Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MAhYxbrvToKueEgMXdYQtN-MM0.roa
File: 1MAhYxbrvToKueEgMXdYQtN-MM0.roa (raw, json)
Hash identifier: KE6hDj4F6hmk2z71FyrCz8eo/4rIIca1/OealZEteCk=
Subject key identifier: D4:C0:21:63:16:EB:BD:3A:0A:B9:E1:20:31:77:58:42:D3:7E:30:CD
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 0192D7643ED8497E48CE8C13E737C1A9DF68
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MAhYxbrvToKueEgMXdYQtN-MM0.roa
Signing time: Tue 29 Oct 2024 08:28:44 +0000
ROA not before: Tue 29 Oct 2024 08:28:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59745
IP address blocks: 45.151.92.0/22 maxlen: 24
45.151.94.0/24 maxlen: 24
80.66.96.0/20 maxlen: 24
80.66.106.0/24 maxlen: 24
80.66.109.0/24 maxlen: 24
185.198.200.0/22 maxlen: 24
195.20.20.0/22 maxlen: 24
2a0a:8ec0::/29 maxlen: 48
2a0a:8ec0:3000::/36 maxlen: 36
2a0a:8ec1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:64:3e:d8:49:7e:48:ce:8c:13:e7:37:c1:a9:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Oct 29 08:28:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c0216316ebbd3a0ab9e12031775842d37e30cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:5f:e3:f5:60:79:9d:f7:51:21:71:74:ee:
0b:eb:2c:2d:43:8b:59:3a:1e:c1:63:14:d0:c7:24:
a2:32:8e:de:bf:16:32:af:1b:b5:99:85:13:e3:33:
13:69:a1:1e:4b:e8:a0:f0:65:11:55:10:ed:16:33:
3b:f9:33:65:a3:02:a8:70:21:ee:18:68:17:26:e6:
8c:7c:6b:e9:4f:68:8b:07:c5:34:90:2c:18:74:bb:
a0:fb:ec:d6:86:dc:f3:21:98:ec:80:e7:4a:98:40:
ee:cb:69:22:89:78:c4:eb:fb:d7:45:62:ea:14:b1:
e2:36:ad:61:36:6b:75:55:1b:85:79:46:e8:52:87:
44:3a:1d:cc:a5:51:c4:ec:52:e9:91:9e:7e:e5:2c:
58:f3:43:5c:24:e9:93:9d:5a:93:97:dc:01:d4:10:
4d:ad:37:80:68:bd:be:c9:2b:a6:d6:a1:3c:f1:b9:
ef:33:d4:64:7f:30:cf:e4:f4:81:14:3a:b5:72:7b:
55:6f:cd:cf:19:6a:1a:94:53:db:b0:b8:ff:48:96:
9d:fb:5c:5b:c5:3e:71:a5:27:fc:a9:88:45:78:df:
4b:69:f4:27:ce:ca:1b:61:9d:13:d7:09:1b:97:76:
f3:bd:93:ae:15:6d:9a:66:54:f3:ca:93:00:b2:a8:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:21:63:16:EB:BD:3A:0A:B9:E1:20:31:77:58:42:D3:7E:30:CD
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MAhYxbrvToKueEgMXdYQtN-MM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:07:9d:27:66:0b:36:27:8d:d1:8f:3d:1d:fe:23:b5:1f:30:
1f:73:38:0e:aa:0a:b8:36:69:18:f7:a1:81:4a:6d:96:3a:ea:
76:fd:1c:62:fb:26:fe:14:43:5a:18:f8:34:bf:01:b5:98:fa:
08:fb:dc:0d:b1:bb:57:0d:cd:89:f5:69:f7:dc:a5:66:91:77:
51:c4:26:af:82:6e:04:a0:ba:50:f8:84:53:7b:d5:43:95:4e:
9f:3b:ef:92:4b:df:c5:8d:de:96:99:5d:54:3d:d0:50:31:5d:
5d:2e:e0:28:70:88:c3:da:8e:c3:22:53:51:ef:ab:1d:06:43:
2a:0d:33:e5:8d:15:7a:9c:56:ef:2e:97:42:ae:41:d2:cd:a9:
cb:76:45:ff:9d:9d:16:e2:10:43:ba:84:86:98:65:95:6b:b0:
18:5f:31:5a:10:2a:46:46:67:fd:0f:9e:ad:f9:70:45:5e:6f:
a2:2d:d1:96:6b:58:bd:3a:1b:67:12:cd:2d:b8:da:f0:68:80:
4e:b6:d2:ea:31:b1:87:98:fe:47:2d:f4:9b:d7:8f:50:33:bf:
95:13:68:9a:01:b9:1e:5a:79:1d:69:a7:0b:23:58:94:5e:51:
56:55:39:22:ba:d2:a9:01:af:bb:ea:98:a0:0f:5d:9f:69:e0:
54:53:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:22 2024 by rpki-client on console-ams.rpki-client.org