Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mrp4B7AXCH5gdxhwAgIEz79mv2A.roa
File: mrp4B7AXCH5gdxhwAgIEz79mv2A.roa (raw, json)
Hash identifier: X5vJIoKsLarmsb8glnffQqgTaA9ZA4mh2QexnLXyLIQ=
Subject key identifier: 9A:BA:78:07:B0:17:08:7E:60:77:18:70:02:02:04:CF:BF:66:BF:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019340C4A7B1C2CC3BFD55E0703ABA14D3B3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mrp4B7AXCH5gdxhwAgIEz79mv2A.roa
Signing time: Mon 18 Nov 2024 19:34:10 +0000
ROA not before: Mon 18 Nov 2024 19:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214128
IP address blocks: 103.245.229.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
103.245.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:c4:a7:b1:c2:cc:3b:fd:55:e0:70:3a:ba:14:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 18 19:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aba7807b017087e60771870020204cfbf66bf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:31:84:34:17:07:e9:8e:23:5c:e2:b4:cd:
9d:57:bf:cb:75:a5:d0:72:27:15:c2:a0:4f:50:20:
78:2d:0a:73:6d:07:1b:a4:3b:29:04:38:fb:2c:d1:
5f:91:d5:fc:b3:3f:0b:f1:9a:ad:e9:33:db:04:ac:
cc:d3:aa:f9:49:02:83:73:46:27:73:a1:34:58:3d:
ef:57:fb:b0:db:9b:d1:9c:e2:7f:33:cd:fc:80:c0:
c2:27:58:95:68:a0:e7:8b:64:6a:89:4b:ab:5d:09:
84:be:fc:17:97:68:22:d7:91:90:37:8e:f5:53:d2:
e7:01:1d:f0:d5:92:a8:74:0f:04:ca:0d:cc:a1:b3:
99:b3:c6:2f:df:9b:e5:6d:d3:b9:60:ee:ba:31:64:
db:21:91:51:4b:50:3d:15:fc:c8:71:bb:69:d0:d5:
72:bf:d2:de:9a:b4:5e:11:30:ae:88:cc:95:41:a9:
a9:52:9f:fd:88:be:3a:f2:8c:fc:a7:52:bb:f5:2a:
ec:0c:4a:11:86:2e:c7:3d:6c:2c:03:d9:e7:57:11:
81:d4:92:b5:70:6a:39:63:f2:8d:18:09:80:48:45:
40:4a:94:f6:19:00:01:ac:e3:4a:a0:ee:af:a2:56:
ea:71:1a:d4:c7:72:25:b3:30:13:b1:66:96:2d:60:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:78:07:B0:17:08:7E:60:77:18:70:02:02:04:CF:BF:66:BF:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mrp4B7AXCH5gdxhwAgIEz79mv2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.229.0-103.245.231.255
Signature Algorithm: sha256WithRSAEncryption
96:82:9a:50:fe:d4:75:8b:10:48:18:4a:da:b9:b1:08:72:37:
6e:80:c6:4e:b2:1c:f5:4b:d6:26:04:80:3e:0e:c6:4a:73:9f:
95:84:5e:ac:79:01:35:13:e7:ef:1f:18:d7:21:46:c9:b8:3c:
ce:ac:66:c6:2d:c9:35:34:4e:d8:57:3c:24:63:1b:99:8b:70:
a1:22:f2:92:c5:68:b2:e4:ce:9d:ce:b1:1f:de:de:e1:e6:ff:
1f:f4:f5:0c:2e:74:91:e4:0b:df:10:57:58:e3:d0:a9:7a:69:
3e:36:e2:56:fd:b9:96:6d:35:b4:21:48:9b:d2:e4:54:b6:2f:
99:c1:da:82:9c:ee:db:04:e5:f2:f2:68:b6:f1:7a:2f:e4:cc:
af:2f:fe:e9:81:88:1c:cd:e7:27:2f:0c:c5:bd:1f:7a:c1:fd:
8e:d0:69:5e:5e:02:82:d3:a4:23:3e:83:e8:71:41:70:bd:6f:
b9:35:54:6a:7d:12:74:84:cd:f8:47:d5:b8:aa:2a:d7:84:e8:
0b:81:0b:58:f8:5c:6e:f7:7c:44:f2:95:24:1b:17:93:51:55:
12:d1:dd:69:e8:00:26:07:e4:50:8e:d5:fc:c0:d4:10:a9:93:
0a:56:83:09:ca:80:b3:b4:95:14:c4:44:bb:9b:1f:9a:af:e1:
d5:bb:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:16 2024 by rpki-client on console-ams.rpki-client.org