Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RmQ-_MwIF8JCeg-IsO9DWRXEQwo.roa
File: RmQ-_MwIF8JCeg-IsO9DWRXEQwo.roa (raw, json)
Hash identifier: nGiZQPmoyZG9MOob7HV4r5oBotVpIMR+t/pvIkSvSe8=
Subject key identifier: 46:64:3E:FC:CC:08:17:C2:42:7A:0F:88:B0:EF:43:59:15:C4:43:0A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01928DEE842D3D0640240BDC5B43FBBAD8BB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RmQ-_MwIF8JCeg-IsO9DWRXEQwo.roa
Signing time: Tue 15 Oct 2024 02:07:51 +0000
ROA not before: Tue 15 Oct 2024 02:07:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
103.100.168.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8d:ee:84:2d:3d:06:40:24:0b:dc:5b:43:fb:ba:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 15 02:07:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46643efccc0817c2427a0f88b0ef435915c4430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:83:89:05:0a:ec:18:7f:fd:22:27:e3:78:
31:73:23:dc:22:71:72:d3:a2:8f:bc:4b:d0:f2:83:
ff:8f:0f:26:d5:95:f1:39:85:e2:19:5a:8a:3a:bf:
08:55:21:c2:39:ff:61:3d:9a:8c:9f:53:f3:89:7d:
0f:c0:ad:3e:29:03:b4:e7:79:42:38:47:7c:1d:08:
86:e6:c6:4c:22:85:6c:f7:de:af:67:60:e4:f0:2f:
df:9b:23:d6:e6:98:f7:4c:b0:4b:6f:a0:a2:a4:3b:
ff:a3:87:d3:f1:c1:42:72:3d:9a:59:3b:58:c5:57:
33:96:b6:c9:c9:5e:80:20:80:18:ed:37:13:f6:ef:
d5:4f:35:18:fa:af:f5:96:81:37:ba:9c:2e:aa:85:
11:f9:ba:57:62:cd:2a:84:f8:54:91:f8:c5:8b:a7:
e1:c5:4f:ae:19:4f:f4:21:9b:55:7c:53:ee:52:5d:
f6:f6:13:6e:65:33:15:62:06:ae:79:9c:c2:cf:92:
b9:86:41:9e:e5:bc:bf:ef:96:44:25:d6:39:2d:fc:
7b:24:cf:11:9a:cf:6b:40:de:3f:2e:a2:54:80:ad:
48:e1:8b:8a:d6:a1:d4:41:3c:c5:b1:ad:71:1e:aa:
57:59:e7:4d:41:14:fa:70:88:80:39:10:1d:6f:33:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:3E:FC:CC:08:17:C2:42:7A:0F:88:B0:EF:43:59:15:C4:43:0A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/RmQ-_MwIF8JCeg-IsO9DWRXEQwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
103.100.168.0/24
185.233.18.0/24
193.107.218.0/24
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:39:a8:1b:58:18:83:2e:3c:74:6f:15:42:f4:bd:1e:12:b9:
8f:bb:7b:d8:46:65:8b:27:38:bb:2a:ac:3e:6d:6e:25:20:4b:
bc:e6:07:a8:d5:92:bf:a7:86:18:a9:73:8f:7a:09:df:c9:d6:
90:ee:4a:a9:6b:a0:11:40:74:a1:b8:e9:8f:aa:c9:d2:46:93:
df:aa:2f:a0:c0:96:75:f6:24:b5:53:87:97:2f:c3:0b:78:7b:
b6:87:4b:e5:d5:5e:64:f3:f1:6c:7a:21:07:bb:e4:20:4a:92:
b6:28:17:32:86:d7:67:95:02:17:de:90:ec:22:44:08:0e:88:
9a:ac:21:a1:72:fb:91:45:bb:35:f5:49:01:1c:a8:f3:82:01:
1f:15:a3:6c:a0:1f:b9:ff:59:81:d8:03:2d:bf:63:f9:5a:ad:
04:a2:10:b9:88:a7:65:ff:5f:a8:ca:02:80:a2:34:4e:44:c1:
87:89:c4:65:25:16:74:09:12:62:88:62:f4:9f:a9:9d:ef:80:
ee:07:6e:46:74:6d:a4:e8:42:3c:88:06:5c:7f:ff:de:cc:28:
6e:43:6f:91:88:4a:a5:3a:b3:9b:d8:66:71:b4:1a:cf:36:64:
53:e3:a6:ac:df:2d:0e:dd:d0:70:08:a6:a0:29:df:5d:ff:97:
8f:57:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:01 2024 by rpki-client on console-fra.rpki-client.org