Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/MT7641y4MmWsW36X22pQedAMsLQ.roa
File: MT7641y4MmWsW36X22pQedAMsLQ.roa (raw, json)
Hash identifier: 5Sly1HOFjNQL84dvgbN+qLrFW0OcEgpimqUwCE7ipvw=
Subject key identifier: 31:3E:FA:E3:5C:B8:32:65:AC:5B:7E:97:DB:6A:50:79:D0:0C:B0:B4
Certificate issuer: /CN=385e4d3a6709740dd91b98f5590687b5d596d806
Certificate serial: 018CC7954794C45838298538E817771BD82C
Authority key identifier: 38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/MT7641y4MmWsW36X22pQedAMsLQ.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201864
IP address blocks: 146.19.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:47:94:c4:58:38:29:85:38:e8:17:77:1b:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385e4d3a6709740dd91b98f5590687b5d596d806
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313efae35cb83265ac5b7e97db6a5079d00cb0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:a7:6a:5c:7b:5c:9c:1f:41:e5:50:7e:ac:
d0:57:9f:97:94:a6:f0:14:46:a5:0d:23:bd:84:a7:
04:65:3d:39:d1:d7:69:70:00:40:f2:ef:fe:4d:b8:
9b:ad:5f:76:03:34:b2:1e:e8:47:70:ef:21:24:ad:
4b:84:bd:a1:65:e5:5c:e7:bb:9c:99:27:0b:c6:66:
f0:1b:86:ce:8a:40:ee:c5:2d:a5:ee:ae:e1:a3:e2:
d4:e1:2f:fe:62:58:c1:bd:32:62:27:86:f5:de:29:
9d:83:7e:c5:2b:1d:13:a2:de:29:ba:ab:fc:22:05:
93:b1:5e:3d:a9:23:fb:27:7d:ba:aa:0e:d9:0b:82:
1e:d1:ea:b5:4d:2f:5b:94:82:54:b3:43:cb:63:04:
75:e8:11:8f:fe:a2:9d:a5:0f:f0:f5:27:46:ca:0e:
59:48:16:8a:14:c2:05:2a:d3:46:6e:58:3f:e6:0c:
7e:c4:1e:4a:af:df:6d:c4:41:e8:ea:cd:e2:e4:45:
65:47:f1:01:bc:44:e7:64:74:1e:6e:47:81:da:ea:
81:bf:07:9b:7a:5f:1d:fe:cd:81:99:dd:fe:cd:d5:
90:a5:16:e6:b4:e3:af:35:d9:d2:4f:43:d2:f3:e3:
a5:24:29:08:5a:ff:f1:a2:da:19:7f:38:0d:65:d0:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:FA:E3:5C:B8:32:65:AC:5B:7E:97:DB:6A:50:79:D0:0C:B0:B4
X509v3 Authority Key Identifier:
keyid:38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/MT7641y4MmWsW36X22pQedAMsLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.138.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f9:0a:f8:7d:74:41:07:04:42:30:d5:1a:26:48:ec:cb:23:
78:8a:d4:44:bc:92:3c:d7:19:5e:55:36:ea:83:4b:b2:3a:ec:
48:f2:65:3b:31:50:3b:f3:12:1c:35:42:f3:45:5c:8e:3c:7b:
55:34:c7:2e:f3:31:45:a6:48:0c:10:cc:72:75:50:b8:76:55:
2b:04:9b:b0:42:7d:a6:17:ae:92:37:ac:70:bc:d5:dd:2c:e6:
13:f2:fc:9b:88:71:31:9a:aa:cc:8a:f6:eb:8f:63:cc:9b:12:
d9:5a:fd:b3:f9:9b:52:11:a6:5f:93:5a:bd:99:b9:bb:91:4b:
1b:e6:bd:ff:0f:39:9d:97:01:43:dd:cd:ca:b2:95:54:e1:b4:
a4:c7:75:da:92:89:87:ad:a7:4e:cd:f6:27:71:da:f9:5c:a6:
d2:63:d6:ad:1c:26:19:d9:f3:b2:1f:0c:63:d6:35:04:ae:70:
4c:66:c5:6d:4a:0d:9f:29:61:52:d2:f2:2e:f7:42:d6:f1:57:
8c:40:04:2a:92:a5:76:2c:a2:52:10:c0:84:b5:45:3c:da:76:
ca:93:47:86:2b:fd:22:cb:34:10:03:e0:0b:9e:ec:9e:5d:d9:
75:24:e3:24:4f:aa:86:f2:f7:af:ec:f7:ee:2d:c9:ca:25:d2:
82:b4:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:26 2024 by rpki-client on console-ams.rpki-client.org