Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/mxxFTKN4RX1t-pOvxQRQBoGvd90.roa
File: mxxFTKN4RX1t-pOvxQRQBoGvd90.roa (raw, json)
Hash identifier: AQu1atpDUAdRWDAjxfel5zukshCOQXlhFt4WJ+3KHSU=
Subject key identifier: 9B:1C:45:4C:A3:78:45:7D:6D:FA:93:AF:C5:04:50:06:81:AF:77:DD
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 0191DB2A916DA5E7038556BC4BCCBA91FFEB
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/mxxFTKN4RX1t-pOvxQRQBoGvd90.roa
Signing time: Tue 10 Sep 2024 09:01:25 +0000
ROA not before: Tue 10 Sep 2024 09:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 194.50.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:2a:91:6d:a5:e7:03:85:56:bc:4b:cc:ba:91:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Sep 10 09:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b1c454ca378457d6dfa93afc504500681af77dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:74:12:fa:b3:1a:0c:05:70:b0:4d:b7:39:
61:33:02:23:d1:9d:64:34:cd:b6:31:b2:37:d5:08:
97:59:55:06:cc:a1:1b:c6:f6:b2:07:fe:b5:3f:8d:
86:a6:85:0a:ab:f5:08:4a:81:57:5b:bd:ec:f7:9f:
15:84:ba:e4:64:f0:77:77:9b:d1:19:ab:78:9b:51:
e7:cb:29:e6:c6:b4:d5:14:5b:c2:80:b4:e3:da:50:
c2:58:2e:f7:50:99:f6:ff:bc:d3:54:01:6a:06:4f:
63:1b:f2:65:88:5f:d7:7b:60:c4:51:c0:ac:c0:b1:
78:e5:9a:df:b1:38:0a:d9:4a:3c:21:0d:bd:74:5c:
e6:02:19:9c:f9:83:a3:f7:ac:3f:77:06:3d:d5:86:
a8:ef:a2:ea:d9:b5:98:df:31:8d:85:d4:fa:b3:80:
78:f0:95:ad:a7:90:2f:38:40:75:df:17:ca:ed:1a:
24:d7:36:a8:e6:0d:f2:c0:3a:74:31:8d:18:61:a7:
83:4a:3c:87:ee:13:c2:57:54:12:ff:ca:a5:b5:6b:
38:0a:8f:67:8e:ab:3f:aa:04:d5:68:95:f2:f5:25:
3d:24:57:31:05:dd:97:c0:b6:42:ec:6a:75:86:3c:
3c:ab:d0:c8:b0:eb:a8:eb:af:d8:28:44:09:b8:52:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:45:4C:A3:78:45:7D:6D:FA:93:AF:C5:04:50:06:81:AF:77:DD
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/mxxFTKN4RX1t-pOvxQRQBoGvd90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5e:15:9d:1e:1d:78:c1:fa:f1:41:7a:ce:a2:92:f7:9f:de:
b4:a9:bc:75:28:13:2b:db:12:03:b6:05:1d:e9:7a:90:d5:14:
1d:7c:01:95:94:9a:f1:3b:d7:8c:01:1b:82:06:d5:c2:85:d8:
0c:7f:9b:4e:bc:16:c1:6e:fd:ef:2e:a0:ff:5c:ab:06:0d:b1:
50:94:75:7e:4b:f6:e3:02:7c:f2:fd:e8:a0:74:aa:9f:58:af:
f8:e6:1e:7a:6c:15:51:78:02:30:e6:fe:0e:25:8f:04:f6:02:
d1:6d:73:83:22:82:80:50:02:cb:56:e2:1e:a6:a9:a7:6d:87:
b1:a7:bb:d8:fe:5d:e6:be:19:8e:cf:b7:97:8e:e8:20:43:f6:
ad:a5:d1:85:cd:3b:2b:d8:3d:de:60:85:36:9d:cc:41:b8:42:
3f:0d:26:a1:47:b7:ba:a9:8a:9d:cb:31:b6:63:b8:46:c3:c5:
5f:c3:2e:a6:e9:62:d5:2c:55:04:a2:78:cc:17:7e:40:8e:df:
b4:24:4a:0b:d7:cf:48:d1:6b:ca:69:7c:35:9d:de:de:57:b2:
53:29:0b:f8:73:c9:1a:eb:3e:52:03:e9:2d:b0:7a:d8:43:e6:
a2:c2:ce:3b:a2:cb:5d:1c:07:f8:cf:7c:5c:52:cd:e6:ad:4b:
ba:6c:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:54 2024 by rpki-client on console-ams.rpki-client.org