Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/Mn4NvTSRGmpcGL_Js-9i94eCChg.roa
File: Mn4NvTSRGmpcGL_Js-9i94eCChg.roa (raw, json)
Hash identifier: 41BNDOawoahUpC106zLnHRgRo240qEAtKo/j27KQVqY=
Subject key identifier: 32:7E:0D:BD:34:91:1A:6A:5C:18:BF:C9:B3:EF:62:F7:87:82:0A:18
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 018CC56E113270F3D1B68F0676D9EB36F550
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/Mn4NvTSRGmpcGL_Js-9i94eCChg.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209808
IP address blocks: 2a13:75c1:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:11:32:70:f3:d1:b6:8f:06:76:d9:eb:36:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=327e0dbd34911a6a5c18bfc9b3ef62f787820a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:07:39:60:22:8d:4e:04:9a:b6:e2:58:cf:
b6:e5:51:ce:28:1e:43:f9:5c:88:b9:f5:ad:40:3d:
c9:ee:38:b5:6c:0d:31:d5:2d:22:42:e6:ba:a1:76:
23:a9:a6:a7:f3:b5:30:ca:3f:e5:61:26:ca:0b:3f:
3e:ea:58:04:e5:ef:66:40:96:7c:53:d1:27:4f:f4:
5a:40:4e:a5:0d:01:65:a5:59:10:80:db:e6:d7:1b:
38:1d:68:d7:42:bc:d8:31:94:b8:21:b2:5c:16:79:
53:ad:5c:cb:33:fb:fa:25:f5:00:4a:d8:07:06:07:
4a:4e:d4:9e:5d:48:5f:0e:9f:d8:9c:b7:ed:9c:f6:
8b:95:28:0c:98:e9:74:35:f6:a2:c4:12:58:ed:46:
ee:9a:23:b3:b7:12:76:72:55:03:d1:10:2f:43:28:
99:bb:6e:5c:91:21:3b:0f:e8:36:ac:7a:f1:c0:eb:
96:5e:20:55:59:23:96:a7:e0:e8:c9:b3:f8:78:3c:
bd:a0:31:17:82:09:d8:34:90:5e:ce:8c:cd:07:38:
d4:62:a1:75:37:1b:94:e6:55:76:7e:a4:38:23:c2:
7a:2a:da:38:69:d4:93:e5:04:ad:28:0f:2f:e7:e0:
77:ac:f7:e8:a4:5d:a7:26:b3:8e:a7:39:01:85:48:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:0D:BD:34:91:1A:6A:5C:18:BF:C9:B3:EF:62:F7:87:82:0A:18
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/Mn4NvTSRGmpcGL_Js-9i94eCChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
a4:65:e4:30:1d:88:c2:f3:95:67:1a:c2:96:62:40:f0:4e:78:
c7:ae:9b:76:68:61:96:83:4b:f7:e8:da:cb:93:65:36:6e:1f:
39:d9:a1:b0:28:2f:91:6c:f9:21:57:9b:37:a2:b3:c6:30:0f:
a9:f3:a8:21:2e:4f:aa:77:ca:a1:42:c3:b7:d4:0a:43:70:7d:
f5:9c:11:81:d2:29:9e:eb:50:5f:ea:58:4d:86:67:20:89:04:
98:4b:fe:4a:d3:ef:4d:18:3f:26:ec:35:43:64:a5:6a:a5:f3:
c4:97:e6:a6:5d:5d:71:b6:1a:6d:69:27:67:0c:7e:15:ad:80:
ca:8a:25:e7:c7:d5:f7:70:e4:f1:9e:d9:9a:f6:1d:8d:b1:61:
e1:5a:4c:69:dd:53:7b:dc:10:21:5c:d1:ac:78:f3:51:76:15:
f1:42:6c:cc:70:bb:d2:de:32:db:a9:43:16:b6:61:7f:5e:e7:
64:c4:8c:f1:7b:17:08:a5:57:31:b5:60:5a:b6:57:75:80:8d:
3b:12:0b:1d:fb:b4:f6:b5:76:58:ec:f9:51:05:d8:fd:4f:ae:
3d:af:59:a2:57:6d:1c:f9:e4:d5:ec:0f:7b:cf:c7:58:26:32:
71:53:d1:41:7e:47:e7:01:f7:dc:59:70:ef:ad:eb:a5:45:61:
87:4b:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:18 2024 by rpki-client on console-fra.rpki-client.org