Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/mgWSaPSgLlBitT1hF0V95uR6S7c.roa
File: mgWSaPSgLlBitT1hF0V95uR6S7c.roa (raw, json)
Hash identifier: rHVnl6JM4frAP/BqBLV7KEDN6GRvfG8HDgZ7UiRHsPE=
Subject key identifier: 9A:05:92:68:F4:A0:2E:50:62:B5:3D:61:17:45:7D:E6:E4:7A:4B:B7
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 018CC6B8283C8A8679662842BEB52CD052D0
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/mgWSaPSgLlBitT1hF0V95uR6S7c.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50606
IP address blocks: 31.6.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:28:3c:8a:86:79:66:28:42:be:b5:2c:d0:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a059268f4a02e5062b53d6117457de6e47a4bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:90:c9:cd:47:57:ed:91:7d:6a:87:1c:df:
f0:b9:75:fd:59:d9:5b:56:db:94:c0:af:02:ce:c3:
56:95:03:3d:f8:52:a4:89:78:d8:60:9f:68:43:b3:
dc:c2:5f:48:69:42:00:94:f7:3c:65:c5:67:2f:aa:
30:ed:62:eb:11:5e:30:c3:0a:8b:60:c4:9e:ed:7b:
5d:c3:a1:ce:89:a8:d9:07:77:cc:ae:5d:87:c3:d1:
0a:61:0c:90:d2:4f:2a:98:b0:de:b2:a9:30:af:f0:
e2:da:ba:29:30:16:55:19:a0:9c:46:db:28:e6:11:
53:e5:2a:60:69:1e:ba:4e:c0:02:e4:50:53:28:b5:
8a:af:aa:31:da:c9:d0:d9:1e:f4:cc:b3:9c:78:4d:
71:10:3c:81:b0:50:28:e8:1a:83:27:4f:9e:8f:4c:
b8:bd:d0:f7:6e:3a:f8:bf:c7:0e:ae:36:f9:ef:13:
ad:bd:fb:01:cb:21:33:23:bd:22:43:7d:ff:43:40:
68:1f:c2:02:ff:71:93:a0:7a:06:02:90:b4:5e:f0:
66:96:a9:c5:7e:79:ae:38:c0:83:0d:01:a1:7b:68:
09:33:b0:4f:5f:e2:95:67:39:f5:dc:fe:d6:09:d5:
15:47:83:8a:29:66:27:3f:39:b3:c7:5d:32:f8:c5:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:92:68:F4:A0:2E:50:62:B5:3D:61:17:45:7D:E6:E4:7A:4B:B7
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/mgWSaPSgLlBitT1hF0V95uR6S7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.247.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3b:57:38:d5:f4:c2:d3:fb:58:7f:ba:d0:61:de:f6:b4:36:
fe:65:58:80:6f:7b:f8:fd:ec:05:9c:b8:a1:33:a8:bf:1b:d8:
71:82:d5:98:e4:99:62:a2:e2:8f:59:bc:85:39:57:d4:98:88:
32:53:03:ee:e3:5b:5a:3e:2d:02:e4:9c:ae:d0:b2:d2:b6:be:
d0:6b:69:d8:ba:f6:4c:8d:bb:86:ec:bc:b6:3d:c3:66:1c:65:
1d:2b:61:33:b3:f9:83:8c:14:65:4d:a9:92:23:7c:84:c5:53:
08:01:4a:2d:6f:db:be:2d:a3:a7:94:95:6c:eb:c0:59:58:7e:
1c:b6:55:f8:92:9f:68:18:08:a1:76:fb:25:69:f6:71:cf:08:
3c:87:b2:16:42:9b:ac:45:b4:b9:c6:b1:4b:1a:76:a3:eb:3b:
6f:06:d8:a2:04:1b:c2:cc:5f:18:25:9d:ec:97:70:99:f9:d6:
e7:6a:c1:bb:d0:75:bb:2d:d0:cd:1f:49:61:cb:79:47:88:9f:
9b:84:ad:af:f6:f2:6d:17:b2:c8:13:1e:43:0f:6d:95:5c:cf:
07:4d:08:22:25:6c:b3:d2:b9:d1:4e:03:75:20:f3:96:26:ee:
29:73:64:59:a9:99:67:8d:99:59:3f:9b:a3:a6:45:14:89:a0:
61:7b:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:52:43 2024 by rpki-client on console-ams.rpki-client.org