Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/mGnwltTCcYGNFCNB5hdGsBepTD4.roa
File: mGnwltTCcYGNFCNB5hdGsBepTD4.roa (raw, json)
Hash identifier: MKd4BKScJ98XkO8+JTLmITpjulo277SVCLGW00i6Xe4=
Subject key identifier: 98:69:F0:96:D4:C2:71:81:8D:14:23:41:E6:17:46:B0:17:A9:4C:3E
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019011EF9ED0C06AF1F8D5B79D76BC784A11
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/mGnwltTCcYGNFCNB5hdGsBepTD4.roa
Signing time: Thu 13 Jun 2024 14:10:34 +0000
ROA not before: Thu 13 Jun 2024 14:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214742
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:ef:9e:d0:c0:6a:f1:f8:d5:b7:9d:76:bc:78:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jun 13 14:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9869f096d4c271818d142341e61746b017a94c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:08:58:3d:3f:00:ce:5f:63:db:d4:53:69:
d6:53:fc:cf:45:5f:bf:78:fb:4d:7a:3d:61:29:98:
1a:63:51:34:42:b4:13:db:30:f0:a1:9a:9e:e6:f1:
cb:14:db:ff:f1:26:51:3b:29:a7:8d:64:94:37:02:
14:a6:c3:12:91:d6:3d:c6:4d:c2:3c:b0:bf:28:db:
b3:29:92:78:93:61:64:d9:e7:df:a3:8a:0a:c4:25:
5f:e9:30:1d:52:d9:62:2c:ec:99:c3:d4:33:95:48:
45:02:96:90:d4:00:4b:d0:6a:59:bf:43:7f:5b:26:
ab:51:5e:7e:1d:8b:6d:c2:e3:c6:34:30:7c:f4:03:
e2:d5:23:aa:14:ca:27:e4:d7:ca:e2:68:d1:ae:5e:
90:ec:ab:fd:5f:0f:e8:9c:1e:38:a0:63:ff:33:38:
13:62:8e:17:ab:21:39:60:8e:87:6d:c3:ad:5d:51:
32:f9:29:93:fc:c3:dd:09:43:48:1a:90:de:19:1b:
19:b7:b7:90:96:fb:9d:86:af:23:2f:f2:03:ba:39:
ab:33:7a:34:f6:d9:f0:11:b0:ff:db:94:2a:c7:fb:
8a:3d:d9:05:52:75:ee:f2:3c:88:3a:37:fe:7f:55:
41:8f:fe:9d:42:0b:df:99:18:20:e8:8c:56:a8:0f:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:F0:96:D4:C2:71:81:8D:14:23:41:E6:17:46:B0:17:A9:4C:3E
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/mGnwltTCcYGNFCNB5hdGsBepTD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c8:03:14:c5:31:90:a7:0c:a6:01:17:b4:31:db:23:e6:25:
c6:01:48:fe:fc:c7:a7:99:7e:97:25:e2:9f:25:c2:53:06:6c:
8d:b0:42:c4:d2:2a:bb:fe:59:e5:f5:57:58:0c:57:cd:48:da:
17:ed:d6:c4:19:e6:10:41:e7:8a:f5:46:c9:61:4d:a8:64:3a:
9e:1e:14:5a:47:f6:e5:05:71:e0:8e:bb:18:3a:3b:6f:02:c9:
67:49:97:7a:ed:b0:74:b0:75:f2:a9:8a:92:52:25:99:71:df:
86:fd:2d:19:ae:c4:86:79:d2:f8:95:55:bb:3c:01:11:22:00:
2c:e4:e9:d9:0d:aa:76:ad:be:42:ba:ec:6a:3d:56:30:c0:62:
b3:c6:79:f2:50:d8:3e:3b:d6:94:c8:13:13:f1:62:d6:3d:50:
ea:84:bb:49:58:97:ed:05:2e:63:a1:36:a7:1d:48:6c:4b:16:
4d:07:5a:f1:a4:f3:66:36:cc:a7:42:8a:07:30:e8:20:a8:c7:
88:96:79:0b:01:3c:25:07:df:25:c5:2a:ba:b7:6c:fc:65:d0:
fb:37:dd:ad:86:9d:03:9e:d1:c3:80:21:28:ef:3d:50:fc:ce:
01:ae:2d:25:c7:a0:b2:d2:85:23:29:b0:49:c2:3a:ce:8c:30:
44:b4:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:46:54 2024 by rpki-client on console-ams.rpki-client.org