Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/mwMlYXO27T7vXjTc_Fn1dm578mU.roa
File: mwMlYXO27T7vXjTc_Fn1dm578mU.roa (raw, json)
Hash identifier: 3Z6aQ7kvE82VO+ox0n1lTRnedr+10RNrUq+VGXFpa4I=
Subject key identifier: 9B:03:25:61:73:B6:ED:3E:EF:5E:34:DC:FC:59:F5:76:6E:7B:F2:65
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 018E84B9FD7BE264D5A03A00CB25882D2D91
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/mwMlYXO27T7vXjTc_Fn1dm578mU.roa
Signing time: Thu 28 Mar 2024 11:02:45 +0000
ROA not before: Thu 28 Mar 2024 11:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 202.181.148.0/24 maxlen: 24
2a13:d207::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:b9:fd:7b:e2:64:d5:a0:3a:00:cb:25:88:2d:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Mar 28 11:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b03256173b6ed3eef5e34dcfc59f5766e7bf265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:e2:fb:44:5e:d9:25:8b:bf:99:93:bf:63:
dc:d2:0e:dc:2d:a4:9d:ae:b2:b5:e9:99:32:59:59:
6b:68:43:ba:70:07:45:08:53:44:d4:59:ce:6f:13:
df:74:76:dc:09:4a:df:09:38:ac:9a:1e:ec:a7:31:
fa:a1:7b:10:a7:5d:8b:b1:fd:df:05:d3:f9:72:07:
33:d0:28:c1:40:c9:11:37:f4:d3:d6:e1:22:80:38:
ed:8d:c4:4d:e7:5d:d9:7f:15:cf:2c:7d:97:66:36:
ac:21:db:cc:a6:f9:fa:a3:68:ca:bd:37:e2:f5:e7:
18:fb:2d:09:7d:46:a0:52:19:db:65:f8:ed:f4:f8:
4a:34:0d:f0:a5:99:d0:a8:1e:f9:9a:39:54:2e:c9:
74:2e:1b:c7:37:be:1e:77:20:00:09:f9:0d:37:9b:
a2:bf:15:59:12:c3:f5:1e:9b:08:f6:ee:ef:57:fa:
a8:d8:7e:8e:62:95:0d:eb:74:f6:66:db:ee:89:41:
79:8f:84:09:9f:e6:cf:13:8f:18:47:a3:87:20:07:
ac:8f:0d:81:df:b6:f1:cd:e5:fb:03:49:98:a1:71:
42:48:57:39:41:da:e1:d8:98:e4:c3:e0:ec:1f:c1:
51:bf:14:de:a8:60:fb:cf:2a:37:b5:44:d8:49:3c:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:25:61:73:B6:ED:3E:EF:5E:34:DC:FC:59:F5:76:6E:7B:F2:65
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/mwMlYXO27T7vXjTc_Fn1dm578mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.181.148.0/24
IPv6:
2a13:d207::/32
Signature Algorithm: sha256WithRSAEncryption
2e:b0:bf:6e:38:05:4a:f8:bf:6b:37:1c:31:16:75:86:31:f5:
7a:62:94:54:5c:59:b8:ea:d1:07:ac:25:ba:a9:61:78:af:4e:
82:7f:a0:9f:70:0d:50:ce:28:7d:1b:af:3a:f5:87:0b:52:c1:
fc:bf:06:90:ab:1f:61:ea:2c:31:43:27:b2:08:68:4b:46:10:
f6:cb:a4:3b:c8:d8:f1:63:73:e2:81:d5:7b:91:5c:92:33:b3:
87:76:43:35:8f:db:97:d2:5c:b2:63:56:cb:c5:d0:c3:38:01:
9c:e6:6e:de:51:63:1f:05:0f:47:97:76:be:49:ba:df:d6:e2:
08:4a:fe:58:b9:73:eb:43:43:29:44:f6:43:84:0a:5b:23:e2:
69:9c:11:de:16:09:43:39:1c:fa:cf:9a:e2:42:be:0d:81:c2:
e5:73:36:02:7b:98:4d:7f:ad:17:78:ea:ce:7f:3a:38:17:ae:
9b:4d:4e:ac:ee:e1:98:53:8d:80:9e:d4:b8:8b:03:c4:e4:99:
c9:8b:db:5a:b9:a1:00:17:40:62:0c:ef:51:8a:cd:40:57:4c:
96:a3:02:62:1f:23:75:c3:e6:8c:55:14:b6:a6:9d:a4:de:c7:
d4:a4:0f:4f:5d:9d:9f:a4:c0:e0:fe:43:b4:c5:0b:e6:12:ef:
35:99:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:11:05 2024 by rpki-client on console-fra.rpki-client.org