7A:49:E0:9B:07:9A:9B:FB:A3:17:82:B1:B8:43:81:35:54
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 018FBFDB79274C905787DD2B97FDE935FD1F
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mnQjekngmweam_ujF4KxuEOBNVQ.roa
Signing time: Tue 28 May 2024 15:39:42 +0000
ROA not before: Tue 28 May 2024 15:39:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212389
IP address blocks: 31.24.249.0/24 maxlen: 32
2a12:4942:4009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:db:79:27:4c:90:57:87:dd:2b:97:fd:e9:35:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: May 28 15:39:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a74237a49e09b079a9bfba31782b1b843813554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:f7:08:b5:2e:af:ed:55:12:99:54:6b:d1:
6f:f8:4f:bb:0d:7a:dc:6f:3c:4e:4f:22:75:11:f3:
21:bb:eb:c4:d2:0a:a8:e7:5d:6e:43:db:31:b5:f6:
5e:e0:25:67:b7:cd:9d:a7:b1:b9:8a:97:9f:3e:38:
d1:03:aa:24:e4:d9:fb:04:4f:b4:ba:f1:48:bc:f3:
c1:8a:07:32:5c:77:f6:3c:39:3b:a2:e9:72:56:b0:
e2:64:19:3e:b8:3a:d6:98:7f:6f:23:87:eb:27:c2:
e0:e0:16:82:5b:54:d8:62:14:b7:ed:cf:e1:7d:5b:
7f:2e:f1:5d:09:37:e7:1f:a1:91:25:26:b9:97:64:
46:29:51:f4:04:d4:5b:2e:c4:df:71:6e:cc:07:8d:
45:d3:ac:97:39:28:7a:63:4a:0c:9e:29:77:7a:a8:
36:6d:12:c5:d4:b8:ef:b6:70:dc:01:75:e6:68:d2:
15:f1:62:11:cd:e9:90:81:34:e9:e0:28:ef:ca:7d:
e4:37:56:d1:a0:df:6e:e9:a8:7a:ad:86:b4:d6:77:
11:54:48:15:52:38:65:71:a3:93:1e:4c:ce:5f:d0:
30:79:d2:74:a4:4f:3c:93:59:cd:b9:8e:dc:4a:af:
23:5d:19:31:6d:15:3e:01:ab:01:1d:b9:a0:3c:d7:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:23:7A:49:E0:9B:07:9A:9B:FB:A3:17:82:B1:B8:43:81:35:54
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mnQjekngmweam_ujF4KxuEOBNVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2a12:4942:4009::/48
Signature Algorithm: sha256WithRSAEncryption
5b:da:58:52:f7:1d:54:c1:76:9d:6f:74:5d:23:ec:ed:33:eb:
d5:4e:bf:ad:9b:9b:5d:94:fa:f0:f8:91:03:eb:51:9a:80:9d:
20:c1:7b:d2:52:8c:a8:33:9d:09:07:ae:a6:5b:6e:9b:10:5f:
d7:12:64:8b:f2:27:8a:08:4a:28:21:7d:ac:ac:ac:5d:f9:5d:
0d:84:c9:3d:6d:2b:fc:e9:c5:5b:ba:01:8e:cc:90:6f:74:d9:
f2:73:66:90:4b:f7:01:49:91:b6:7a:cb:70:12:75:f1:7f:be:
2d:7e:1a:89:5c:48:8f:fc:4d:d9:74:9a:37:ab:15:29:72:99:
4b:fc:5b:0b:6e:52:c2:90:b0:ed:09:bc:e6:bd:6f:46:63:a7:
30:12:e9:d7:09:da:ac:e9:a0:90:f0:91:f7:7e:4f:b5:96:ca:
94:24:27:4d:85:8f:12:46:bd:89:0d:98:26:57:8e:12:12:15:
0a:11:23:8c:8f:83:03:e9:78:56:46:66:56:1b:9c:4c:6b:ff:
e8:6b:7e:88:bb:ec:15:d3:2f:46:1c:f2:38:0c:21:9b:6a:45:
b0:9d:01:03:78:db:0e:ff:d6:af:ae:cf:76:77:b0:04:d9:08:
27:94:e6:05:5b:a2:6c:8d:45:51:58:7c:06:74:e2:d9:86:f6:
57:54:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:52:34 2024 by rpki-client on console-ams.rpki-client.org