Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MheB0kBk7_Juz-JLby0FgWbCCMI.roa
File: MheB0kBk7_Juz-JLby0FgWbCCMI.roa (raw, json)
Hash identifier: 9j+q/o7noxu0ZCV7xXkY2PllbvE65yCHHry9Yei+qOk=
Subject key identifier: 32:17:81:D2:40:64:EF:F2:6E:CF:E2:4B:6F:2D:05:81:66:C2:08:C2
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019353A9638670D63EEEE9B2F173FEC55855
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MheB0kBk7_Juz-JLby0FgWbCCMI.roa
Signing time: Fri 22 Nov 2024 11:37:10 +0000
ROA not before: Fri 22 Nov 2024 11:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214279
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:a9:63:86:70:d6:3e:ee:e9:b2:f1:73:fe:c5:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Nov 22 11:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321781d24064eff26ecfe24b6f2d058166c208c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:db:1d:50:4f:1c:d4:9e:28:c0:48:6a:ad:
cc:91:bc:80:cf:d6:2c:5e:16:1f:bb:61:63:84:55:
a1:51:56:10:4b:95:e1:10:00:5b:c8:03:21:89:92:
1c:a8:4e:fa:d1:49:19:5e:e1:a4:79:30:8a:2a:42:
38:55:f3:98:0f:91:e2:4d:b6:83:cd:9b:ec:5e:1b:
ec:c6:9c:10:7d:12:a5:7b:1e:ee:84:df:8c:06:fb:
62:e5:0e:a7:ab:7e:85:95:96:88:a3:ea:46:ea:0c:
63:53:c4:b7:31:f3:95:09:4b:91:6d:43:83:8b:05:
1f:07:95:a6:de:ba:6a:2d:05:ed:4c:cc:e8:f4:21:
3a:d0:1c:ef:79:4d:89:5d:5f:1d:17:46:4a:87:af:
59:ca:49:42:13:4b:b0:42:88:bc:89:4a:62:60:d2:
aa:8c:d4:ca:0c:7e:a8:f2:bd:f5:33:2a:cd:1b:19:
4e:a7:3d:fc:77:11:7f:87:b3:81:5f:1b:97:62:11:
a3:df:7b:e1:7a:61:5e:54:7b:4d:df:36:21:10:c3:
ae:97:3b:c0:13:da:3a:a7:2f:59:30:ca:1a:57:b3:
75:9e:d1:79:65:21:5b:13:c0:bf:77:89:96:66:4a:
17:9e:36:90:70:12:dc:48:85:71:00:25:bd:ab:12:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:81:D2:40:64:EF:F2:6E:CF:E2:4B:6F:2D:05:81:66:C2:08:C2
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/MheB0kBk7_Juz-JLby0FgWbCCMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6a:10:c1:dc:05:92:00:cb:57:cc:29:14:42:3c:dc:83:e8:
a1:64:2e:e0:37:5a:5c:03:c0:5a:5e:a8:ac:02:2d:da:87:2a:
6f:a4:ac:dc:03:3c:fa:2b:ec:5a:54:23:02:0c:2c:62:78:2d:
b7:3f:67:33:0e:fa:75:06:47:cd:67:b8:b4:79:12:ca:e1:ef:
1e:49:8a:84:0e:1b:3f:42:e8:09:46:d5:a6:7d:a5:26:c0:ab:
99:e5:c1:1d:5f:9b:b9:65:83:b7:23:bb:c5:62:e9:86:73:6d:
a9:56:4a:56:4a:c4:1a:38:85:9e:66:cf:65:e1:4d:9f:e4:5b:
5c:3b:b8:68:e5:e7:a0:2a:7f:40:6e:45:9b:0d:70:e3:54:d1:
ca:92:bb:b9:11:aa:b7:fa:f9:b4:78:e9:db:80:0e:10:50:cd:
20:25:41:a2:85:b0:e9:79:5f:dd:29:fd:e5:f3:ad:a4:30:42:
a9:ff:c1:91:a9:4c:ae:51:4f:eb:b5:ec:0f:76:9a:6f:25:f9:
47:04:cc:b1:bf:cc:92:57:78:67:f0:27:4f:43:d5:88:cc:e7:
45:68:c2:2b:e1:26:f7:40:53:fe:94:f7:60:8b:25:a9:23:28:
b4:b5:f2:b6:bf:a1:2d:71:e5:37:2f:c4:f2:73:95:bf:0a:b3:
04:99:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:34 2024 by rpki-client on console-fra.rpki-client.org