Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rMOBAALq6tryvM_UQk2g2-ujM5o.roa
File: rMOBAALq6tryvM_UQk2g2-ujM5o.roa (raw, json)
Hash identifier: K97ANRD1ak8zwmnhCg2CSlDKtJfFacavdBC/gQgNSEI=
Subject key identifier: AC:C3:81:00:02:EA:EA:DA:F2:BC:CF:D4:42:4D:A0:DB:EB:A3:33:9A
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 018CC7263EE7FA0F12684B8B769ED6CBF290
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rMOBAALq6tryvM_UQk2g2-ujM5o.roa
Signing time: Mon 01 Jan 2024 22:30:21 +0000
ROA not before: Mon 01 Jan 2024 22:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39246
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:3e:e7:fa:0f:12:68:4b:8b:76:9e:d6:cb:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 22:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc3810002eaeadaf2bccfd4424da0dbeba3339a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:b5:8b:6f:87:bc:16:c5:92:40:e3:ff:62:
8b:c5:99:33:b8:99:94:79:70:60:70:3d:df:6b:5b:
45:cb:7e:aa:f0:33:88:c3:35:a2:c6:bc:84:13:9c:
e0:c3:7e:d7:3a:86:b1:b4:72:c9:3f:1c:eb:e1:53:
89:f6:78:ab:52:f1:bf:be:55:53:62:38:aa:a3:38:
bc:0f:3f:64:18:f1:c5:95:25:b7:66:51:86:d7:09:
51:4c:5c:59:c6:3f:ed:c9:09:01:6c:d3:09:d9:1f:
63:65:a4:d8:ce:be:60:f3:2e:9c:91:dc:b3:76:4b:
9f:40:bd:9a:fb:48:17:56:b7:cf:83:86:1a:f8:38:
4c:7f:61:09:b0:ef:76:75:15:55:9c:c3:9e:e9:96:
ed:42:04:b4:90:2b:7c:1e:66:a4:6f:a0:ac:9d:35:
10:89:ac:82:d7:b9:12:5e:6c:51:a5:08:a2:59:b1:
61:c4:ba:33:ab:c2:03:1d:0c:ca:f7:99:23:a2:12:
4c:05:f2:f8:76:59:88:9a:77:ae:fe:e5:09:a8:32:
47:65:5a:39:9d:b4:5d:a0:39:35:1d:2d:ee:8a:78:
8a:54:b7:83:a6:26:d1:f3:49:46:17:1b:f6:39:7b:
38:1b:1b:15:84:79:83:e7:57:2e:bd:a7:15:c0:7a:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C3:81:00:02:EA:EA:DA:F2:BC:CF:D4:42:4D:A0:DB:EB:A3:33:9A
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rMOBAALq6tryvM_UQk2g2-ujM5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1a:88:95:4f:69:31:48:45:10:a0:2b:0c:73:3a:38:02:2a:
87:78:74:4d:3e:1f:5e:cf:c3:e3:45:6f:44:35:7d:33:ed:cb:
aa:2a:6b:d5:b5:bd:ab:f6:6e:16:01:e7:4c:3c:85:42:6a:e4:
3d:39:53:1b:9e:1a:71:ee:53:f9:60:6d:14:c3:fb:35:0b:f1:
15:dc:a2:01:0c:3c:7a:af:3a:a8:cf:16:0f:67:20:ce:f7:82:
1c:e5:eb:f3:be:28:2c:f4:f6:ce:58:59:c6:31:45:1b:74:9f:
51:36:4c:b2:db:c0:84:70:35:57:6b:02:3a:6f:8b:78:0c:dd:
e3:13:1d:c4:04:7e:b3:95:26:88:dd:83:0f:08:13:9d:7c:4a:
98:95:f0:9d:41:fe:ba:aa:e5:ee:98:3c:e6:b0:54:e3:37:84:
7f:9e:c2:3c:30:bd:67:a3:9b:b8:b3:f6:2b:0c:e5:0a:16:b7:
ea:a9:2a:f6:5d:cb:37:7d:1d:83:49:68:89:4a:f1:c0:04:e8:
76:97:16:84:09:98:05:3b:44:7a:d9:2a:50:03:40:3a:99:39:
6d:e9:13:28:69:6d:41:bd:02:c6:74:1b:48:bc:23:ae:d6:06:
e2:87:08:9c:9f:57:35:9e:56:9b:ca:55:f1:2f:85:4f:bf:71:
ce:3b:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:56 2024 by rpki-client on console-fra.rpki-client.org