Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Mmla5Nta9VAlN3YOZOxX09M-7GI.roa
File: Mmla5Nta9VAlN3YOZOxX09M-7GI.roa (raw, json)
Hash identifier: kM/zVoiCsrnQd38QjZ5EFska1wZ7t6rgM9RKK0MGd3Y=
Subject key identifier: 32:69:5A:E4:DB:5A:F5:50:25:37:76:0E:64:EC:57:D3:D3:3E:EC:62
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 018CC80173A6A64957F3E8C1FA169671B317
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Mmla5Nta9VAlN3YOZOxX09M-7GI.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21100
IP address blocks: 193.106.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:73:a6:a6:49:57:f3:e8:c1:fa:16:96:71:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32695ae4db5af5502537760e64ec57d3d33eec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:03:52:2c:ba:5a:29:b6:6c:cc:d4:4b:40:
6c:b0:48:2e:78:fb:a0:a4:88:69:43:d2:3e:93:87:
ed:b4:f0:dd:e3:8e:c0:17:9e:c9:aa:14:1f:78:a3:
1e:d6:35:3f:c9:ea:77:3f:be:be:0e:04:b5:5e:60:
79:37:97:25:28:8e:2a:06:c4:42:95:ec:e1:04:f2:
55:1c:34:f2:17:48:06:4e:7b:60:9c:1e:01:f6:3e:
b3:c2:6a:52:cd:28:3b:c7:92:a0:79:2d:d1:de:9d:
42:84:9c:ba:13:6a:05:34:89:54:18:ed:b8:45:40:
90:e7:83:f4:c2:e9:24:e2:12:2d:eb:bb:19:49:cc:
8d:86:96:54:77:87:af:1e:35:9f:78:5c:c4:8e:a6:
d2:90:b9:b7:53:ac:c5:03:df:82:96:e3:ec:d3:78:
15:1a:dc:71:07:7b:07:0b:72:b0:7b:5a:f8:23:2b:
52:23:69:c4:51:d0:7c:9d:7c:71:8f:2c:33:a8:3d:
08:74:32:06:1e:aa:6b:03:b5:dd:12:a0:ef:81:a9:
fe:46:f6:c3:3d:4a:71:b0:68:69:00:08:cb:92:22:
29:99:0b:a4:68:fb:cb:be:5f:e7:c3:cf:5d:ea:78:
f9:87:4e:e9:ac:be:27:3e:52:92:27:b8:78:fc:e7:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:5A:E4:DB:5A:F5:50:25:37:76:0E:64:EC:57:D3:D3:3E:EC:62
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/Mmla5Nta9VAlN3YOZOxX09M-7GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ad:58:4f:8b:89:40:93:fe:43:99:a8:c7:34:64:a3:e0:f0:
8a:52:15:cf:0d:ea:c8:60:f0:05:dc:33:e0:ea:cd:b0:a8:9f:
3b:16:e3:40:73:58:6f:ae:c3:0e:b5:e1:14:05:0b:d3:b9:5d:
bb:f8:23:87:1a:52:52:64:32:b4:42:4c:ad:af:26:f9:a5:b1:
fe:40:8c:6c:2c:12:42:18:84:6d:19:6e:5b:d6:32:21:15:da:
72:9e:f7:55:44:2d:d9:5b:b8:7c:12:88:87:8b:41:f7:ac:9a:
d1:2a:35:46:2c:36:f0:e1:ec:bb:b9:55:6a:8b:a9:7e:21:dd:
d5:b6:5a:03:f3:eb:f5:95:90:6c:d1:6c:1d:fd:1f:25:7d:b9:
9b:58:bd:77:9d:35:30:39:d6:1d:8f:69:04:0d:df:49:c9:35:
c3:10:26:24:57:93:4b:b0:84:b6:40:7b:06:f4:70:03:ed:fd:
65:e9:0b:02:9b:bb:d5:6f:65:96:84:0d:1d:d3:01:4b:8e:41:
37:df:04:ff:e7:37:1f:88:ac:4d:1c:f0:16:01:48:c2:f5:5e:
76:0b:9f:ae:4a:46:52:cb:42:dc:a1:d3:0a:d9:7d:f1:15:ae:
08:70:a0:44:e4:2d:54:b6:c8:3a:e0:89:48:65:ee:7f:5d:d8:
fc:a2:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:41 2024 by rpki-client on console-ams.rpki-client.org