Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/MolMKYNHWeRwSUXTbrzPXbnXcy8.roa
File: MolMKYNHWeRwSUXTbrzPXbnXcy8.roa (raw, json)
Hash identifier: QWjJNqWkc8olOTfdlQgszHcA9rhu0/pLKpvefItRxzs=
Subject key identifier: 32:89:4C:29:83:47:59:E4:70:49:45:D3:6E:BC:CF:5D:B9:D7:73:2F
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 01931C1AAAB1F8525E4ADC7922384BF5EC2E
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/MolMKYNHWeRwSUXTbrzPXbnXcy8.roa
Signing time: Mon 11 Nov 2024 16:42:09 +0000
ROA not before: Mon 11 Nov 2024 16:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 94.139.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:1a:aa:b1:f8:52:5e:4a:dc:79:22:38:4b:f5:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Nov 11 16:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32894c29834759e4704945d36ebccf5db9d7732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:e3:9f:eb:60:15:9a:50:9f:74:55:c2:12:
29:1c:d2:37:1a:11:0d:1a:41:9a:fd:d8:f0:1d:8d:
7c:50:72:b4:f7:bf:22:f8:5b:52:d6:11:c4:0a:6f:
57:41:4f:f2:7b:46:a7:c8:39:e8:d3:b7:34:40:8e:
14:8c:9d:34:81:8e:dd:6d:bf:c2:c7:4f:a9:54:32:
af:09:c2:e6:18:2f:66:24:e3:e1:a7:8d:bb:44:6f:
be:5e:cd:73:51:d4:e3:6f:11:6d:2a:fd:83:16:a8:
f4:10:bd:05:2f:99:0d:61:2a:51:ba:5b:0f:4a:8c:
0e:8c:d1:61:d0:0a:5f:1d:b0:96:65:86:81:51:31:
84:b4:8c:8a:5c:4b:88:b2:d6:a3:4c:1d:6b:10:aa:
d4:97:3c:53:bd:3e:4e:07:85:67:76:ec:0f:b4:02:
76:c3:73:2d:c8:71:f7:45:0c:ce:df:b4:16:99:7b:
81:8c:98:3c:e9:7f:4e:5f:0c:bd:d7:ff:29:5c:26:
a8:8d:ac:87:95:0e:88:03:b2:09:98:34:cd:15:bd:
f9:71:8b:9e:8b:88:0f:1b:a9:e4:36:ec:7f:74:d6:
d8:a0:d2:97:69:6b:4b:3c:5f:dd:77:3b:64:80:16:
e5:ff:bc:2c:38:80:13:b5:18:db:2f:9f:5b:71:7f:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:4C:29:83:47:59:E4:70:49:45:D3:6E:BC:CF:5D:B9:D7:73:2F
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/MolMKYNHWeRwSUXTbrzPXbnXcy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3b:e5:d9:8f:fa:b7:70:b1:a2:d7:5f:74:07:68:dc:ef:f7:
be:d4:9d:40:56:4e:3a:aa:c5:88:a9:3a:32:38:7e:7a:b2:2b:
e4:cf:36:93:0e:28:89:e0:39:de:73:ea:df:39:b2:57:c9:3d:
f5:17:36:9a:c6:d6:48:aa:36:1b:33:25:6e:d9:b4:7b:c0:5f:
83:b2:ab:39:b3:61:cf:09:eb:10:24:b8:8c:dc:34:34:4c:1f:
75:00:58:15:67:eb:81:0c:83:3b:f0:aa:49:e4:c3:fc:22:f8:
51:97:d5:54:8e:19:4b:c7:7f:44:19:ca:ea:d0:95:ad:b6:01:
fc:95:14:70:69:a4:a0:ba:d6:be:9b:28:ad:72:27:79:98:6a:
ff:13:fb:0b:2c:cb:d9:7c:78:1b:f9:44:ce:f3:1b:91:7c:ad:
be:1a:a5:0a:da:31:c2:3e:22:88:e9:41:b3:b3:49:df:92:bb:
b8:70:f3:f4:7b:6b:f2:26:d2:3e:fb:80:9d:0c:1f:90:15:10:
d4:81:a8:3c:ea:95:5d:1b:ed:57:2b:c9:ca:ec:f9:61:a0:df:
fd:9d:9e:4f:32:16:89:dc:ea:9d:d6:3e:ed:af:1c:02:66:ed:
44:0e:63:4e:b4:bf:8b:ae:8b:99:06:a4:1c:f8:7c:c7:cc:0c:
02:6b:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:00 2024 by rpki-client on console-ams.rpki-client.org