Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/MgGI7B3fjab8TDG9TqsDbBpzIuo.roa
File: MgGI7B3fjab8TDG9TqsDbBpzIuo.roa (raw, json)
Hash identifier: qF8Sb0iuLLd9l8hswuRKDq+U6ctKMzkl4p/eruCW1ec=
Subject key identifier: 32:01:88:EC:1D:DF:8D:A6:FC:4C:31:BD:4E:AB:03:6C:1A:73:22:EA
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73B89E91930A146B5ED4C9BE0852E
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/MgGI7B3fjab8TDG9TqsDbBpzIuo.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199465
IP address blocks: 2a13:b487:1c00::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:89:e9:19:30:a1:46:b5:ed:4c:9b:e0:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320188ec1ddf8da6fc4c31bd4eab036c1a7322ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:2d:54:24:23:72:e2:f6:36:bc:0c:96:0a:
5c:a9:bc:f7:43:08:05:b8:ac:c3:08:93:22:6d:e3:
a5:ce:92:49:8f:d5:6e:ce:9a:7d:b1:64:b7:32:32:
8e:c4:7b:a9:f2:df:a9:fb:c7:d2:9a:de:07:4a:c0:
a0:ba:ce:78:29:43:4e:df:65:53:e9:18:d2:c6:34:
ea:4a:a4:f3:d4:0b:2d:d7:34:07:56:dd:a6:4e:dc:
f0:f8:26:ad:1a:30:8f:12:37:0f:d0:69:12:fb:99:
52:0b:3f:d9:0d:03:86:b7:e9:9c:fa:10:bd:72:3c:
d6:36:5b:aa:98:de:ad:c8:6b:1e:93:42:2c:b0:c7:
09:da:66:06:ee:a0:05:27:6c:e3:56:f6:2f:d2:77:
19:32:89:35:53:2e:10:df:bb:f7:1c:2e:fb:72:7f:
49:f7:73:23:3e:a3:2e:7c:27:2d:3f:df:d6:5e:a7:
a8:d0:90:3b:47:51:14:f9:94:ac:4f:78:22:27:db:
de:3e:de:6e:97:63:f2:dd:39:3a:b4:bd:d9:f9:fb:
8a:e8:1f:39:e0:7d:4c:45:55:77:7a:ef:ab:6b:d3:
45:0e:43:26:11:74:5e:c0:ec:25:37:9a:12:65:fe:
66:11:17:d6:bc:d6:b3:15:d9:92:ae:1f:20:55:03:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:88:EC:1D:DF:8D:A6:FC:4C:31:BD:4E:AB:03:6C:1A:73:22:EA
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/MgGI7B3fjab8TDG9TqsDbBpzIuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1c00::/39
Signature Algorithm: sha256WithRSAEncryption
44:a8:4e:1a:d5:d3:3c:d8:bc:b0:d2:c6:b2:5e:6c:cc:e4:5a:
c7:bb:48:cc:d2:ba:74:05:1a:c2:76:4a:2d:9e:9f:6d:6d:d5:
0c:3a:b0:60:ee:65:52:54:ed:04:c1:39:40:bc:f3:4a:d5:b8:
e1:f3:02:94:98:4f:18:2b:31:3e:c3:4e:72:fc:34:12:d6:d7:
24:24:d1:a0:8a:53:5a:56:50:27:14:56:14:4b:a8:84:5c:ad:
e9:a2:b9:8b:21:bf:d1:36:91:c9:68:5c:0b:94:5f:51:69:d0:
c6:45:43:15:28:e6:68:14:6b:e4:2d:42:f8:de:c5:1c:0e:03:
77:29:1f:6a:f4:fd:22:0e:23:3e:ec:99:2a:1a:ec:d0:a2:bd:
2b:80:f8:e5:ac:b7:68:70:87:89:b9:f0:8e:85:18:1b:f7:a9:
69:14:ee:d0:f9:55:fd:bb:a7:84:62:23:a3:69:e9:19:23:51:
aa:ed:d0:cf:f5:7b:6c:ca:1f:02:26:2e:80:fe:ee:d5:7c:4b:
51:51:22:9b:8a:a4:0d:85:be:96:7e:5f:0c:ea:5b:93:c9:32:
6a:ba:70:eb:09:fe:59:11:eb:5f:95:20:81:d7:74:52:94:8c:
f4:d8:c4:7b:1b:24:35:63:51:a9:7c:a2:29:be:59:6e:65:00:
c3:83:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:41 2024 by rpki-client on console-ams.rpki-client.org