Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mjq_OyPXC_Sji3QhCh4CHL6gpU8.roa
File: mjq_OyPXC_Sji3QhCh4CHL6gpU8.roa (raw, json)
Hash identifier: Rcafw00l7WdAnH3IrZUnG8gb3brbnUx0ZwZeWCNmKJY=
Subject key identifier: 9A:3A:BF:3B:23:D7:0B:F4:A3:8B:74:21:0A:1E:02:1C:BE:A0:A5:4F
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018CC64B20BDC7B2D1F4B9CEF11F78C55BC4
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mjq_OyPXC_Sji3QhCh4CHL6gpU8.roa
Signing time: Mon 01 Jan 2024 18:31:01 +0000
ROA not before: Mon 01 Jan 2024 18:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22239
IP address blocks: 31.186.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:20:bd:c7:b2:d1:f4:b9:ce:f1:1f:78:c5:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 18:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3abf3b23d70bf4a38b74210a1e021cbea0a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:ff:15:66:4a:7e:e7:ac:af:c6:87:e1:af:
c2:22:23:43:f0:ee:57:a8:62:a4:cc:c2:e1:00:ec:
f9:0e:48:f1:7d:8c:fa:c5:c3:92:9c:5f:12:85:1f:
b4:f2:c2:e4:49:47:f6:5a:5c:22:29:f7:ad:1d:36:
17:b0:d9:37:e4:b3:34:51:e2:97:11:b6:40:87:c5:
21:13:78:25:8a:fa:97:57:d0:6c:76:b8:0e:aa:4e:
a5:3d:3f:69:a5:17:0e:c0:67:6b:2c:ad:9c:55:6d:
c4:13:b8:6c:65:93:6b:84:39:18:3d:9a:a6:f5:b3:
04:1c:6e:13:35:11:75:2f:6e:9f:94:b4:7c:f1:d3:
01:93:65:02:e3:4f:05:9a:a7:22:bc:49:7f:a8:5f:
61:a1:3c:fe:4f:e5:52:91:22:12:1e:4d:8d:3f:3c:
2b:b0:df:1f:72:e4:17:f3:8e:95:5d:8d:eb:c3:7b:
9e:08:11:b2:3d:5f:f3:28:4b:08:ea:ce:a5:37:c0:
f0:84:a8:08:10:68:83:eb:a2:8d:c3:16:87:51:3c:
0e:7b:a1:71:06:07:64:ff:62:8b:32:15:9b:dc:b1:
cd:c5:80:ee:62:a1:e1:35:b5:d1:95:66:1a:71:68:
c9:4b:00:bc:6e:7e:94:f8:32:54:a2:35:d2:16:11:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:BF:3B:23:D7:0B:F4:A3:8B:74:21:0A:1E:02:1C:BE:A0:A5:4F
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/mjq_OyPXC_Sji3QhCh4CHL6gpU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.249.0/24
Signature Algorithm: sha256WithRSAEncryption
05:24:24:ee:09:08:1a:44:2c:e8:d4:2e:82:4f:3f:af:d3:b5:
0d:60:29:2b:0b:88:3c:4d:a4:45:50:e7:c7:92:75:b6:a1:4a:
e1:14:36:9d:54:95:6f:31:16:88:ad:f8:3b:3d:d1:85:c7:12:
13:72:0d:a2:da:cd:8e:88:01:c4:4f:14:09:dc:d8:91:5b:04:
ed:d3:c6:cd:6d:ef:93:82:60:f0:fb:dd:65:0d:56:02:1c:10:
94:ad:d1:33:45:27:63:b0:23:24:c5:8c:1a:a2:cb:a8:4d:00:
59:c6:1b:c8:84:62:fe:2a:92:2d:10:c9:25:b5:13:2d:ab:fb:
bb:7a:03:f1:c5:c7:2f:19:63:70:b5:0b:e2:f8:78:92:0b:35:
44:2a:d1:32:52:d9:da:fb:b7:d4:3c:d9:e8:57:42:ad:d6:da:
31:43:b5:35:88:8b:c3:aa:fa:e0:e9:7d:77:93:e7:4e:91:10:
43:a5:3d:a1:90:01:64:24:5e:3d:bb:57:0a:5b:d5:19:89:43:
d4:d4:a4:46:5a:ac:6f:7f:e9:dd:c7:44:0c:51:ee:89:bc:c8:
41:19:15:32:6d:0e:eb:83:76:eb:b1:b0:f6:f9:f2:b3:14:16:
8a:d8:81:bb:8b:97:6a:a8:6a:8f:f2:58:ac:3c:c8:17:c4:f7:
2e:f6:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:24 2024 by rpki-client on console-fra.rpki-client.org