Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/MmOUK518ins1Lw0fMfBDlcbe4cg.roa
File: MmOUK518ins1Lw0fMfBDlcbe4cg.roa (raw, json)
Hash identifier: vR3U8T1ijS4vWmNU+GNz78nxQgb0Cp+8OFdSaAKEBLM=
Subject key identifier: 32:63:94:2B:9D:7C:8A:7B:35:2F:0D:1F:31:F0:43:95:C6:DE:E1:C8
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E13C92C17CD8FE82F2A1D44FA297DB56
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/MmOUK518ins1Lw0fMfBDlcbe4cg.roa
Signing time: Wed 11 Sep 2024 13:18:48 +0000
ROA not before: Wed 11 Sep 2024 13:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212431
IP address blocks: 212.110.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:3c:92:c1:7c:d8:fe:82:f2:a1:d4:4f:a2:97:db:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3263942b9d7c8a7b352f0d1f31f04395c6dee1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:2f:35:45:42:5f:f5:1e:ce:c3:8b:b9:7b:
8d:70:f1:f4:f6:ac:93:b2:90:3a:0b:0b:2c:54:da:
d8:75:d8:f9:2e:f9:33:0a:ac:47:a6:1a:1f:8d:73:
d8:7a:0d:d6:23:f6:47:e4:81:27:82:43:99:2a:9b:
3b:7a:77:ce:df:37:87:c3:45:0e:8e:27:2a:b5:86:
52:e4:f6:a4:5a:5f:20:b8:18:09:f5:7b:75:09:d2:
70:be:d6:1a:91:16:8e:5a:67:00:5d:b6:a0:da:8f:
22:08:b0:8d:ef:51:74:4c:31:d4:62:70:8d:6c:3b:
04:09:00:74:f6:21:da:02:f1:01:ec:3e:ea:4e:e3:
30:64:b3:5d:23:61:6f:82:d9:af:dc:28:a3:85:99:
68:7b:f6:b1:bf:d9:5d:9d:3b:5c:8f:5e:0f:4e:a3:
76:0a:75:17:20:17:8e:2c:b3:e2:fd:34:33:37:26:
fd:c2:01:d2:d3:99:16:de:42:f1:7d:b1:09:3d:4b:
ff:e9:ab:c8:62:da:34:10:1f:53:3d:14:7c:3d:ca:
9b:ce:f1:ca:64:d9:66:66:40:fe:1f:8e:f6:61:0e:
56:73:2f:e0:17:97:7c:c2:53:22:a8:db:a1:97:8f:
04:25:f0:48:6a:c8:e6:83:31:0c:4e:0b:68:7a:7c:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:94:2B:9D:7C:8A:7B:35:2F:0D:1F:31:F0:43:95:C6:DE:E1:C8
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/MmOUK518ins1Lw0fMfBDlcbe4cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:81:1f:ee:16:33:b8:cb:2a:88:19:3a:61:48:0f:c3:9a:0b:
aa:25:d3:09:99:bc:84:0a:1c:e9:2f:13:c3:a3:82:02:e7:44:
4a:f7:fe:13:7e:9f:b4:a9:f5:98:96:3a:ea:9c:0a:64:8d:ba:
d1:fb:59:cf:34:7c:cb:4d:e5:9f:d3:5c:85:7b:19:e6:ac:1d:
38:f5:46:be:56:dd:42:ff:4a:23:9e:85:ba:fa:47:60:61:74:
af:84:2a:95:50:71:1e:2a:9c:32:b3:45:96:50:92:23:1d:ce:
98:af:11:5a:8b:60:86:22:70:77:d6:c4:39:70:18:94:cd:78:
d8:31:d8:ec:f2:85:70:31:32:e8:cd:54:1a:07:eb:fe:79:b4:
45:23:a4:06:db:92:7d:d9:4e:6f:fc:9d:c6:f4:08:e9:5a:26:
e4:00:9b:27:92:3c:ff:e8:5a:59:47:4f:91:38:3e:d5:96:85:
ab:e1:1b:83:29:df:41:81:70:1e:74:5a:2f:7c:cf:9b:3a:cf:
e3:1a:d1:c3:e0:1f:61:a1:01:1a:e5:3c:c6:75:66:39:00:b8:
19:d7:44:37:82:8b:ae:e2:f2:e1:65:c4:ec:c1:16:5d:74:dd:
48:fb:0a:58:e8:b1:c4:98:d2:7b:0e:d6:b0:79:51:22:71:36:
b5:0a:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:33 2024 by rpki-client on console-ams.rpki-client.org