Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mxRG7iNmi2ZbtTJ6aKpGJuFl2Uo.roa
File: mxRG7iNmi2ZbtTJ6aKpGJuFl2Uo.roa (raw, json)
Hash identifier: vH61VqoXHyJsF+hVWy2+8RY1kSY+J7Kr8EsbsyuQ+CI=
Subject key identifier: 9B:14:46:EE:23:66:8B:66:5B:B5:32:7A:68:AA:46:26:E1:65:D9:4A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EBD2CB10D5BE1A28A2A317B2412A0C4C0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mxRG7iNmi2ZbtTJ6aKpGJuFl2Uo.roa
Signing time: Mon 08 Apr 2024 10:06:46 +0000
ROA not before: Mon 08 Apr 2024 10:06:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 94.156.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:2c:b1:0d:5b:e1:a2:8a:2a:31:7b:24:12:a0:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 10:06:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b1446ee23668b665bb5327a68aa4626e165d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:06:49:49:6a:d9:d6:b0:1b:3b:79:72:11:
ed:8a:b2:16:c4:ea:d3:91:f1:9f:e2:d0:31:20:07:
18:56:13:ae:e1:d3:b8:f1:6b:c3:53:9e:ab:eb:7d:
22:80:55:03:70:38:36:01:2d:26:6f:19:e5:73:c1:
5e:d8:9b:45:bf:a1:57:0a:8a:f8:df:79:6c:e8:3e:
a5:b5:26:d9:de:de:c5:1c:e3:0c:56:d0:f4:aa:3e:
e5:92:c4:81:ee:ba:cb:45:f9:e5:22:54:57:e4:c3:
29:a4:dc:cf:3f:65:d7:6c:85:08:29:ce:1c:ee:fe:
ce:68:2c:64:61:24:be:2c:f4:0d:40:0c:4d:64:5d:
a2:81:f1:23:44:4b:af:37:72:83:72:5a:bc:24:9f:
cc:75:ef:a4:a3:35:e0:b6:60:e4:3c:ba:67:29:dd:
ce:7a:37:df:c4:c5:51:15:88:11:15:c5:ae:9d:20:
3f:2f:9e:e5:98:f5:fd:7b:d4:fc:76:10:db:67:8d:
b6:ec:0f:e1:16:1a:e9:c8:7f:f6:ad:9e:30:42:66:
30:47:93:44:54:e7:0c:18:bd:ae:fc:75:19:8e:2c:
7d:15:cb:31:7c:8d:97:ed:b5:1a:28:3c:14:2c:19:
c4:52:e8:eb:3b:7a:aa:ed:32:48:fb:7c:98:ca:c2:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:46:EE:23:66:8B:66:5B:B5:32:7A:68:AA:46:26:E1:65:D9:4A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mxRG7iNmi2ZbtTJ6aKpGJuFl2Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
04:40:a2:08:b7:ad:17:23:30:75:2e:6b:c6:97:2e:3e:1a:38:
a7:6a:f3:76:ae:e2:b2:b2:9b:41:08:0b:90:7b:a6:79:b4:94:
48:b1:f2:69:cb:a7:93:5b:c9:a8:69:f4:10:2f:cd:54:57:20:
68:5e:16:83:c7:d1:77:d5:97:b7:9c:89:5a:96:3c:f7:36:06:
cc:03:05:67:cf:15:44:79:0b:39:a5:66:c2:59:68:ed:e5:bb:
e8:f7:77:6c:6c:e2:77:8f:70:29:6a:e5:42:40:a5:1e:27:ea:
e8:48:69:dd:53:e9:78:01:c1:fc:99:da:f6:e0:de:c1:3f:6f:
c2:19:89:ad:f7:9b:ea:45:74:34:47:bf:9a:0c:06:a5:42:6c:
d4:3b:48:6d:d0:b5:db:90:12:7d:97:45:fe:b9:5e:ac:6e:23:
0d:a9:09:6a:ef:15:85:5e:74:8c:41:0b:79:ae:62:de:d7:f3:
dc:b7:65:f1:f3:f9:aa:16:9a:3c:28:23:7d:a6:25:be:59:ba:
88:b8:22:3d:d7:ff:a2:89:a1:02:09:cc:20:62:9a:9e:1d:9d:
55:80:4c:04:1e:8b:b7:3f:b2:7f:96:1a:50:27:f1:4f:ff:1b:
79:cd:37:15:a1:ec:5a:64:b6:9e:45:21:d8:1a:ea:91:cc:0c:
80:73:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:57:05 2024 by rpki-client on console-fra.rpki-client.org