Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/MHD4IfYgCUOAL2qbFJV_oCHFSPk.roa
File: MHD4IfYgCUOAL2qbFJV_oCHFSPk.roa (raw, json)
Hash identifier: gBGM2n4BSwIGIb3praj8nm6P7oKvTIBPlupM4sMq0G8=
Subject key identifier: 30:70:F8:21:F6:20:09:43:80:2F:6A:9B:14:95:7F:A0:21:C5:48:F9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 018CC5DBFB33D9D08619BB018BB9E26FFCBA
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/MHD4IfYgCUOAL2qbFJV_oCHFSPk.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209993
IP address blocks: 45.90.192.0/22 maxlen: 22
2a0e:240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fb:33:d9:d0:86:19:bb:01:8b:b9:e2:6f:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3070f821f6200943802f6a9b14957fa021c548f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:8f:ad:da:36:0e:25:ee:b7:e3:63:b9:5f:
9e:94:32:a1:52:b7:e5:8d:f5:6f:02:5b:51:c0:a7:
b8:d3:3a:d1:f4:54:c3:52:ae:ab:a7:cd:79:08:3f:
ee:e0:c8:df:9c:13:90:8c:60:5a:72:fb:95:76:c1:
e4:cf:9d:c5:67:c6:9f:9b:a7:9e:e5:f4:dd:e7:6d:
3b:55:d9:52:75:c8:2a:f0:e7:0d:1a:53:75:bd:d1:
46:89:dd:a8:9b:e2:6a:c2:0d:70:f8:51:50:c9:9f:
f9:07:e4:01:e2:b6:c1:39:2e:3e:53:ff:df:d1:f7:
ca:a8:05:53:c0:0f:68:85:34:65:5a:47:31:84:29:
f9:6f:08:aa:e1:50:b4:23:a7:29:28:fe:40:11:6d:
11:04:db:e8:50:c0:9a:c6:e6:88:b9:20:ed:5e:77:
67:ed:fd:a1:4c:26:05:4e:d8:01:6f:0e:54:68:9a:
60:9d:92:db:d2:8d:6e:58:0b:b0:02:84:73:13:aa:
ed:a3:b5:18:5e:59:9d:01:8d:e2:60:90:a8:3c:cb:
be:72:e2:43:8f:05:11:e6:c9:47:5b:54:1c:7c:7a:
44:45:4e:c9:83:b2:ab:18:7a:47:32:dc:94:2c:5c:
d8:d1:ca:bb:32:c0:2e:93:4e:c0:f2:6e:e2:a6:85:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:F8:21:F6:20:09:43:80:2F:6A:9B:14:95:7F:A0:21:C5:48:F9
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/MHD4IfYgCUOAL2qbFJV_oCHFSPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.192.0/22
IPv6:
2a0e:240::/29
Signature Algorithm: sha256WithRSAEncryption
14:8d:78:6d:0d:b6:dc:a1:bd:a5:78:a5:ed:34:8a:0d:ba:c4:
89:f0:ce:c5:24:86:1c:b0:cd:66:7b:d0:71:b3:61:1d:11:58:
8e:f3:3a:44:ef:32:38:8e:0a:00:4c:35:60:67:4e:fb:8b:ba:
f9:67:8a:b2:34:25:f8:db:32:5d:1d:7c:d2:ab:52:ec:6c:ae:
5a:3b:1c:8c:5a:2b:7d:ed:c0:89:a1:a2:b0:0b:95:28:cf:98:
b9:a4:50:75:9b:90:95:5b:c1:68:5c:56:c9:ba:f7:22:6f:07:
a7:1c:80:89:82:2b:cd:50:97:ab:a8:8d:74:7f:3b:d3:45:53:
87:a4:9e:4c:40:ad:c7:4f:14:7a:f2:64:a5:be:31:ab:d1:43:
51:01:e8:70:9b:09:a3:ea:5c:46:55:25:ad:35:01:3a:71:33:
10:41:62:ac:d8:d6:26:1a:6c:7f:09:c8:ea:c6:6e:f3:54:a9:
32:b3:e1:a3:66:07:2c:f0:55:c5:2a:0f:bb:b3:fd:4c:da:38:
51:50:43:38:d2:9c:54:5a:40:c6:c9:85:27:5b:ab:b6:87:f1:
ae:1a:21:27:3f:0c:aa:ca:d1:de:7d:05:ea:5b:3c:e0:9f:d1:
cc:df:fc:80:92:24:fe:2d:e5:2b:4f:65:76:ef:e5:e5:3e:e4:
2f:90:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:39 2024 by rpki-client on console-ams.rpki-client.org