Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa
File: ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa (raw, json)
Hash identifier: uc/0Lc7pma8z/q9hlUYLmv5+Oa7gm1vZQ7zT9drWhB0=
Subject key identifier: 30:4F:AA:3F:A6:F8:6F:30:EA:94:0C:E3:5C:02:95:5C:C7:1F:9E:46
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 018CC64ACD4F1EB5B73B19F035D15D9DC80E
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa
Signing time: Mon 01 Jan 2024 18:30:40 +0000
ROA not before: Mon 01 Jan 2024 18:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 192.104.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cd:4f:1e:b5:b7:3b:19:f0:35:d1:5d:9d:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Jan 1 18:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304faa3fa6f86f30ea940ce35c02955cc71f9e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:34:e2:03:45:c6:44:e4:08:a2:19:cb:a6:
97:b8:5b:2f:52:22:d2:d3:25:20:8c:2a:f5:eb:1a:
8e:4a:0b:86:4c:07:17:fa:2a:28:af:6e:16:d0:5a:
8a:5e:0e:3d:00:44:52:a8:b6:a3:e2:06:d2:c7:53:
d5:5c:ca:e6:1c:12:14:82:9a:a9:05:0e:c1:63:95:
67:26:07:fe:8b:2c:5a:5f:72:01:da:f1:3a:4b:74:
ce:8c:61:bc:42:06:18:47:0c:5d:c2:30:d5:09:a5:
56:0c:0c:5c:78:29:3f:6e:7e:78:c5:c5:cc:db:33:
12:52:66:b7:ba:d4:20:27:13:db:34:77:b9:27:ff:
d0:fa:f3:04:59:fa:d1:84:05:f1:4b:db:09:ff:70:
d1:ab:70:61:8b:ac:53:5b:6d:dc:ba:45:81:b3:c3:
4c:57:dc:f8:fa:4a:4e:e4:8f:6b:3d:15:09:9d:71:
ad:87:c7:87:17:d6:6e:1e:76:88:2f:7c:f7:46:00:
60:10:c5:2e:f2:17:ec:19:d0:54:30:2a:8c:e3:e9:
4b:a0:b1:62:26:58:7e:1f:c1:95:7f:55:ca:5d:1e:
94:90:dc:4e:ff:27:c4:8b:45:1e:d7:04:b2:20:1b:
1b:7d:b0:99:af:05:6c:e1:58:44:33:2d:d5:dd:d3:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:AA:3F:A6:F8:6F:30:EA:94:0C:E3:5C:02:95:5C:C7:1F:9E:46
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/ME-qP6b4bzDqlAzjXAKVXMcfnkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.104.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ec:91:1e:db:f4:d9:0d:2f:68:22:db:4a:67:11:8a:43:09:
da:c2:a1:33:f2:95:c6:a9:d8:5a:56:d7:f4:cf:11:41:0c:00:
b2:c8:55:2d:55:aa:58:65:51:ac:42:34:88:dd:a1:2d:63:ce:
0b:01:0f:b0:f5:42:f6:a1:26:f1:6c:d1:7c:bf:94:fe:10:6b:
e9:e7:a6:d7:4d:27:f6:fe:9d:c0:ff:10:00:57:65:4b:fb:5d:
25:bb:69:f0:5e:0e:90:1e:6f:a3:d7:76:19:c7:9c:91:58:58:
9e:d1:44:eb:de:ba:74:17:e1:a5:8f:dc:9c:c8:aa:bd:0f:dd:
56:d8:64:37:0c:9e:ad:ac:6a:1e:27:10:5c:35:c0:d5:f1:14:
d5:6a:4f:e4:df:ef:2b:ab:e6:7c:7f:6f:6f:e2:0e:fb:02:b4:
fa:d1:c6:aa:87:9c:30:0d:ad:24:11:cb:f1:4f:2e:3c:d6:63:
a7:62:38:d8:49:ec:fb:aa:d4:f2:d3:45:e8:c0:c3:28:c1:4f:
8a:3c:59:79:ec:46:d3:32:63:5c:48:b4:f0:3b:98:48:21:14:
3c:9e:3f:9c:37:29:cc:65:64:e6:a6:39:93:a0:4c:3a:4f:55:
3f:cb:8d:fd:59:0a:51:0d:9a:db:7d:49:08:5c:aa:43:17:91:
8c:d0:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:17:40 2024 by rpki-client on console-ams.rpki-client.org