Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa
File: M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa (raw, json)
Hash identifier: xXDPfnmgQBj9wb0/IHG7zEUaXvoc2FKejACXF5xKnBs=
Subject key identifier: 33:FF:61:75:12:FB:57:E0:6C:29:18:E8:D9:40:F1:C5:17:D8:01:E6
Certificate issuer: /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial: 018CC72744CBA0E25BBA25FA2990E98CE408
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59829
IP address blocks: 45.133.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:44:cb:a0:e2:5b:ba:25:fa:29:90:e9:8c:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33ff617512fb57e06c2918e8d940f1c517d801e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:20:a4:65:d8:ff:8d:c8:f8:ca:be:18:58:
66:6d:ae:1f:42:3e:28:eb:69:44:db:7e:b1:21:14:
fc:7d:a0:8f:70:a1:19:21:0d:17:1c:f7:f1:a0:35:
bc:f3:f5:b8:aa:f5:bf:69:22:19:5d:de:91:3e:c9:
16:23:7c:fb:97:1a:c0:77:cd:4f:92:e0:a2:2b:62:
5f:4f:6d:e9:cb:6a:9c:fe:9f:e9:d6:7e:67:be:4e:
49:fa:97:e6:d8:6d:3a:a1:1a:0c:00:a2:c6:22:59:
8a:1f:4d:27:6f:c3:39:d9:ae:75:bb:8f:9b:36:94:
9c:7f:a7:ea:77:e1:91:dd:f5:15:9a:0a:61:3f:4c:
1b:ae:d2:44:23:3a:a6:b1:b1:cc:18:31:d3:5f:54:
66:db:30:7b:09:f4:c1:41:7c:3d:e8:ab:f3:22:3a:
4b:82:db:31:c4:03:37:a3:83:93:c1:d2:31:7e:d3:
cf:6a:48:60:5b:e9:16:d9:4a:13:db:52:a5:e2:e2:
04:e1:fa:23:29:55:23:95:37:ab:d8:63:34:80:e8:
2e:ea:47:46:11:84:95:3a:ed:ed:79:17:6a:d4:4f:
5f:45:20:61:c4:5f:60:2b:b8:79:cc:66:7e:48:f7:
0c:43:5f:a8:e0:1f:6f:1d:a4:b3:39:71:f2:54:96:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:61:75:12:FB:57:E0:6C:29:18:E8:D9:40:F1:C5:17:D8:01:E6
X509v3 Authority Key Identifier:
keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:dc:20:0f:b8:1c:43:34:a3:b7:38:0e:47:4c:e0:45:36:c5:
25:94:14:26:7c:db:8d:c5:7c:53:8e:70:16:8d:f2:4a:34:63:
a0:7c:4c:70:98:f8:0c:b5:24:09:79:98:52:1f:40:c5:86:de:
79:bc:d1:72:53:1a:5d:e6:7b:15:68:78:72:20:1e:f5:8d:8c:
d9:7e:41:a2:25:2a:39:5e:d6:e8:e6:6b:cc:ac:2c:b3:0f:3c:
d3:39:2a:7b:9f:59:ce:a3:f1:91:1a:cd:4e:99:dc:f7:6a:0f:
b6:ad:4f:dc:71:e1:a4:4c:e4:ea:b3:7d:55:f5:85:b6:9e:1c:
13:b4:a4:d2:64:44:f9:a9:3b:9f:e5:c1:89:99:1b:0b:18:0b:
1f:67:d6:d2:02:02:08:1b:81:0a:a3:8b:1a:1f:a9:bd:fb:d4:
7d:5b:75:1a:4b:ca:33:c3:95:da:3b:f1:da:c7:e0:ba:e0:d0:
b4:4f:2a:c4:66:3d:14:8e:d2:34:8a:17:c1:68:55:e9:b8:5d:
cf:62:1e:35:a8:e0:31:fc:e8:29:90:fe:f1:8c:32:62:29:39:
a7:4e:2d:ee:75:15:37:f7:30:9f:d3:41:60:69:9b:d9:68:fc:
ea:67:1c:b6:5d:1a:99:a8:d4:2f:8e:6f:e3:b6:5a:79:ff:55:
e9:f5:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:51 2024 by rpki-client on console-ams.rpki-client.org