Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1mmwb-F46j9DXohyWeLLhwGxf50.roa
File: 1mmwb-F46j9DXohyWeLLhwGxf50.roa (raw, json)
Hash identifier: lOTh3g94wpht0hjhnzN+8n6sFqivEqsCfQWwaXJU0e0=
Subject key identifier: D6:69:B0:6F:E1:78:EA:3F:43:5E:88:72:59:E2:CB:87:01:B1:7F:9D
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0192DD1582DDE1A2469004B4CDC18F00FB98
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1mmwb-F46j9DXohyWeLLhwGxf50.roa
Signing time: Wed 30 Oct 2024 11:00:27 +0000
ROA not before: Wed 30 Oct 2024 11:00:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141883
IP address blocks: 109.248.16.0/21 maxlen: 24
109.248.24.0/22 maxlen: 24
109.248.28.0/22 maxlen: 22
188.130.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:15:82:dd:e1:a2:46:90:04:b4:cd:c1:8f:00:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Oct 30 11:00:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d669b06fe178ea3f435e887259e2cb8701b17f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:09:2f:37:de:60:2c:16:80:3d:b1:31:13:
4b:dd:57:25:e0:b3:9a:42:05:51:af:f5:0d:81:ab:
84:2a:af:bf:23:b5:ad:44:96:b1:a5:3a:67:8f:90:
9c:4a:ab:ae:e2:2f:d8:32:0c:9b:40:42:13:23:3c:
f5:05:02:74:ba:54:d7:eb:d2:5c:5c:2b:ab:81:04:
81:b5:25:35:02:06:0f:c2:27:ad:82:f6:23:af:81:
de:9f:6f:79:b8:1f:44:4b:fe:91:08:57:dd:3c:ee:
a9:b8:c6:bb:76:53:a9:e6:f4:e0:0f:32:9f:c6:53:
97:d9:85:9d:ef:87:aa:22:8d:9a:55:0c:dd:19:1d:
d7:51:41:15:d1:e1:1b:c9:ea:f4:2e:e2:63:2a:3d:
85:86:92:7f:13:80:b2:66:c9:2f:bc:3a:60:04:31:
02:81:81:0e:08:d6:dc:86:12:20:73:76:6b:ca:74:
f7:82:bc:30:49:de:d3:0b:bf:3d:e9:f4:54:35:6d:
fb:69:a6:a3:cc:f9:73:c5:6e:13:5d:8a:d1:45:95:
2c:9c:f4:84:df:ac:08:cc:76:c9:8b:13:be:6b:9d:
30:38:1a:32:77:f0:c5:54:a1:f5:d0:de:91:3c:f1:
07:ff:6f:c8:e6:46:ed:d5:b5:f7:97:c0:3f:e2:15:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:B0:6F:E1:78:EA:3F:43:5E:88:72:59:E2:CB:87:01:B1:7F:9D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1mmwb-F46j9DXohyWeLLhwGxf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.16.0/20
188.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:01:2f:30:a5:23:a4:95:ef:57:96:98:ed:6b:92:28:f2:0f:
18:26:a9:31:15:56:b0:92:92:3e:cc:6c:a8:db:f2:92:04:fb:
b6:20:5a:16:ce:ac:de:6e:31:96:b6:cd:0d:5a:84:59:86:7c:
14:24:c5:33:be:d8:de:65:d5:1e:b4:41:b1:ce:8b:a9:15:f4:
3d:2f:88:21:6c:c7:26:69:4f:23:a5:c2:6f:ae:0f:a3:fe:ef:
87:6f:10:e6:80:4f:74:08:c7:bc:8b:2f:c4:09:f2:fd:63:69:
82:dc:f5:4f:59:1a:5e:85:25:2d:7d:39:a6:56:53:9a:ab:08:
a9:2d:ea:f1:37:ec:9c:51:c4:ca:ae:9a:af:08:e3:ac:ff:6b:
01:4c:9f:c3:23:52:48:13:f2:03:02:cf:5e:d5:ab:4f:49:6c:
80:30:02:34:ba:18:4d:63:ee:02:dd:f0:3c:4f:c5:bc:9a:fd:
59:16:3d:03:aa:0b:5d:1c:e2:c7:31:e2:7e:ee:7f:50:33:66:
81:5e:c8:f9:35:ec:aa:69:25:2e:aa:56:98:0e:09:27:f2:57:
7e:7c:17:28:15:d3:b9:db:03:b9:76:b9:02:61:b0:de:b7:73:
67:4b:d8:5f:b9:2d:19:fd:9b:2b:e8:1b:05:79:64:4b:4f:4b:
84:20:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:29 2024 by rpki-client on console-ams.rpki-client.org