Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/ME5yspDQIxMi2de1bSHC-mAHU4w.roa
File: ME5yspDQIxMi2de1bSHC-mAHU4w.roa (raw, json)
Hash identifier: sCQOWbMf80+M/EhL+DxKBJr+QTcZPGuaNe9FYglQCYk=
Subject key identifier: 30:4E:72:B2:90:D0:23:13:22:D9:D7:B5:6D:21:C2:FA:60:07:53:8C
Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial: 01912EEACA1168B3FA00F54FA36B61152FA0
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/ME5yspDQIxMi2de1bSHC-mAHU4w.roa
Signing time: Wed 07 Aug 2024 22:17:04 +0000
ROA not before: Wed 07 Aug 2024 22:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 94.101.106.0/24 maxlen: 24
2a14:7cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:ea:ca:11:68:b3:fa:00:f5:4f:a3:6b:61:15:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Validity
Not Before: Aug 7 22:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304e72b290d0231322d9d7b56d21c2fa6007538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:16:e1:31:b0:63:89:82:c3:32:b5:99:bc:
79:c3:6e:5b:73:6b:02:d9:b5:2d:cb:69:89:4f:af:
3f:23:45:04:58:35:21:13:e5:1f:05:f2:50:8f:e1:
90:62:a3:3a:c5:92:62:55:a6:2e:46:06:c6:ad:18:
d0:ac:c0:f6:bf:36:88:ff:42:49:f0:d1:f2:8b:fc:
f5:15:d3:74:84:3d:a1:e8:cf:e6:82:4c:1b:19:f1:
15:57:a9:db:37:5b:01:f8:3d:b9:85:02:3d:68:2a:
de:bf:52:ed:d2:3a:22:59:f2:a7:23:ce:f0:00:f9:
e9:54:68:96:36:22:02:6a:99:38:f4:22:67:cb:4c:
b5:81:27:6b:ba:f3:b7:69:d9:2a:17:d0:d1:f8:c3:
46:45:34:ad:9a:df:d9:7c:d7:d8:9f:55:8a:c7:c4:
f4:08:2d:43:1e:29:01:26:5b:e0:23:6d:b6:10:17:
ae:67:40:d8:81:ba:9c:43:5e:e8:38:3f:ea:76:c5:
a2:d6:35:ed:12:1f:44:13:98:79:d1:01:61:5b:cc:
03:e4:fb:f3:5c:6a:bb:82:08:17:0b:38:7a:64:3c:
96:3d:43:7e:cd:b4:f5:00:50:35:4a:57:4d:da:69:
81:cf:2b:b6:30:b5:36:73:9d:2e:5c:ee:70:11:64:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:72:B2:90:D0:23:13:22:D9:D7:B5:6D:21:C2:FA:60:07:53:8C
X509v3 Authority Key Identifier:
keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/ME5yspDQIxMi2de1bSHC-mAHU4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.106.0/24
IPv6:
2a14:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:82:bc:25:67:d7:85:fb:01:b2:67:09:31:b0:c1:7b:cc:7c:
ef:da:7d:1a:0c:87:ff:64:95:26:bd:5c:d4:ec:ad:98:d2:e8:
11:52:ac:bd:91:32:bd:52:42:cf:db:e8:5c:2b:fa:81:0e:0e:
37:85:56:8b:fc:cb:36:70:93:a2:28:ff:81:7c:d8:0d:20:5b:
55:91:1e:68:75:bb:4c:49:0f:44:15:e0:8d:85:e3:f8:46:97:
6f:9b:7a:6d:0a:fd:70:c8:81:f0:bc:1a:ab:1a:82:8e:f1:aa:
33:92:1c:44:e1:29:52:b7:1b:71:2d:30:6b:8e:a2:0a:d4:f2:
9b:7e:60:3f:61:42:0a:f8:6a:c8:0e:45:44:63:ff:b3:d7:eb:
92:32:aa:c8:6e:38:04:c4:ce:18:a2:20:8c:19:50:50:a9:ae:
5b:23:0a:83:02:49:f9:8c:3c:23:82:29:e6:30:7d:4c:e6:58:
f8:67:75:e5:73:ca:d2:9a:2d:d4:0b:c2:74:81:73:19:8e:1a:
4e:d0:97:53:46:89:8e:11:7f:b9:bb:5e:c2:ae:42:a1:e5:a8:
fc:90:d4:21:c0:a3:1e:79:a9:9e:b8:72:84:2b:d2:2d:b7:1a:
a9:fa:27:5c:11:bf:7c:9f:f9:d4:f2:4c:0a:12:5c:dd:06:f2:
7b:a7:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:01 2024 by rpki-client on console-ams.rpki-client.org