Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mdedWCu6jNDtGO2iD64Fpccz5VA.roa
File: mdedWCu6jNDtGO2iD64Fpccz5VA.roa (raw, json)
Hash identifier: N9tluoOaUSYj369oKKKCHRN25hP3aXCv8oiERjB+ce0=
Subject key identifier: 99:D7:9D:58:2B:BA:8C:D0:ED:18:ED:A2:0F:AE:05:A5:C7:33:E5:50
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAEAE732CB1191DB542FF4CFEA40FB
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mdedWCu6jNDtGO2iD64Fpccz5VA.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215985
IP address blocks: 195.136.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:e7:32:cb:11:91:db:54:2f:f4:cf:ea:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99d79d582bba8cd0ed18eda20fae05a5c733e550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:fd:33:24:6e:d1:df:58:f0:2e:a6:1a:b2:
0e:fd:34:4e:df:40:a4:c9:ce:6f:5b:d0:17:cf:99:
f5:7e:47:81:8b:39:01:c0:49:ee:72:1d:39:f1:bb:
c9:d6:80:a1:c0:f0:0b:c1:b5:40:14:a9:cc:dd:5a:
0d:e7:2f:ed:f9:5b:93:88:21:97:a1:2f:be:5c:a0:
bc:7b:4a:16:a3:4d:8c:59:33:2b:1e:78:09:f0:5c:
e8:bd:9e:b7:d7:e6:5e:4f:3b:92:f2:88:89:d7:67:
9d:75:6a:64:40:10:93:2f:83:4c:04:e9:e3:22:b0:
43:f7:58:90:fa:cc:da:6e:32:dc:fb:9d:d9:07:d1:
f0:3d:c4:b7:c8:77:5c:79:53:dd:8b:bc:f8:66:07:
4b:2d:9d:c4:59:fa:0b:11:f8:83:55:ef:c5:26:78:
12:b6:8b:1d:24:96:01:d6:4c:e8:ca:d3:2f:81:03:
96:b7:ab:05:68:33:26:f8:05:34:75:d2:b6:1b:fa:
0d:66:64:99:78:7d:a7:9d:22:12:a5:fd:53:67:db:
f0:36:80:c9:50:e5:6b:1d:ec:71:ff:5d:34:6f:80:
60:0d:3d:1c:89:57:38:83:d5:c1:e5:76:ec:f8:8c:
c5:1d:d7:b4:f5:fe:62:0b:90:e7:53:3e:c0:66:21:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:9D:58:2B:BA:8C:D0:ED:18:ED:A2:0F:AE:05:A5:C7:33:E5:50
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mdedWCu6jNDtGO2iD64Fpccz5VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:72:91:a9:05:67:6d:66:46:6f:7b:80:f6:44:76:9b:09:e1:
cb:55:8a:f3:dd:5b:41:72:95:88:90:0d:79:f3:e6:c2:97:8f:
90:0e:ba:ab:24:a2:43:8f:43:a0:a1:d7:75:01:65:d2:1c:04:
a0:1f:07:f6:db:c9:b8:32:3a:2f:58:13:50:26:ef:2d:64:84:
ce:3e:06:b4:74:5c:78:9f:b2:9c:45:85:23:69:da:3b:8e:39:
32:95:df:af:dd:29:a7:6d:8e:35:d2:19:23:7c:67:3d:af:7d:
d4:60:ce:d4:c3:e3:35:8e:16:26:2a:c5:0c:a5:29:75:5e:bb:
f9:55:03:c7:51:ee:b5:5d:0c:e0:dc:1b:77:3a:6f:2a:b5:b6:
e7:e5:bc:86:84:d8:26:f8:fc:7a:42:22:a1:1e:ba:c7:78:cc:
68:2e:65:99:e8:a5:e6:4e:be:f3:3e:7d:d4:81:0a:bc:a2:f6:
40:7c:90:db:58:d1:d8:ce:4b:a9:69:11:52:73:4c:80:15:64:
4c:7c:29:b4:86:de:5c:15:b4:5b:50:06:01:13:f5:16:a3:43:
6a:3e:aa:fb:a9:e5:9e:fb:6f:7d:08:33:57:4c:09:6b:3d:7e:
e8:d5:ec:b6:d7:2c:1a:83:df:70:df:96:46:e5:31:db:38:44:
3a:64:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:45 2024 by rpki-client on console-ams.rpki-client.org