Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ImklJSm2AXHrnodhjcAxvSdk-NM.roa
File: ImklJSm2AXHrnodhjcAxvSdk-NM.roa (raw, json)
Hash identifier: EhyzYRPz+N7dFTFpm1qWHltIPfSUMK6OWeYKN4mBP9E=
Subject key identifier: 22:69:25:25:29:B6:01:71:EB:9E:87:61:8D:C0:31:BD:27:64:F8:D3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01928F05E63EE020285F745B45D645301D22
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ImklJSm2AXHrnodhjcAxvSdk-NM.roa
Signing time: Tue 15 Oct 2024 07:13:01 +0000
ROA not before: Tue 15 Oct 2024 07:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 85.122.229.0/24 maxlen: 24
85.122.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:05:e6:3e:e0:20:28:5f:74:5b:45:d6:45:30:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 15 07:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2269252529b60171eb9e87618dc031bd2764f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:8c:e6:14:2d:49:3a:28:23:5a:21:a6:9a:
11:17:47:3a:da:d2:00:ef:9f:05:bb:d4:c1:66:d5:
6e:cb:e1:7b:b0:55:18:0c:a4:68:11:ca:af:82:76:
85:e4:fa:40:92:b0:11:1a:9d:d6:cc:ff:85:0d:93:
f9:5d:d5:68:36:da:9f:ed:30:71:f9:7e:21:c5:a2:
b4:60:7d:c0:f3:72:86:39:40:ef:36:da:c1:85:39:
06:dc:df:8e:1a:6b:4d:2f:ae:6f:4c:62:cb:8a:fa:
64:d7:fe:b0:95:ca:1a:70:0c:d3:74:f7:dd:ce:2b:
92:68:c3:70:df:36:41:c1:40:40:3f:27:dd:7e:21:
94:f7:11:c5:60:73:88:aa:7b:77:fb:ce:f2:67:a0:
91:37:17:9c:9b:e0:07:31:e6:dd:0c:7c:c1:74:96:
46:d9:51:a0:25:c4:06:68:a8:cd:86:a1:d8:9a:fd:
4d:94:9e:a5:82:07:f7:b6:30:a5:9e:63:43:f1:9d:
da:9a:36:87:92:c6:36:f9:cb:79:18:39:5b:83:53:
02:1e:45:84:de:39:4f:38:0e:ae:f8:01:09:d5:81:
65:f0:e1:24:12:6a:c0:e0:ff:0e:27:7c:8f:8d:27:
ec:e5:72:e8:72:59:f6:12:63:f9:a2:5c:55:cd:c4:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:25:25:29:B6:01:71:EB:9E:87:61:8D:C0:31:BD:27:64:F8:D3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ImklJSm2AXHrnodhjcAxvSdk-NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.229.0-85.122.230.255
Signature Algorithm: sha256WithRSAEncryption
74:31:85:72:65:0f:19:06:1f:19:38:c5:0e:31:2c:73:06:a2:
74:5a:fc:d7:d2:8a:c3:24:a5:77:48:4a:68:88:7e:00:46:3f:
2e:26:3a:0c:8c:0a:1e:3f:10:6a:13:22:e3:55:12:16:26:fc:
3f:91:d4:8f:92:a0:97:c6:5e:c5:83:12:fa:d8:29:4c:76:2e:
36:7d:89:25:0a:a6:87:b7:a1:1c:10:be:0d:65:a5:f8:3b:19:
66:d6:05:3c:b3:f2:c0:41:86:e3:03:c4:a0:d0:b1:d9:9b:d8:
64:4b:83:74:9a:39:9f:a0:08:f3:e8:cb:69:e8:ce:a7:8d:42:
be:d1:1a:f4:e7:10:2f:87:4e:5d:32:a6:af:b2:6e:8a:99:98:
86:93:24:b6:33:00:a1:8d:22:83:4a:14:32:d7:2a:05:83:35:
18:cf:f0:c3:17:62:30:c0:2f:7f:50:87:2a:3c:67:1d:06:af:
08:c5:91:61:6d:e3:de:63:61:00:fe:a2:b1:2c:82:8c:e5:10:
24:f2:4e:d2:ee:5d:a5:84:18:94:88:b4:29:6d:67:b9:14:1e:
25:88:56:cb:63:cc:fd:f3:42:5d:d9:79:a4:3b:f5:ba:ae:29:
0b:ae:b6:3e:ea:0a:c9:9b:d9:d4:b0:87:09:3a:d7:75:1e:08:
7c:3d:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:58 2024 by rpki-client on console-ams.rpki-client.org