Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/mxhXrdGdfA1F5FkU1oI3zYBeATY.roa
File: mxhXrdGdfA1F5FkU1oI3zYBeATY.roa (raw, json)
Hash identifier: kkECwWLZhvOC9LJTulj480WK8wcTY0Vw9t+DdtAbzl8=
Subject key identifier: 9B:18:57:AD:D1:9D:7C:0D:45:E4:59:14:D6:82:37:CD:80:5E:01:36
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 018CC8DEA17F2CE016A5E579A87CAD19022B
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/mxhXrdGdfA1F5FkU1oI3zYBeATY.roa
Signing time: Tue 02 Jan 2024 06:31:22 +0000
ROA not before: Tue 02 Jan 2024 06:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.93.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a1:7f:2c:e0:16:a5:e5:79:a8:7c:ad:19:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 2 06:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b1857add19d7c0d45e45914d68237cd805e0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:a0:ed:ef:e2:f6:f5:fe:c5:df:8c:72:ed:
37:b7:85:35:fd:76:6e:fb:e5:3e:b2:40:84:3f:fe:
48:95:fb:a2:02:39:fa:4a:b7:6d:19:04:70:f8:47:
4d:5b:bf:c1:9a:ff:68:ea:b0:60:1c:97:d0:a8:d9:
20:ca:fb:ed:e1:09:69:71:56:83:8d:54:29:d4:92:
d6:a1:e6:f2:ed:c6:0d:89:d6:bc:17:63:eb:7a:f4:
97:db:a9:bb:f6:39:63:0f:1f:7f:c4:ef:b0:58:f0:
29:4b:32:f1:e5:7d:d7:08:2a:6a:cb:16:07:25:42:
4a:e9:4a:a8:3d:04:59:d6:f5:b3:d4:64:a4:30:ab:
1a:b1:2a:f4:ac:bf:21:9d:a0:b0:b0:03:69:71:84:
ce:24:1e:ee:34:e3:19:f3:02:8e:85:54:09:ea:ab:
cd:f9:72:07:2d:92:eb:4c:88:87:cb:ca:45:1e:e0:
38:7e:41:82:48:f1:b1:bd:d7:2c:2a:57:24:86:25:
13:bf:ad:a7:81:27:6d:68:70:74:14:e0:6f:51:55:
19:80:3e:65:a9:6d:6e:1e:74:dc:31:ff:06:02:62:
42:b9:13:aa:6f:f7:ba:60:93:c2:dc:91:41:38:32:
28:7e:e1:e2:10:81:42:0b:92:d0:ad:65:0d:91:5e:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:18:57:AD:D1:9D:7C:0D:45:E4:59:14:D6:82:37:CD:80:5E:01:36
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/mxhXrdGdfA1F5FkU1oI3zYBeATY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.188.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1c:8b:26:b5:88:29:56:bd:1a:4a:9d:3a:f3:39:3d:07:51:
1a:2e:5b:c6:ad:72:e9:09:89:30:e6:55:6c:06:90:e6:ab:50:
ec:47:1b:74:51:d5:96:ed:8e:18:92:8e:81:60:ec:a1:fe:30:
08:23:cb:a5:9f:fd:af:49:d9:2b:30:49:66:46:1c:fd:06:ae:
e1:01:e8:12:c2:ca:4e:a7:ef:16:90:75:96:c9:22:91:f7:f2:
c6:b3:1d:dd:1f:07:ab:9c:fa:ae:b4:fb:f1:aa:e2:7c:56:e8:
bd:17:70:a2:ec:02:34:df:12:b0:d7:2b:f6:d5:c5:fe:b7:38:
45:4f:be:df:97:33:49:f6:3c:ba:78:12:17:a9:ef:eb:5e:c0:
51:7c:71:dc:52:ab:d3:b8:c2:ea:76:0e:61:08:1e:4f:a9:38:
f4:e8:02:c6:9d:f8:58:00:d7:8e:ef:93:0c:85:27:c8:c3:c7:
4c:47:05:a3:1a:5a:76:12:d4:47:ef:d0:b4:b2:4e:4d:a6:9b:
20:c5:a9:73:38:02:b8:53:63:ee:10:65:a6:d6:af:e5:2e:86:
ff:50:35:13:1e:77:a4:0a:73:64:8b:0c:64:a4:e8:75:ee:63:
88:f9:fc:6f:6f:d0:67:65:66:6f:19:f1:9d:02:37:f4:9b:20:
de:ff:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:24:15 2024 by rpki-client on console-fra.rpki-client.org