Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/MAreV1GS14a8vLnhcIHUq1JcR0U.roa
File: MAreV1GS14a8vLnhcIHUq1JcR0U.roa (raw, json)
Hash identifier: Ylf26hL7zZ908L8b/on/kWe7M3P80plK9UoPgqfdKMM=
Subject key identifier: 30:0A:DE:57:51:92:D7:86:BC:BC:B9:E1:70:81:D4:AB:52:5C:47:45
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 018CC6B8DD373DA9030FC4E2056C1A6BE17A
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/MAreV1GS14a8vLnhcIHUq1JcR0U.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 149.153.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:dd:37:3d:a9:03:0f:c4:e2:05:6c:1a:6b:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=300ade575192d786bcbcb9e17081d4ab525c4745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:08:8d:69:80:8c:91:08:44:d5:5c:f2:96:
01:61:4a:19:28:11:f0:eb:77:f7:a1:bd:e7:20:18:
f5:8d:70:8b:c4:99:7a:08:a8:f0:c9:aa:c8:d8:7c:
05:1c:4f:ef:02:20:01:4d:8c:fc:2f:79:8a:d5:36:
b5:5f:48:5b:b4:62:0d:ce:57:bc:fc:d8:42:47:28:
f2:93:3e:26:b8:ea:14:ad:07:64:28:77:57:0a:55:
06:fc:ea:11:87:12:d2:18:7c:49:55:2c:9b:43:00:
33:cb:6b:54:c7:92:59:5d:6f:6a:8c:b7:21:73:04:
2e:d3:7b:e2:de:e6:ff:62:fa:3e:fa:41:58:a8:3f:
97:ee:3f:94:63:bb:98:09:40:fd:33:f3:99:1d:21:
a7:78:13:4e:00:1e:e9:2c:b5:5e:8d:5d:8c:9a:d5:
3b:35:bd:cc:3f:3a:2b:12:ed:ce:aa:7a:a9:0a:b8:
f9:3c:36:f5:f9:b5:89:48:a2:92:ac:fd:d5:94:39:
19:af:01:17:18:48:d8:0c:98:e6:aa:c9:f7:7e:c0:
73:06:3e:ce:0a:01:c6:f7:60:a4:f4:28:98:28:99:
f1:2b:3d:a1:0e:f1:ce:1a:3e:12:de:a9:3a:30:50:
a3:e5:d6:28:ce:5f:47:e6:24:a7:e1:25:4f:5c:f2:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:DE:57:51:92:D7:86:BC:BC:B9:E1:70:81:D4:AB:52:5C:47:45
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/MAreV1GS14a8vLnhcIHUq1JcR0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:33:cb:c8:07:00:c4:f3:ea:2f:65:e1:8a:d4:cf:9b:9a:5d:
02:68:23:f9:84:2f:29:1c:74:5e:1b:57:53:d9:4b:f6:f3:09:
52:b0:8b:36:07:42:c7:2e:ec:d0:c3:fb:4a:03:58:34:03:06:
0e:56:0b:e5:db:56:7f:bc:ee:93:1d:84:3c:c9:ce:35:c0:bb:
9f:5e:a2:5e:32:7b:91:ee:c3:4a:8a:c9:df:6b:e4:19:f5:ec:
ba:d1:d3:2f:73:48:13:4c:01:d9:0b:26:13:81:dd:8b:2c:00:
1b:48:f5:cd:9e:4c:fb:12:9f:05:33:20:5d:4c:7e:82:bc:d1:
a0:2f:e8:b5:b2:19:89:6c:7b:d6:cd:ab:fd:38:51:91:ea:5d:
a6:50:13:64:89:25:60:32:96:7c:3e:4d:4c:e4:55:52:67:54:
5d:f1:48:6c:ec:b9:7d:08:aa:68:df:2d:ce:ab:00:07:0e:a6:
0d:25:11:ce:c2:45:cf:33:91:8f:59:6b:f0:41:df:a2:9d:2c:
09:2e:1a:cb:ee:8c:0f:e5:b6:7e:62:13:82:b6:e1:13:9e:71:
00:67:c6:35:74:f7:8e:0b:9a:2d:79:7e:c6:17:4e:a3:d3:b0:
dd:eb:9b:b2:2e:a0:d0:bf:0d:b9:c4:96:d0:f4:4d:7f:bd:11:
9b:c0:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:20:32 2024 by rpki-client on console-ams.rpki-client.org