Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/m_XMHyPTLYUAvAkSHO3HCY3mX24.roa
File: m_XMHyPTLYUAvAkSHO3HCY3mX24.roa (raw, json)
Hash identifier: AwS2oED3SnY4/CQbIRM7EKcijOUMjJ5DQaGOQqo/9A0=
Subject key identifier: 9B:F5:CC:1F:23:D3:2D:85:00:BC:09:12:1C:ED:C7:09:8D:E6:5F:6E
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019006EADFD4F344699EF1A197E5DB1F54CE
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/m_XMHyPTLYUAvAkSHO3HCY3mX24.roa
Signing time: Tue 11 Jun 2024 10:49:34 +0000
ROA not before: Tue 11 Jun 2024 10:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:ea:df:d4:f3:44:69:9e:f1:a1:97:e5:db:1f:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jun 11 10:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bf5cc1f23d32d8500bc09121cedc7098de65f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:1c:4e:5e:c9:09:e6:75:ea:7b:c2:4b:34:
7d:86:17:50:2e:fa:e2:41:80:2e:57:45:0c:9d:7e:
21:09:41:0f:1c:01:6c:4b:0c:c5:70:94:66:06:ca:
5e:94:62:2b:12:69:f6:7f:b8:15:5e:88:f9:0d:e7:
4a:d5:d2:a6:4b:66:d1:6f:9e:07:8d:a4:0a:a6:4c:
79:59:bf:75:8b:1a:39:7d:f4:05:96:6f:bf:fc:28:
50:b5:4d:ec:53:e2:a7:a6:82:df:b4:cc:02:d0:9b:
35:2d:1f:0f:ba:f9:38:12:ba:43:f2:a4:11:8f:6d:
e0:40:86:6a:94:39:b0:d3:8b:64:3b:7b:b9:f8:0a:
1f:76:d3:7e:63:0f:4e:91:69:29:cf:60:4c:d3:2b:
96:5d:a0:88:6f:06:22:1d:48:40:1e:9c:6f:da:0d:
9c:80:76:74:2d:b8:3c:4b:0e:4e:72:4c:8d:d9:97:
1a:67:47:71:38:9a:12:5a:bc:39:4e:37:0c:e6:36:
6d:aa:9b:e4:90:9c:6f:4b:d9:9f:3c:62:3c:e4:c8:
0a:7b:22:2c:49:73:85:f7:49:d4:4f:43:96:c7:61:
8a:a3:4a:75:ef:7e:14:6b:51:11:04:17:08:6f:d8:
ab:2b:f4:7d:6b:59:13:45:f3:0b:cb:de:47:f6:10:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:CC:1F:23:D3:2D:85:00:BC:09:12:1C:ED:C7:09:8D:E6:5F:6E
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/m_XMHyPTLYUAvAkSHO3HCY3mX24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.242.0/23
91.220.202.0/23
185.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ff:b2:0a:89:fd:d0:2a:7a:50:60:b3:ad:1d:f4:b9:7d:ef:
fa:73:aa:16:12:82:27:3c:02:17:76:36:2a:72:01:17:86:c8:
39:b0:52:50:8c:d4:df:d8:97:2f:be:1c:4b:70:1b:d0:85:45:
48:7f:57:19:bf:62:da:cb:d8:27:d4:60:a3:c8:68:7a:79:3e:
14:61:ff:a7:d0:b7:29:43:2e:de:b4:8b:b2:b8:0f:1e:4a:03:
43:98:be:70:13:6d:4b:d6:59:36:47:54:57:c6:d3:f0:c1:fc:
4b:25:c6:f3:4c:bb:23:10:5e:43:0c:4c:31:5d:7e:c6:cb:23:
8b:f0:30:db:cd:2d:54:0e:aa:d8:dd:77:0e:9c:9a:f9:c8:fa:
b3:f7:66:1c:45:8c:95:ce:4b:60:ea:11:8f:cd:da:63:86:9c:
9a:fc:7e:7b:56:b4:e5:44:10:88:65:16:a9:ca:bf:aa:b3:4c:
4f:6b:de:d0:8d:23:c0:fb:4c:4f:9b:b1:f3:65:a7:bb:f5:fc:
e0:da:dd:fd:34:45:69:59:ee:de:d3:3d:42:93:3b:3a:19:56:
c3:0d:cc:16:0c:f7:12:94:17:4c:ef:22:27:ff:3d:f3:d4:17:
32:23:6a:a8:2c:62:f3:c7:2b:bf:20:06:c3:c2:17:22:ff:06:
36:76:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:10 2024 by rpki-client on console-fra.rpki-client.org