Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/mlMF-NM6zAlOnA6zsST8_eZxjio.roa
File: mlMF-NM6zAlOnA6zsST8_eZxjio.roa (raw, json)
Hash identifier: MmFcv5RWiMl6+NT97iJhN/tGRpiu8FT2fDvNZCYT+b0=
Subject key identifier: 9A:53:05:F8:D3:3A:CC:09:4E:9C:0E:B3:B1:24:FC:FD:E6:71:8E:2A
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018CCA2A1DB85C9DCB948E5018243910728B
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/mlMF-NM6zAlOnA6zsST8_eZxjio.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1d:b8:5c:9d:cb:94:8e:50:18:24:39:10:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a5305f8d33acc094e9c0eb3b124fcfde6718e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:19:c8:27:34:a7:4c:27:39:98:1c:69:23:
a6:d6:47:1e:7f:6e:fe:1c:59:da:7b:83:6c:c6:82:
0a:0d:af:3e:3e:6e:60:d6:e1:03:c9:df:05:cf:0e:
fd:a3:0d:c8:cc:85:40:df:97:92:51:4a:16:e1:75:
b2:93:13:80:be:f6:d4:33:9e:94:93:54:b2:3b:82:
70:48:e5:e4:0f:94:f3:a1:19:db:de:24:97:4f:05:
51:19:99:f1:10:1c:56:c0:3b:8b:1b:83:75:b1:fb:
7d:d3:14:a6:33:52:2c:36:4b:e7:57:02:d3:2e:82:
f6:fd:30:16:f5:d3:76:65:70:bf:9a:44:e3:72:5e:
a9:d8:1f:60:d6:54:35:61:b8:ab:e9:7d:14:e2:53:
44:be:06:e3:a1:72:6d:c1:7d:21:e7:ff:b5:a3:64:
c0:f0:8d:1a:11:8c:19:33:c7:20:c5:0b:01:6e:b0:
6e:50:ff:23:39:46:e7:9d:da:f3:1f:07:89:f9:3b:
2f:04:5c:d3:c2:63:2b:74:10:70:46:75:bb:3c:6c:
16:37:a4:7d:49:92:62:56:78:d3:d6:8d:df:30:c1:
53:b9:1b:e9:82:2a:51:ba:a3:f0:62:67:17:c1:2c:
27:34:80:86:b2:f4:c4:e4:8f:82:eb:b0:0a:36:9c:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:05:F8:D3:3A:CC:09:4E:9C:0E:B3:B1:24:FC:FD:E6:71:8E:2A
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/mlMF-NM6zAlOnA6zsST8_eZxjio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8d:36:ba:dc:9a:e1:02:07:be:f6:e6:cd:f7:7d:ad:28:57:
6d:57:72:67:a5:99:3c:8c:04:18:39:c9:96:e4:75:87:70:98:
2f:72:cc:00:20:76:70:68:f3:68:e5:b0:e4:8b:ae:7a:83:2d:
35:95:42:dd:30:78:3c:ea:bf:c9:5e:be:a9:e7:02:2c:20:97:
0d:24:30:4f:58:d7:6d:fd:ec:2c:0b:14:a4:55:9b:5f:6f:de:
79:d8:9d:e6:5e:81:91:7b:b9:7e:4d:95:82:f9:b8:55:ee:bf:
94:4b:30:49:2c:60:c8:ba:b2:df:da:21:ce:14:b4:71:f5:24:
68:d4:58:3d:22:5e:91:8c:91:55:03:ec:13:0f:d1:47:fb:bf:
0b:ed:f6:a3:97:f3:1f:74:72:a4:b9:86:f5:86:fa:7d:b4:c4:
2d:7b:53:a1:2b:1e:25:4a:50:82:bb:af:4f:89:fe:c9:96:9f:
db:6d:08:df:2f:36:c6:d8:73:1a:8d:24:23:74:d8:70:96:55:
b7:88:33:0f:5a:2f:43:4b:5a:5f:8d:36:03:90:7d:13:29:5d:
41:8b:84:f7:08:d9:4a:63:12:7a:b6:d1:be:6f:80:c2:13:d7:
15:35:8a:61:ff:ac:e8:7a:b0:4d:b7:00:9e:6c:cb:d0:9a:75:
42:78:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:25:38 2024 by rpki-client on console-ams.rpki-client.org