Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MjOM_j19THYrh2b3wTPegPxSd7U.roa
File: MjOM_j19THYrh2b3wTPegPxSd7U.roa (raw, json)
Hash identifier: x0fu7KuaQSvlBsn2wY7kRf9CXCLKrCcJmJId5+ZJHNE=
Subject key identifier: 32:33:8C:FE:3D:7D:4C:76:2B:87:66:F7:C1:33:DE:80:FC:52:77:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0FFD61DAFD78009AB0ED7669993A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MjOM_j19THYrh2b3wTPegPxSd7U.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215955
IP address blocks: 45.14.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0f:fd:61:da:fd:78:00:9a:b0:ed:76:69:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32338cfe3d7d4c762b8766f7c133de80fc5277b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:79:23:32:f8:1a:ae:83:78:29:c5:05:35:
c6:87:8e:d0:57:9a:6f:2d:88:73:bc:92:23:10:5b:
c1:3b:16:63:a7:41:d9:7b:98:68:29:51:4a:ff:c0:
e4:7f:4f:49:47:89:cd:7b:a5:87:8d:4a:45:ea:e2:
6a:a2:9b:2a:68:0d:00:d4:5a:74:a1:ba:f2:98:9a:
6d:78:e9:d1:ff:1e:67:be:3c:ef:c0:8c:09:63:a7:
96:82:8a:b0:90:9f:af:80:0a:1c:03:59:10:af:4c:
30:eb:1e:30:e4:f0:52:35:cc:3c:ed:3f:0d:a9:f2:
1e:81:eb:81:4e:b3:7c:07:5d:5e:0a:d9:69:9a:a2:
4f:bf:d9:00:9a:a0:85:eb:0b:75:15:0f:27:20:cc:
04:b7:30:9c:a0:94:b4:f1:f0:c8:4a:4e:bb:aa:8d:
a7:4b:95:a3:ea:cf:ae:15:aa:da:15:bd:22:06:f6:
bc:f5:7f:a6:19:df:01:69:bd:aa:6f:06:83:d0:a9:
d2:22:b9:ed:a9:b0:7d:35:f6:6a:c8:df:50:b5:18:
ab:72:a6:29:d8:05:96:67:64:05:7d:12:81:e7:fd:
b5:ca:ef:00:63:72:f8:9f:be:9c:75:20:a5:7d:4e:
ba:73:e1:1d:7e:37:b0:70:b0:07:ac:2a:a6:5d:84:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:8C:FE:3D:7D:4C:76:2B:87:66:F7:C1:33:DE:80:FC:52:77:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MjOM_j19THYrh2b3wTPegPxSd7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:46:7e:4e:6a:49:33:53:3b:c5:3b:80:68:c0:7d:65:ff:17:
ba:3f:b0:f9:ee:13:d9:2d:c0:8d:e5:c5:81:7d:86:7c:3a:15:
c6:2b:c6:cf:a0:f7:f4:07:c3:7e:dd:4a:20:ea:49:c8:c5:a1:
7b:56:35:28:89:f4:98:c6:49:72:83:bd:17:2c:64:ea:a8:0e:
49:1f:5c:35:f7:c8:eb:53:38:f1:2d:15:81:15:6d:9b:22:e0:
2a:f3:bc:1c:9d:e1:b7:de:0e:57:b2:8f:fe:45:21:e6:01:49:
b8:86:6c:69:b5:d1:0d:bc:f8:88:35:ba:a9:55:fd:96:64:be:
8b:88:a3:97:c6:ba:54:f4:67:f5:70:d0:7a:d4:62:b1:d8:95:
9c:f6:b6:6a:3d:fb:f3:1f:48:aa:4a:4a:83:12:23:10:73:20:
5d:04:9e:a0:10:da:e6:07:8d:43:db:26:a7:81:57:d3:60:d9:
ed:b2:28:3e:4c:43:bf:92:af:3f:7a:5e:eb:e7:4e:7d:3e:a4:
6b:2d:ec:ce:57:c6:ea:ab:cc:eb:24:cc:70:5f:3a:a9:78:f2:
e3:4b:d9:a5:73:fe:c0:75:f7:38:ee:2d:65:65:db:67:00:23:
cf:d2:d4:db:45:10:ff:d7:b5:11:68:a6:7b:ab:f2:08:b8:1f:
38:e2:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:14 2024 by rpki-client on console-ams.rpki-client.org