Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xMH_umsl3gsCWrpJ2mEjkjNwmo.roa
File: 1xMH_umsl3gsCWrpJ2mEjkjNwmo.roa (raw, json)
Hash identifier: +YLM10aWBkp/dXOQsILjS3e7G+4xs1hzIi31ufCI37M=
Subject key identifier: D7:13:07:FE:E9:AC:97:78:2C:09:6A:E9:27:69:84:8E:48:CD:C2:6A
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC727581767880BCC4707D97574B8A4D1
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xMH_umsl3gsCWrpJ2mEjkjNwmo.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213083
IP address blocks: 213.238.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:58:17:67:88:0b:cc:47:07:d9:75:74:b8:a4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71307fee9ac97782c096ae92769848e48cdc26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:c8:2a:3b:a9:8e:c2:1c:57:c4:93:be:d8:
6b:f9:6c:9a:cc:09:e1:dd:68:b4:ba:b2:89:d4:38:
b9:cb:d5:6a:04:b2:a4:b9:16:0b:d8:52:7c:e9:af:
7e:53:af:b9:c2:a3:95:d8:c8:75:f4:b0:45:65:98:
60:d5:6f:3e:c6:ad:de:73:46:28:77:13:0c:a3:ad:
7f:26:ae:d3:af:22:9f:73:3c:f6:17:81:59:91:43:
6a:b8:ed:40:d2:09:e5:a0:16:18:2d:96:67:53:20:
28:f9:0b:41:94:da:fa:8d:df:22:a9:d9:b3:56:9d:
d5:a4:1d:d1:28:f7:e3:66:f6:b1:da:52:23:dc:8b:
d0:e9:0d:2b:a0:28:dc:4f:10:02:06:61:ad:1b:6e:
d4:47:70:09:4c:b3:02:1e:46:5f:42:c6:06:e2:ff:
5e:fb:81:69:36:e1:d9:09:3d:c4:c1:c5:27:71:c7:
34:f6:00:e6:27:7d:c4:c7:b1:3b:72:69:5e:b0:30:
8f:06:aa:8d:a8:00:88:bd:22:75:3b:b1:09:67:8b:
6c:47:0b:08:87:2f:4d:96:45:59:ae:74:90:13:aa:
cd:26:be:88:0b:9f:5d:6d:16:dd:33:56:0b:1e:87:
d2:5e:76:9a:04:d1:bf:d6:c8:06:66:b1:aa:ba:88:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:07:FE:E9:AC:97:78:2C:09:6A:E9:27:69:84:8E:48:CD:C2:6A
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1xMH_umsl3gsCWrpJ2mEjkjNwmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.185.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b3:20:4a:9b:e8:41:e6:8b:99:7c:9d:8c:b6:8c:95:bc:f9:
4d:02:c7:ba:96:42:5a:e8:a5:41:a6:86:85:13:8e:57:87:b6:
d1:82:68:9b:8b:b7:f2:b7:1f:60:bf:cc:d0:96:ee:bb:43:a4:
7b:85:89:2c:d1:a6:a4:92:a3:04:39:d4:12:12:03:cd:a6:45:
ff:31:05:8b:14:9f:75:66:5a:de:cd:65:b7:2a:65:e3:38:e7:
44:b3:32:b7:d3:d6:6b:59:6f:0e:15:1c:1e:ce:14:8c:00:05:
14:ee:a3:1c:83:85:85:f3:62:4c:dc:de:b0:76:0c:80:c2:4e:
e6:d8:fb:d7:d1:6f:66:87:a4:1c:4b:c8:af:f9:41:06:b9:20:
2d:72:48:f1:36:d4:51:3e:1b:31:4c:5e:25:93:ce:82:df:1c:
32:06:9c:b6:83:d0:38:3f:f4:48:0a:01:5a:56:d7:e6:ce:26:
3d:6a:0f:48:49:d6:8e:6e:d7:9c:4f:dd:bc:61:41:5d:29:9a:
b1:75:46:01:a6:95:58:36:c9:6c:7a:80:e1:2d:ce:ed:a7:8c:
b1:aa:ce:fe:ec:87:3d:ef:2d:42:94:4a:f3:d9:6a:83:5c:ae:
a9:df:d2:02:da:79:c2:a5:29:e9:79:5c:22:61:83:38:84:55:
57:25:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:54:02 2024 by rpki-client on console-ams.rpki-client.org