Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/MhHKdtnCDNpyV0NOeXzvm7dCFhs.roa
File: MhHKdtnCDNpyV0NOeXzvm7dCFhs.roa (raw, json)
Hash identifier: vYGXp/uT3zlu16EzOmbL9shkccLNsKRYWpTHSKQl8cI=
Subject key identifier: 32:11:CA:76:D9:C2:0C:DA:72:57:43:4E:79:7C:EF:9B:B7:42:16:1B
Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial: 018CC64A8F7DC7FF4C1495951F2DEFE43B62
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/MhHKdtnCDNpyV0NOeXzvm7dCFhs.roa
Signing time: Mon 01 Jan 2024 18:30:24 +0000
ROA not before: Mon 01 Jan 2024 18:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208532
IP address blocks: 45.130.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8f:7d:c7:ff:4c:14:95:95:1f:2d:ef:e4:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Validity
Not Before: Jan 1 18:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3211ca76d9c20cda7257434e797cef9bb742161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:da:4a:ab:9b:47:6f:fb:21:97:c2:bd:30:
4b:dc:66:3e:0c:92:be:6b:0e:d2:f2:b4:f2:75:0e:
7d:4a:bf:b7:a1:ac:4e:4a:08:a7:fa:ba:eb:a1:9f:
84:b8:51:01:dd:f8:75:3e:78:3e:66:82:48:40:47:
3a:08:f9:4a:40:04:2d:6a:3e:1a:0a:f3:c8:f3:dc:
44:9d:31:24:98:dd:db:29:f7:d5:47:5e:d1:b7:20:
d1:64:67:35:fa:c1:7e:bd:26:c5:00:f0:25:c1:96:
d5:c3:93:5f:00:c0:a8:0f:fa:99:fc:a7:d7:a5:e2:
bf:1b:e2:86:21:60:76:a4:a1:23:c8:5b:42:a3:13:
1e:e1:fc:d6:42:b4:97:74:65:20:84:62:41:74:fa:
be:5b:6e:ac:5e:7d:13:bf:5b:07:c8:ee:88:6a:4c:
b0:4c:cb:c4:a0:0e:c6:c3:d4:e0:2d:09:f2:21:26:
fb:30:23:e6:14:ac:e3:00:e2:22:61:14:5b:de:17:
b8:8d:6f:ce:f3:fc:8e:f7:09:24:f4:34:5b:16:e7:
3b:46:f1:4c:ea:79:32:d1:d4:8f:ea:ec:b5:5c:bf:
54:4a:fc:1d:6b:28:1f:df:96:86:5f:89:8d:e9:00:
a2:09:d0:0f:f3:bd:6b:ab:08:4e:3d:4f:6d:e5:a6:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:CA:76:D9:C2:0C:DA:72:57:43:4E:79:7C:EF:9B:B7:42:16:1B
X509v3 Authority Key Identifier:
keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/MhHKdtnCDNpyV0NOeXzvm7dCFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:9e:87:4b:1f:80:33:ab:48:f4:e3:10:5c:83:5a:3a:d0:65:
37:a7:e8:2c:33:ed:50:66:9a:b5:4e:25:1f:41:55:b9:63:06:
3f:6d:33:05:3d:99:54:10:3c:fc:ae:f2:04:cf:e1:dd:06:7d:
36:3e:92:46:0a:f0:da:30:04:12:04:42:2b:e7:8d:06:74:b0:
4c:bd:3a:78:a8:5e:e2:c5:0e:9d:98:8c:0e:20:7f:47:3f:84:
d2:c9:5f:13:e1:16:15:48:9f:eb:f7:6b:2c:35:7e:4b:67:38:
7e:01:ed:be:f3:bf:a9:46:fa:54:01:75:1d:c8:74:72:92:6c:
de:4f:32:37:68:73:31:4b:a3:dd:b4:a9:9b:1c:c9:05:90:1e:
7b:77:c7:eb:bc:49:04:6b:51:a9:5f:85:87:03:55:55:f1:ae:
04:3a:5f:c0:17:71:f5:ee:9e:ce:47:b1:cb:f4:58:05:8c:69:
50:b6:cf:53:91:e9:64:e5:a7:c0:91:8c:88:c4:f4:25:43:5f:
44:09:99:c9:78:e9:8b:fb:6d:49:c2:19:63:5c:11:4f:e8:ef:
c2:c9:47:81:29:8b:e1:4c:22:31:16:12:28:c6:26:c9:56:22:
5a:28:6c:a1:94:f7:33:12:08:2b:eb:dc:bd:b7:df:d4:bd:10:
32:e7:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:41:15 2024 by rpki-client on console-fra.rpki-client.org