Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFYAqXZ6-DkvyRcQSV2klk0CqQ.roa
File: MxFYAqXZ6-DkvyRcQSV2klk0CqQ.roa (raw, json)
Hash identifier: 64kQw73rIIAYqL26a7OLzrX5ftSfMQDWisFZOInj2p0=
Subject key identifier: 33:11:58:02:A5:D9:EB:E0:E4:BF:24:5C:41:25:76:92:59:34:0A:A4
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018CC5DC6E212223DAB0FD9EB07EF3666708
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFYAqXZ6-DkvyRcQSV2klk0CqQ.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 45.12.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6e:21:22:23:da:b0:fd:9e:b0:7e:f3:66:67:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33115802a5d9ebe0e4bf245c4125769259340aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:93:5a:81:7b:36:03:96:83:41:f5:e3:a7:
9d:82:d2:51:f3:47:6f:e5:f5:54:b6:ed:98:c6:a0:
8f:96:25:e3:b9:c4:32:ea:30:04:47:1a:bb:5c:13:
d5:1b:7f:2e:37:51:00:8d:12:48:3f:3a:cc:15:d6:
06:02:d5:2f:66:30:c6:01:83:b3:5c:1d:11:44:0c:
2c:74:67:90:e1:3e:8c:40:58:4c:03:3e:3e:19:0d:
47:56:05:d7:a8:0d:40:b7:a3:3f:d9:59:2d:63:e0:
06:88:ba:1f:eb:87:a7:60:05:e3:f7:de:a4:64:25:
02:15:54:ee:fd:00:60:89:cb:fe:c0:38:34:f7:d9:
31:bd:fb:14:57:9f:d2:3d:5c:7c:04:44:08:b9:d3:
91:e5:ce:e1:d7:89:aa:94:d8:bb:b1:dd:9d:fb:06:
6a:46:fa:dd:d7:00:44:14:0f:1f:ee:8b:4c:57:26:
72:95:c7:b8:35:ba:8e:4f:8a:c1:60:92:f9:d3:0a:
4d:ef:8e:eb:b3:ef:4f:66:4f:ca:85:ed:2c:e4:3b:
c5:80:78:35:23:0e:f9:db:7c:3d:88:bf:49:2c:c0:
b3:17:89:5b:21:c0:89:a9:95:4f:88:5d:08:4f:66:
93:a2:b0:da:0a:14:1b:51:59:02:a4:9e:99:36:e8:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:58:02:A5:D9:EB:E0:E4:BF:24:5C:41:25:76:92:59:34:0A:A4
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/MxFYAqXZ6-DkvyRcQSV2klk0CqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.187.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7d:33:cd:36:b6:fa:b7:45:73:a2:4c:94:7a:af:e0:e2:54:
18:68:08:52:f6:6a:33:79:2a:f7:da:78:dc:0e:8f:a0:38:e7:
71:1d:03:79:75:d6:4c:98:47:db:63:c4:13:62:9f:3b:aa:2b:
88:02:47:4d:71:cb:5a:e1:38:f0:e9:83:b0:18:99:cc:fd:37:
5e:f5:dd:a9:93:98:c5:30:99:8d:14:e5:d9:91:29:e2:05:b9:
80:0a:03:e8:67:00:70:df:60:4c:17:99:7f:99:4e:aa:04:9d:
c8:d9:96:da:2b:42:0f:3b:13:f3:5b:d9:b7:01:58:40:92:7e:
0f:68:69:8e:05:d5:27:2f:f1:9d:64:4d:b7:b0:0a:55:4e:58:
8f:98:35:f4:f3:09:9d:2f:d8:f6:9b:13:55:94:72:4c:8f:3a:
a8:b3:8a:e7:6b:32:e1:4d:57:91:9b:b5:a6:28:5a:11:56:d2:
6e:cd:ac:10:e5:2e:ac:93:fb:9a:d2:f8:fb:41:a3:a9:81:e9:
9a:f2:d7:f8:88:20:1a:44:08:90:f6:7e:59:9c:33:72:f0:98:
8f:f9:52:ea:99:1b:f2:51:5d:f0:88:01:fd:c3:10:61:0c:f7:
ac:fb:dd:d1:f4:50:5d:a4:0e:1d:2b:0b:c9:42:2f:a8:5c:14:
36:23:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:12:40 2024 by rpki-client on console-ams.rpki-client.org