Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Mq4x6HF35jXwmtjCWRLCThxUGrk.roa
File: Mq4x6HF35jXwmtjCWRLCThxUGrk.roa (raw, json)
Hash identifier: V0SoKeffcN28lWBsq4rumlvquEzfQ17qh2pj1kyQutg=
Subject key identifier: 32:AE:31:E8:71:77:E6:35:F0:9A:D8:C2:59:12:C2:4E:1C:54:1A:B9
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01931B1411E8C2F00116C64EB54072EE49BA
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Mq4x6HF35jXwmtjCWRLCThxUGrk.roa
Signing time: Mon 11 Nov 2024 11:55:20 +0000
ROA not before: Mon 11 Nov 2024 11:55:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213909
IP address blocks: 188.211.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:14:11:e8:c2:f0:01:16:c6:4e:b5:40:72:ee:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Nov 11 11:55:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ae31e87177e635f09ad8c25912c24e1c541ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:a8:05:cd:7d:5e:e5:35:b0:68:1b:72:a4:
55:bb:89:8c:2a:a2:88:ce:1a:a9:6c:94:42:d7:af:
fc:bf:a0:89:a1:23:5a:3d:a6:97:d7:ac:05:1c:28:
a2:fe:16:6a:c3:94:80:68:27:b3:73:b9:4a:92:ee:
4d:e7:ff:67:4a:fd:9e:30:15:9f:8b:ee:f1:9c:5d:
93:17:bb:6c:a4:78:ff:43:b5:d0:81:47:dd:34:f6:
87:57:65:ef:40:b4:22:b9:91:d2:6d:99:9d:ba:00:
10:5b:01:2d:d5:f6:9b:e7:e5:ef:38:31:e1:0e:dd:
2c:36:dc:1a:18:71:a5:97:58:78:cd:05:53:d5:c1:
b7:6c:74:d1:32:41:b9:c2:a7:d0:c8:2b:42:d2:98:
ad:b0:6a:c0:3d:15:14:9b:bd:9c:e4:78:c6:05:61:
6a:a0:45:4e:e0:e4:e2:23:c0:4a:7a:0d:ad:9b:d5:
68:2b:fa:a3:9b:82:a1:2d:84:7a:28:f9:51:65:98:
97:79:a7:a2:ed:fb:26:ef:55:05:b0:76:77:d4:f9:
0a:81:9a:07:53:34:ba:50:64:d4:ca:20:67:ec:5e:
9f:8f:f1:27:30:57:de:45:a9:c3:07:f4:a1:ad:11:
e8:43:b3:d7:2c:b6:5f:fd:71:70:8d:6e:d0:f0:40:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:31:E8:71:77:E6:35:F0:9A:D8:C2:59:12:C2:4E:1C:54:1A:B9
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/Mq4x6HF35jXwmtjCWRLCThxUGrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ec:4e:28:5f:af:b4:65:10:87:77:e6:3b:9b:8f:13:01:98:
5c:cc:fc:3d:b7:b5:23:7c:c6:23:4b:1c:9e:18:a0:0b:43:ec:
c5:57:94:0d:ec:80:eb:c5:33:3f:9d:1f:73:7c:52:93:6c:d7:
2c:4b:e5:41:1a:ea:b7:85:bd:2b:2c:11:d9:86:dd:a0:92:96:
cc:39:f0:cc:14:fc:61:f1:47:bb:0c:24:37:ce:ce:19:b5:34:
64:9e:65:ca:36:27:41:4b:74:65:28:c3:bc:72:9c:cc:2f:16:
6a:c6:75:2a:04:76:17:16:d0:ff:a9:88:6c:73:5a:9e:65:ab:
41:e8:51:84:60:07:d3:b5:fd:19:2d:41:1d:2a:14:64:a1:de:
aa:20:61:3e:44:ff:f4:a8:5e:e9:5c:75:cb:a2:cc:22:d4:9a:
89:40:84:8f:df:99:73:84:47:11:1f:48:84:37:38:8f:43:13:
94:d6:49:48:b8:42:9d:5a:b8:95:92:0f:3f:58:a8:42:41:d6:
52:6b:2f:39:d1:13:9f:1d:85:1e:a2:76:dd:65:a2:7d:81:44:
03:b3:b0:38:ff:44:3a:d8:3a:8b:54:69:34:c4:0c:c0:0a:e2:
ce:0d:e9:b6:82:d3:a2:f5:bc:c3:ea:d4:df:0e:ed:e8:b5:11:
2c:ad:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:25 2024 by rpki-client on console-fra.rpki-client.org