Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/mmtcfBFVgMNj4XcgFRD1PcB9dsg.roa
File: mmtcfBFVgMNj4XcgFRD1PcB9dsg.roa (raw, json)
Hash identifier: IqA5p+x+9pWPy9WoWdcK+fOG3uGBkAqM16SCVHXmjzE=
Subject key identifier: 9A:6B:5C:7C:11:55:80:C3:63:E1:77:20:15:10:F5:3D:C0:7D:76:C8
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01918E956BBAAAF3FFBE6DE6CCBEDCAE68EA
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/mmtcfBFVgMNj4XcgFRD1PcB9dsg.roa
Signing time: Mon 26 Aug 2024 12:07:22 +0000
ROA not before: Mon 26 Aug 2024 12:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39257
IP address blocks: 109.197.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:95:6b:ba:aa:f3:ff:be:6d:e6:cc:be:dc:ae:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Aug 26 12:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a6b5c7c115580c363e177201510f53dc07d76c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:aa:10:67:c0:d4:39:d5:fb:ef:00:45:30:
8f:a5:a7:32:1a:ae:83:24:45:ac:69:d8:97:3e:4c:
41:17:69:05:7f:3a:db:c4:cb:88:3f:02:be:34:0d:
e0:86:d3:5a:d2:7f:42:54:64:ec:ae:0d:f0:09:dd:
d6:e3:69:c7:13:1d:20:77:7a:50:69:6d:f3:8e:61:
9d:29:a7:a5:93:0f:ae:3c:3e:2e:6c:17:cb:f3:c9:
75:4f:65:ed:2a:77:80:7b:e9:0d:60:f8:48:9a:86:
93:14:0c:31:1f:25:bc:07:2a:ab:6e:2f:a5:3b:de:
33:cc:a1:aa:05:8f:0b:23:27:b4:2d:8c:59:e3:4d:
b4:cc:b5:12:d8:c8:c9:1d:12:43:51:fb:ec:0e:19:
82:c0:b2:bb:49:34:93:0f:df:44:3d:ba:93:42:ed:
32:bc:fe:97:23:9d:80:e1:75:ae:91:09:0e:30:f9:
a9:ed:7b:a9:b9:9c:68:29:04:08:ed:03:8f:8f:b2:
35:dc:18:cf:9b:47:76:9c:41:ed:82:3d:46:0b:05:
34:36:a8:95:b2:4d:86:e0:b7:94:e4:01:04:23:f2:
28:23:dd:dc:88:43:73:06:46:f5:ad:ff:d8:10:d3:
7a:aa:77:5b:4d:b2:66:bb:0f:ff:d5:ac:42:02:c6:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:5C:7C:11:55:80:C3:63:E1:77:20:15:10:F5:3D:C0:7D:76:C8
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/mmtcfBFVgMNj4XcgFRD1PcB9dsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.165.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fb:92:50:21:b7:33:ff:c1:ed:ab:ee:13:d4:b8:28:81:be:
21:df:af:62:8b:c0:e5:18:9f:10:a6:b8:af:3c:58:ba:7a:c3:
5e:5f:b7:5c:43:3f:03:98:81:89:90:ac:dc:61:97:30:d8:20:
03:b0:cd:58:3f:5a:ae:e9:5a:2b:b3:eb:90:1b:01:ee:87:4f:
ef:20:6c:ca:7e:65:36:b7:01:da:0c:59:94:3b:99:93:96:02:
c9:1d:a9:47:1c:28:fa:48:a1:68:56:8b:c7:e8:a6:8b:27:7a:
9c:09:f5:c9:27:5c:51:47:f4:b2:25:c7:ac:b6:27:f5:81:25:
e7:91:07:19:d5:4f:c8:83:00:2f:59:94:1a:60:cb:ef:01:b0:
b1:26:1d:20:3f:6e:3e:3b:2d:bb:75:b7:1d:bb:67:c5:21:1c:
13:0a:7b:4f:6b:16:a7:20:27:4f:a3:ce:df:cb:a8:d2:24:8e:
f8:5c:f8:97:d2:fc:a2:4a:a7:0e:a8:13:8c:6a:3d:ea:50:39:
51:9d:f8:12:f2:82:ad:72:58:67:88:91:08:a5:fa:60:a7:cc:
32:a5:f2:3a:3b:f5:1e:9c:f6:78:ed:a7:4a:54:e3:ed:cb:c5:
f7:5f:95:c0:9d:9f:6a:b6:b4:a9:25:a8:68:8c:1a:03:1b:dc:
1b:1f:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:58:08 2024 by rpki-client on console-ams.rpki-client.org