Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/Ml-seU2GTWx_MGsYMHpR-_4ab_k.roa
File: Ml-seU2GTWx_MGsYMHpR-_4ab_k.roa (raw, json)
Hash identifier: i/WLw/rO5uwQsnJl5et88141MymoI8ZH35mcHFLqs2g=
Subject key identifier: 32:5F:AC:79:4D:86:4D:6C:7F:30:6B:18:30:7A:51:FB:FE:1A:6F:F9
Certificate issuer: /CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Certificate serial: 018CC50146B367972620ADCBFF92C1EFC2C0
Authority key identifier: 26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/Ml-seU2GTWx_MGsYMHpR-_4ab_k.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 45.154.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:46:b3:67:97:26:20:ad:cb:ff:92:c1:ef:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=325fac794d864d6c7f306b18307a51fbfe1a6ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:88:ec:9c:5c:de:9b:83:cb:3b:c4:91:8a:
fa:46:1b:c9:34:92:67:39:1b:d5:9e:80:66:d6:6b:
a0:dd:aa:e7:05:b6:cc:15:b6:5d:64:77:63:fb:83:
c3:ba:e0:09:cc:3c:39:54:fc:83:a6:f2:54:28:b5:
ea:a7:88:67:f9:90:9f:07:a4:86:d0:7d:17:75:ff:
5b:77:79:88:bb:01:ab:60:e0:20:60:01:aa:73:23:
c0:04:24:d0:e1:70:f3:1a:03:1c:81:64:ed:0d:e5:
f5:c9:42:9e:d0:dc:67:f1:70:7f:40:3f:cd:7a:09:
1b:b0:bc:be:08:7b:03:aa:e8:51:c3:2e:77:fe:20:
35:e9:74:e5:b8:4b:00:b8:54:09:3a:6c:5c:01:85:
72:49:1e:17:ce:b8:45:08:5d:0b:1b:51:b9:a5:1e:
56:12:90:10:81:ea:73:0f:21:a5:52:e2:72:ce:84:
0d:64:6a:b3:74:cc:a0:ce:4d:6a:44:9d:31:24:53:
a8:4c:ca:31:f4:b5:3b:0e:e6:39:0e:41:bb:5c:14:
24:e9:a1:44:74:69:f5:32:70:2f:4d:bd:a9:a0:b1:
45:8a:bf:e4:80:70:e9:93:e5:8f:61:38:c4:9f:fe:
7b:91:aa:f0:24:90:77:4f:0c:98:33:32:c3:e2:ef:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:AC:79:4D:86:4D:6C:7F:30:6B:18:30:7A:51:FB:FE:1A:6F:F9
X509v3 Authority Key Identifier:
keyid:26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/Ml-seU2GTWx_MGsYMHpR-_4ab_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:14:49:f0:49:71:57:09:dc:3f:b9:2c:a7:6d:a1:5d:e9:90:
5c:f0:fb:04:65:d5:58:b7:50:85:c9:69:14:f5:38:82:a5:17:
c8:2d:a1:57:a4:ea:f9:3d:7a:3b:f5:0a:2c:30:f8:dc:d7:d8:
b4:50:7a:65:92:ce:0e:b5:8d:53:14:71:23:5f:cf:4f:6b:83:
33:eb:9d:f9:2f:a7:af:09:3e:35:23:db:e3:47:ca:d2:f9:1c:
d7:b9:b3:7c:9c:d4:8c:c7:61:3e:79:36:fd:f5:2d:1f:8d:0b:
f5:13:68:c6:df:db:1f:6e:f2:7c:85:f1:05:aa:47:d9:75:5d:
fe:df:9a:29:b0:9b:b6:8a:18:9a:1a:46:b1:b8:32:a8:25:9f:
e4:f5:c2:29:25:48:30:22:8c:db:3b:1f:2a:ac:50:a5:89:8d:
c9:6f:a0:43:68:a7:ec:89:a1:2d:09:c4:29:f0:fc:0a:d2:12:
c1:5c:59:0f:97:65:e4:71:49:48:b5:92:ab:9a:5e:dc:24:7f:
b8:34:c9:be:ff:9c:88:6f:c9:37:16:fa:2f:7e:a6:f7:51:30:
0f:41:d5:09:0e:9e:a8:2f:03:c3:be:04:3d:c8:49:14:ea:48:
15:57:7d:6e:54:f3:2a:27:dd:1e:68:39:0f:71:e4:9d:47:41:
22:01:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:32:27 2024 by rpki-client on console-ams.rpki-client.org