Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/MSN15TyX8IOnW7SqqMjsOWalygY.roa
File: MSN15TyX8IOnW7SqqMjsOWalygY.roa (raw, json)
Hash identifier: vgcR+XHu4NvUUo+SXvpLtSDthnNheJ+Du81vbBY7Vx4=
Subject key identifier: 31:23:75:E5:3C:97:F0:83:A7:5B:B4:AA:A8:C8:EC:39:66:A5:CA:06
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 018CC86F7F8279065CF4E60DA860D23B5B51
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/MSN15TyX8IOnW7SqqMjsOWalygY.roa
Signing time: Tue 02 Jan 2024 04:29:59 +0000
ROA not before: Tue 02 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45012
IP address blocks: 194.34.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:7f:82:79:06:5c:f4:e6:0d:a8:60:d2:3b:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 2 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=312375e53c97f083a75bb4aaa8c8ec3966a5ca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:1f:46:80:77:e3:a5:c4:3a:b8:62:12:1b:
33:d1:7d:6a:e7:60:d3:12:81:15:ef:5b:1d:a3:c9:
e1:5a:36:21:45:f7:48:67:7d:b3:ab:2e:4f:de:b9:
6c:f5:eb:56:7c:ea:58:6d:30:d9:2a:b8:b2:ca:38:
e4:ae:88:4b:49:30:3f:3f:14:15:78:f1:de:63:03:
f7:9a:42:40:57:03:10:82:af:4d:b2:04:f8:41:b7:
28:e0:7b:8f:40:64:4a:c2:6a:c2:e5:15:7f:f1:44:
83:13:77:d8:09:c0:46:47:9a:2e:f1:d5:55:41:01:
e6:c9:0d:00:19:c1:d9:08:42:c8:99:3d:2d:84:a4:
60:02:e7:4d:25:fb:20:f6:bd:0c:40:5c:c7:69:6d:
14:3f:3e:67:7b:bc:1d:8c:5d:30:4f:05:3f:2e:58:
00:99:cd:3f:cb:24:e5:0f:82:5b:ea:f9:15:75:eb:
f6:c0:49:38:67:7c:48:af:d1:5c:0c:f7:56:97:52:
51:4f:4a:0a:fa:e8:d4:68:5a:a8:5a:8d:d3:eb:f7:
f4:22:b8:63:49:3e:6c:bd:9f:c0:3d:c5:7a:6f:a4:
87:94:c7:65:71:ec:8a:89:38:89:1a:16:3f:08:fa:
c0:26:67:b9:a5:19:d5:89:2a:69:d4:f2:b1:62:d5:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:75:E5:3C:97:F0:83:A7:5B:B4:AA:A8:C8:EC:39:66:A5:CA:06
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/MSN15TyX8IOnW7SqqMjsOWalygY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.225.0/24
Signature Algorithm: sha256WithRSAEncryption
43:74:89:3a:d7:d7:f9:80:a0:be:7c:80:5d:e0:44:76:3b:8c:
bc:6c:6d:7a:4d:38:1a:29:e8:61:5a:a4:e8:33:6a:d7:10:ef:
67:3e:54:3a:64:e2:ad:3e:47:7e:72:a2:48:d3:3f:47:c9:01:
7e:c6:0a:78:1b:20:d9:37:ab:31:1b:02:c9:a3:47:86:bc:36:
c6:a2:f6:32:d9:99:0a:12:85:e6:ef:2c:82:b1:0f:3a:03:51:
07:70:f5:ab:ac:0e:6a:14:47:b1:0f:7a:80:11:90:2b:9a:3d:
fd:19:f1:71:a7:d0:b1:c7:ea:d5:f1:68:bf:d2:5d:f7:ac:39:
89:20:33:86:06:93:22:55:22:34:45:6c:e1:61:60:00:65:e6:
b6:dd:2c:ce:b3:bd:c3:67:aa:0d:20:3a:40:e9:b4:e3:08:2b:
0c:b3:3d:11:59:a9:ef:63:67:04:38:35:9d:01:91:1d:9e:38:
62:31:3c:c6:82:05:92:d5:cc:37:a2:22:74:32:af:1c:b4:32:
5b:ee:cf:6d:56:e7:a3:58:1e:ce:7c:22:d3:9c:92:9a:83:36:
1d:1e:af:3f:44:83:28:67:ed:49:f8:2f:55:03:e9:f3:30:01:
55:28:f7:d9:40:77:13:d1:00:ff:ae:b5:19:de:7f:3a:b6:ef:
d1:63:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:14:52 2024 by rpki-client on console-ams.rpki-client.org