Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/MArImlxXhpjV9rZOzLDF1TNYRWs.roa
File: MArImlxXhpjV9rZOzLDF1TNYRWs.roa (raw, json)
Hash identifier: QYSO6fwpJs03TgelXA3hpumLNRhvUCZKePfkOhthRRI=
Subject key identifier: 30:0A:C8:9A:5C:57:86:98:D5:F6:B6:4E:CC:B0:C5:D5:33:58:45:6B
Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial: 018F1906960608E7332351CF005B61FC038E
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/MArImlxXhpjV9rZOzLDF1TNYRWs.roa
Signing time: Fri 26 Apr 2024 06:10:13 +0000
ROA not before: Fri 26 Apr 2024 06:10:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39637
IP address blocks: 45.136.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:06:96:06:08:e7:33:23:51:cf:00:5b:61:fc:03:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Validity
Not Before: Apr 26 06:10:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=300ac89a5c578698d5f6b64eccb0c5d53358456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:e2:42:8f:16:2e:11:0b:ed:84:cb:86:f2:
4b:8d:fc:46:1a:6d:6a:5f:74:68:45:dd:63:8c:cb:
29:b2:f7:de:f6:7f:eb:05:79:47:68:95:b1:68:0d:
0d:64:3e:f8:e0:02:d2:6f:b4:6f:1c:fd:6c:da:2a:
b4:59:a4:4a:49:f0:ec:54:2a:75:8f:1e:0a:4e:79:
9f:5e:18:0e:b3:2b:77:77:61:5e:fa:4c:e0:45:6c:
01:3a:f7:be:c6:9e:dc:86:4e:49:58:b9:ec:40:ea:
5c:5b:9d:7d:c6:86:d5:ad:5b:53:20:4d:4b:f7:a6:
8b:b8:65:3a:6c:45:4a:ee:39:c8:3b:9c:38:6a:4f:
b7:11:91:cb:d1:87:b2:c7:73:0c:2a:17:e3:02:03:
5b:a1:33:40:23:42:b9:84:bb:8d:b1:48:83:ed:38:
36:f5:03:83:49:8b:a2:80:ff:6f:af:54:b3:1d:f0:
22:0f:8e:89:48:12:cf:1f:71:0a:9c:05:0f:87:44:
0f:fe:a8:a9:f4:c9:bb:ee:bd:9c:a2:d3:58:45:28:
b1:7a:97:7b:27:ab:fc:51:e1:01:73:23:19:7b:8f:
74:7d:f7:1d:97:a4:e0:4b:49:7e:75:1d:6d:90:31:
3f:d6:3e:80:4d:c6:80:c6:15:21:2c:fc:99:7c:7c:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:C8:9A:5C:57:86:98:D5:F6:B6:4E:CC:B0:C5:D5:33:58:45:6B
X509v3 Authority Key Identifier:
keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/MArImlxXhpjV9rZOzLDF1TNYRWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.111.0/24
Signature Algorithm: sha256WithRSAEncryption
00:76:fd:ad:db:29:b2:c9:c7:d0:2f:e5:ef:23:b3:b3:b2:5c:
90:e1:aa:39:b9:af:70:5b:10:28:fc:d3:80:7c:a0:f9:08:d9:
0d:93:cf:94:ec:b8:a3:7d:39:6c:8f:b8:d2:8a:be:df:d9:65:
9c:fd:cd:3a:3e:3a:3b:d4:18:f4:bc:47:a8:e6:0a:54:94:96:
6f:61:70:dd:6d:83:21:b5:6b:46:db:d6:5c:65:6b:70:6b:e4:
a5:71:95:3f:29:09:61:e1:cf:11:9d:05:66:42:d5:fe:bc:29:
d7:4a:8d:91:ae:ef:67:95:23:1f:72:55:89:09:6c:e7:7b:3a:
e1:ec:54:a1:d6:9e:15:b5:94:c6:bb:5b:0d:e1:c3:c5:18:e6:
11:5c:8c:b6:95:03:c5:1f:98:e0:42:9d:7f:f1:6a:0c:82:50:
f2:8d:a6:9b:29:2d:ce:67:e6:fa:42:df:af:57:a8:02:80:06:
f4:1f:9a:93:71:20:03:2c:51:3f:0b:1b:c5:9d:ec:65:63:5e:
41:a8:66:47:f4:89:39:47:11:a8:93:ba:0e:51:ca:c3:ed:be:
1a:36:34:e6:c7:1a:cd:e4:47:0a:17:97:e5:15:9c:37:19:25:
76:ba:84:5a:bb:b4:03:f9:ab:ca:bc:07:02:c2:16:a9:b4:41:
5d:f5:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:30:13 2024 by rpki-client on console-fra.rpki-client.org