Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/kwMM1r4blJjYXt0F0uAESWSa9vo.roa
File: kwMM1r4blJjYXt0F0uAESWSa9vo.roa (raw, json)
Hash identifier: LpiOdIrkxGiILHQHwUrcP4xyqg+55+xI9DNWIsBfE3Q=
Subject key identifier: 93:03:0C:D6:BE:1B:94:98:D8:5E:DD:05:D2:E0:04:49:64:9A:F6:FA
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0191364C6FCB549ED34B210233FD4575B063
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/kwMM1r4blJjYXt0F0uAESWSa9vo.roa
Signing time: Fri 09 Aug 2024 08:41:04 +0000
ROA not before: Fri 09 Aug 2024 08:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48660
IP address blocks: 45.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:4c:6f:cb:54:9e:d3:4b:21:02:33:fd:45:75:b0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Aug 9 08:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93030cd6be1b9498d85edd05d2e00449649af6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:5c:df:b7:e9:42:62:60:a5:79:98:c6:75:
ee:10:0c:60:8d:2b:30:62:18:74:57:dd:7d:61:c4:
1a:63:e5:e0:a7:0b:cd:fb:fb:5a:45:6e:ae:26:79:
10:ce:ed:c2:63:76:f7:29:1b:52:22:cb:f5:84:b3:
8a:17:31:64:91:26:15:0a:08:df:33:05:c2:1a:bd:
50:31:a2:4f:ed:96:e7:75:a6:0e:dc:05:52:ec:4d:
f7:8a:07:ce:b0:d4:fe:7e:fd:67:4d:f4:1a:37:0c:
75:16:ef:23:c1:c0:e3:eb:52:19:15:b5:9e:2f:89:
56:59:99:b1:51:a2:46:79:f9:4c:a3:21:e0:f3:ce:
6d:a6:d0:9f:49:79:cb:a3:e1:8f:9c:54:d1:b8:00:
8d:85:84:bb:40:78:b2:83:93:9d:02:4c:5d:fe:4a:
99:e4:f5:c3:79:dc:e9:06:65:37:7e:b3:a9:99:ea:
5b:37:e2:6d:b8:38:f2:ca:f0:e9:b0:f8:59:39:10:
4b:df:08:ca:7c:71:32:94:16:61:69:cc:09:2a:04:
a0:1d:8e:6a:dc:11:05:7b:b5:1d:1e:60:db:18:e5:
53:97:60:6e:c7:bc:0c:cf:89:fd:1d:5f:7f:54:9b:
ca:44:ff:a0:af:5d:c5:35:7b:ad:03:94:3b:8c:44:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:0C:D6:BE:1B:94:98:D8:5E:DD:05:D2:E0:04:49:64:9A:F6:FA
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/kwMM1r4blJjYXt0F0uAESWSa9vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:22:cf:65:87:2e:08:a0:9c:b3:d2:4b:c7:aa:48:4c:1f:79:
a9:7a:6a:56:0a:31:b1:82:1a:a5:13:26:2c:1e:a3:aa:d2:f2:
cf:34:98:26:45:a5:b4:2a:02:b3:c5:57:f7:e9:7e:ac:2e:b1:
a2:59:71:1d:81:c6:5a:97:85:a2:72:93:0a:31:16:57:86:89:
bb:29:c2:ea:94:74:12:b3:b2:f9:f0:f9:67:52:5a:43:6b:d9:
3f:35:27:75:2b:6c:e8:51:65:fd:d3:1f:9b:8e:b0:54:80:39:
b1:96:e6:43:50:ab:db:75:01:49:72:ce:03:d9:f5:5d:33:4d:
56:a9:4f:8f:47:ab:53:88:e6:42:2b:55:9d:ee:fb:12:c1:64:
f0:b5:95:36:92:c3:8c:e4:40:d0:fb:7e:6d:f3:74:22:c8:86:
a2:fd:98:02:2f:fa:83:9b:95:2d:a8:08:6a:9c:57:aa:65:f6:
81:0e:23:c5:8b:b8:ce:49:e7:e4:63:05:6b:ef:0b:2a:9c:96:
c5:33:0d:56:0c:99:9c:d4:4b:41:80:49:dc:5f:2d:fd:29:9c:
50:f6:63:7a:f5:9f:ad:82:13:3b:c1:02:0d:c5:2f:7a:c4:79:
92:d5:45:94:0f:da:c3:70:6e:3c:ec:91:ba:6b:e7:46:46:49:
ed:b8:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:10 2024 by rpki-client on console-ams.rpki-client.org