Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/MbqxgVNNXP9HGni-Dlr8i-jNqOs.roa
File: MbqxgVNNXP9HGni-Dlr8i-jNqOs.roa (raw, json)
Hash identifier: a3XLq9/sjcvViDxyrgu95eNTZU/oqrX1orwwbMln+4U=
Subject key identifier: 31:BA:B1:81:53:4D:5C:FF:47:1A:78:BE:0E:5A:FC:8B:E8:CD:A8:EB
Certificate issuer: /CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Certificate serial: 018CCFA8E162BD574F135AED79A87B8BFFF6
Authority key identifier: 74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/MbqxgVNNXP9HGni-Dlr8i-jNqOs.roa
Signing time: Wed 03 Jan 2024 14:10:00 +0000
ROA not before: Wed 03 Jan 2024 14:10:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56485
IP address blocks: 185.238.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:a8:e1:62:bd:57:4f:13:5a:ed:79:a8:7b:8b:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b39e9019225a3b0ffe05a8356ebef33c27be97
Validity
Not Before: Jan 3 14:10:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31bab181534d5cff471a78be0e5afc8be8cda8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:c6:e0:b8:c8:d8:a5:70:b1:6c:29:e0:37:
be:6c:be:b7:8f:1f:bb:72:01:4a:80:9b:67:13:13:
63:43:b9:a7:cd:0f:79:d0:6d:1f:8e:c2:82:db:e5:
b7:c1:81:50:06:e4:1f:37:da:25:3e:7e:07:c8:a8:
a8:56:6f:e7:40:79:57:22:cc:57:9c:d5:e8:33:8d:
b0:06:12:57:56:78:2e:c0:f8:8b:af:8e:6e:0f:9b:
5a:cb:33:d6:8b:e1:70:bb:d0:28:14:4a:87:c6:31:
be:dc:2b:41:28:07:91:f7:95:d8:3a:6c:fa:22:c7:
57:d2:9a:99:99:be:53:c5:55:fa:ad:3b:94:0b:85:
18:82:38:38:5c:a6:92:2c:a8:33:2d:80:4e:77:72:
2c:26:4b:a6:1f:ae:47:e7:dd:5e:fb:6a:bf:a2:64:
4a:44:75:df:7b:db:2c:a0:3d:ea:e2:58:e8:7a:6b:
c0:64:61:72:59:e8:a3:34:e9:c7:48:47:9a:4b:bd:
84:88:3b:80:e2:ba:a7:95:ad:2c:bf:51:07:3f:00:
11:fd:fa:a2:79:46:d4:07:07:8f:29:af:a0:d7:38:
9a:5a:da:7f:cf:fa:17:dd:41:24:0f:2b:02:1a:bb:
53:42:a1:d2:51:99:8f:62:1d:54:fa:aa:7d:8c:1f:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:B1:81:53:4D:5C:FF:47:1A:78:BE:0E:5A:FC:8B:E8:CD:A8:EB
X509v3 Authority Key Identifier:
keyid:74:B3:9E:90:19:22:5A:3B:0F:FE:05:A8:35:6E:BE:F3:3C:27:BE:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLOekBkiWjsP_gWoNW6-8zwnvpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/MbqxgVNNXP9HGni-Dlr8i-jNqOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41d883-d99c-414b-9ab1-85a4926a739d/1/dLOekBkiWjsP_gWoNW6-8zwnvpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.136.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7b:fa:d0:29:d4:35:89:98:21:ed:f1:37:57:5c:4f:fb:f1:
07:8b:11:88:8c:0b:7c:db:a2:21:16:41:ef:a7:dc:e5:9c:ce:
81:e8:e9:9a:57:13:49:35:c7:05:5d:cf:bf:4b:93:fe:5f:47:
5c:90:72:7f:46:7a:91:63:0b:71:74:49:39:63:35:01:b3:cd:
95:f2:ce:26:23:64:22:f0:54:92:12:64:b9:59:db:ae:38:94:
95:c7:57:a8:e5:71:34:1e:f2:d2:ec:28:ae:7c:d6:a5:28:c9:
32:9a:62:9e:10:fb:f2:37:a9:4e:7e:ed:c6:a9:c2:0d:8c:38:
e4:de:1f:d0:f2:1c:69:79:28:c2:fe:91:e5:38:da:c8:fc:12:
62:6b:00:ab:b5:c8:8c:dc:66:b3:d2:be:5c:88:46:d7:4d:f4:
bc:c2:b6:03:7c:56:2f:b9:5f:e9:c1:a3:4a:0a:73:ec:d8:b5:
47:e2:1e:44:29:2a:7a:86:77:18:22:1d:9f:42:8f:24:85:86:
58:e8:12:16:30:1a:1e:b6:5f:70:d3:72:ec:60:85:10:26:9e:
a1:eb:a4:62:ce:c4:49:0b:d8:28:53:60:b1:dc:f1:50:b3:19:
3c:9d:ec:da:48:25:9b:08:74:29:cb:95:d1:f5:10:2d:f3:7b:
2a:36:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:54:22 2024 by rpki-client on console-ams.rpki-client.org