Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/CMMToVX0MI4NW4lplMpzvLByFaE.roa
File: CMMToVX0MI4NW4lplMpzvLByFaE.roa (raw, json)
Hash identifier: 1UfLPXuH72dmKvMOtvTaiUx2ky6keSrgsmTgdnorH6c=
Subject key identifier: 08:C3:13:A1:55:F4:30:8E:0D:5B:89:69:94:CA:73:BC:B0:72:15:A1
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018E51E4AEC7ABB44BAC860C7CE618AD5FF7
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/CMMToVX0MI4NW4lplMpzvLByFaE.roa
Signing time: Mon 18 Mar 2024 14:08:45 +0000
ROA not before: Mon 18 Mar 2024 14:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.154.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:e4:ae:c7:ab:b4:4b:ac:86:0c:7c:e6:18:ad:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Mar 18 14:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08c313a155f4308e0d5b896994ca73bcb07215a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:04:2c:25:0c:cf:bc:ce:45:04:f0:d9:27:
3c:f2:55:81:64:71:5d:28:2a:b8:43:8a:80:c2:f1:
be:80:9b:7c:34:80:a5:2f:c5:50:01:6b:81:3a:bb:
54:b7:df:c3:8f:cf:97:4f:e5:25:e1:c1:ea:4b:67:
02:e7:5a:66:a8:18:4b:5e:99:dc:e4:de:86:ea:f1:
98:46:19:54:3b:75:f1:d0:9f:14:8f:cc:ad:3f:dc:
a8:e5:4d:c1:fe:32:6b:b7:67:3d:7e:3c:53:e1:2d:
97:f6:61:9e:bc:07:51:33:2b:dd:15:4d:64:51:7e:
e9:1f:74:ef:be:76:44:18:c2:b1:6b:6f:85:99:9d:
57:35:b4:6d:4d:28:0c:24:68:5f:9e:60:bd:5a:03:
ac:c9:65:a8:58:23:43:c0:0b:0f:72:e8:96:1f:26:
f6:ed:8d:f0:1a:2b:df:0a:7c:6e:50:82:49:a1:fd:
b1:5f:9c:60:0f:e0:95:c7:89:04:46:66:73:12:98:
bc:dd:24:f1:bb:c6:c0:05:c7:6d:c4:99:dc:98:c3:
2e:bd:0c:6c:06:36:86:31:2c:97:23:65:ff:86:cb:
f5:64:85:c6:41:42:cb:be:d2:d0:b8:72:14:1e:51:
59:4e:e9:19:47:3c:cd:92:63:ed:e3:7f:6a:51:2c:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C3:13:A1:55:F4:30:8E:0D:5B:89:69:94:CA:73:BC:B0:72:15:A1
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/CMMToVX0MI4NW4lplMpzvLByFaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:73:bb:4c:9e:15:68:7b:e3:92:0e:99:71:4b:85:4c:35:
42:7d:0e:29:ea:2c:54:85:80:23:61:b1:8d:d9:cd:6b:54:f5:
d3:53:48:2a:55:fe:3b:af:4d:65:72:b8:65:58:29:99:9b:c4:
3f:92:8d:1b:aa:2e:87:0e:a5:82:a7:61:93:26:47:56:b8:55:
03:4f:5a:64:a6:44:bc:22:44:bb:4a:be:97:d0:fd:4f:98:e1:
5b:b1:39:7d:60:8d:ba:54:d3:db:4f:fb:74:5f:cd:0e:71:92:
4a:ec:fa:17:5f:64:5d:1a:df:62:08:7e:93:41:5d:a0:d2:d2:
40:8d:a1:e9:86:b7:cd:0d:2b:13:07:0f:2c:95:ae:4a:c8:89:
98:23:38:87:cc:57:21:1d:f9:6c:63:d5:f0:8d:28:92:42:a8:
57:db:bc:df:e8:ce:e7:58:79:4b:51:be:b8:ea:b4:8e:e3:02:
56:62:8b:98:f9:6f:1f:a4:95:ca:c7:b1:4a:b8:c6:57:07:82:
58:72:98:57:a7:f9:37:d8:88:8d:1d:af:5a:a7:b9:33:f4:a5:
0e:af:89:df:6a:19:9a:ff:35:e4:0c:bd:65:9f:58:16:e0:55:
45:8d:27:95:9d:54:ea:83:0f:d1:43:b8:fd:95:ef:46:cd:42:
fb:2d:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:39:58 2024 by rpki-client on console-ams.rpki-client.org