Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Mj3QK2aDsjEp6dcnu8goB2AZcI4.roa
File: Mj3QK2aDsjEp6dcnu8goB2AZcI4.roa (raw, json)
Hash identifier: QAQ893HJ4xG10JGOFw/4TUrC8rH9fm0mwJpjuoJcEwU=
Subject key identifier: 32:3D:D0:2B:66:83:B2:31:29:E9:D7:27:BB:C8:28:07:60:19:70:8E
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 018CC4930F82DE1019A42D5657C7E89CEF91
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Mj3QK2aDsjEp6dcnu8goB2AZcI4.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.194.104.0/23 maxlen: 24
91.194.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0f:82:de:10:19:a4:2d:56:57:c7:e8:9c:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=323dd02b6683b23129e9d727bbc828076019708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:56:e5:e2:c9:52:0b:56:c4:72:94:be:5a:
4e:b5:74:99:15:c3:ee:15:57:06:e5:69:9e:0d:f9:
00:81:54:d3:8d:5c:eb:db:76:22:98:b5:91:1b:02:
cf:82:20:bf:41:11:7d:b1:b7:9e:5b:f2:20:10:17:
96:93:11:28:ef:74:70:66:aa:df:9d:dc:89:24:c6:
f1:5e:10:c3:69:93:70:cc:c1:66:f4:77:93:2f:57:
64:70:f2:83:bd:55:2b:5a:af:39:a7:41:31:00:c0:
5c:12:a8:45:15:c0:52:32:4d:80:ee:33:7b:5d:fe:
19:20:b3:de:14:e5:da:73:a2:40:46:e5:28:e4:4b:
2a:5a:6d:bf:ba:c8:50:cb:cb:ae:a5:3d:ee:82:ab:
1b:17:74:b8:fb:88:93:5d:63:10:b8:24:d7:56:ce:
e1:2b:de:16:a4:38:92:a5:c7:6a:0d:bc:a6:22:0f:
01:32:84:1f:ec:9d:8b:f7:f2:68:6b:95:a2:a2:3f:
ac:ff:91:15:ac:46:fb:92:2c:2c:11:42:e8:1d:54:
fa:79:83:7f:b0:3c:61:d8:12:58:dd:77:84:40:ce:
12:04:2a:27:c7:0b:77:58:b6:41:1a:71:b9:fe:06:
4b:70:24:d6:63:de:05:14:c1:a6:13:b0:25:c5:86:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:D0:2B:66:83:B2:31:29:E9:D7:27:BB:C8:28:07:60:19:70:8E
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Mj3QK2aDsjEp6dcnu8goB2AZcI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.25.0/24
91.194.104.0/23
Signature Algorithm: sha256WithRSAEncryption
09:0e:a6:26:a2:5b:91:8b:35:ca:63:44:de:7d:2e:33:73:ea:
20:d3:7a:79:81:b7:c1:b1:47:34:50:61:4a:1c:80:e4:e0:0d:
b1:ba:3d:bc:65:d8:9e:91:a8:68:7f:e2:40:23:fe:dc:81:0e:
7b:7b:c2:17:01:a7:30:19:c2:c6:7b:b3:b2:c2:53:6a:3c:1d:
a9:e3:0d:74:88:e0:ad:72:a9:ef:3d:54:81:a3:0f:22:34:d5:
c4:60:95:bf:a1:0e:7f:ba:07:0a:29:fb:b1:36:0d:c7:b9:50:
fb:f9:93:ce:3f:9a:b2:eb:8a:24:ee:d9:9d:da:fc:a7:b4:6f:
66:12:1e:37:da:90:ad:4f:f9:68:51:2b:c2:20:2b:02:88:54:
98:ce:38:06:f6:c2:84:ed:76:78:fb:c7:8c:f8:b7:e0:c0:ae:
65:60:1a:f9:d9:27:c0:dd:b3:75:d4:8d:0c:e6:4f:26:45:a5:
4e:39:53:83:37:46:24:e1:3f:ba:bb:cf:1c:f9:ba:e5:8d:00:
06:7e:4a:37:71:b1:80:09:e9:65:e9:23:e1:8a:02:66:7e:fa:
c0:0a:e4:be:be:8f:f3:2d:04:65:e0:f7:f7:74:9d:cc:78:45:
34:7d:2d:e6:3a:75:1e:53:0b:43:ad:67:60:fc:0c:43:a8:a5:
d5:1f:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:23:00 2024 by rpki-client on console-ams.rpki-client.org