Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/m-acSG5gAAzRw30MYkCovoY8mKs.roa
File: m-acSG5gAAzRw30MYkCovoY8mKs.roa (raw, json)
Hash identifier: fGhiK6SumqrNQdofqP7NOnoKujEyxUk4Ho6hUUFX7Yw=
Subject key identifier: 9B:E6:9C:48:6E:60:00:0C:D1:C3:7D:0C:62:40:A8:BE:86:3C:98:AB
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 018CC9BCED88D6F5183B6C990A4C88BAE81E
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/m-acSG5gAAzRw30MYkCovoY8mKs.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49685
IP address blocks: 193.30.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ed:88:d6:f5:18:3b:6c:99:0a:4c:88:ba:e8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be69c486e60000cd1c37d0c6240a8be863c98ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:95:5b:e5:67:0d:f4:af:28:79:98:2a:fd:
1f:4d:0f:d0:d2:ce:07:e5:63:0c:53:c2:31:30:e8:
37:d2:6f:cd:c3:86:b6:c4:fe:0d:d9:30:8d:95:e6:
e9:4e:73:f5:11:d3:48:e7:49:5c:df:04:d7:58:e4:
06:40:29:72:2b:59:7e:59:83:ea:f3:a1:d5:7d:cc:
67:7f:a0:5d:39:5a:3c:a1:79:36:4c:71:58:89:f5:
a7:18:8c:3f:4d:b5:63:0e:48:31:2a:ff:56:01:4b:
0a:2e:48:fd:2f:6c:7b:81:16:ab:6b:57:bd:af:a4:
8d:73:da:69:ff:dd:f8:99:56:8c:3a:84:00:be:b9:
df:b0:76:21:00:0c:d0:21:92:17:76:c6:b6:ac:75:
d2:34:3f:9d:27:31:0d:d3:d5:e3:9a:c7:62:c8:a1:
bb:b1:48:d7:bf:7c:4e:42:5e:81:de:ad:58:3c:fd:
c8:44:79:ff:fc:bc:99:dc:f6:84:07:22:83:44:56:
94:b8:ba:cc:a1:5a:fd:ce:84:b7:a9:ff:65:3a:a0:
0b:a0:ef:8a:4c:9d:ae:bb:35:02:05:ea:ca:4e:88:
e1:b7:54:bc:99:5d:89:d0:11:ac:cb:53:a5:b9:4d:
de:9f:2b:89:58:b0:f4:fe:b3:7a:2b:96:49:4a:90:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:9C:48:6E:60:00:0C:D1:C3:7D:0C:62:40:A8:BE:86:3C:98:AB
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/m-acSG5gAAzRw30MYkCovoY8mKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.170.0/24
Signature Algorithm: sha256WithRSAEncryption
59:93:10:b0:2a:94:9d:38:e3:d2:0c:a8:6a:0b:75:fe:a3:1e:
e5:37:9a:5c:f8:cf:93:f3:df:db:ab:69:b6:4a:b2:8b:9e:c9:
2f:42:54:69:26:8d:6a:a3:c4:06:56:c1:eb:80:01:de:50:89:
74:94:e4:31:31:f4:46:91:7e:bf:d9:b6:8b:6f:b5:73:75:8f:
ba:a6:28:ab:c0:0f:9e:a1:25:9f:dc:4e:9b:e1:46:0d:9b:b8:
0f:45:a1:b0:b1:08:6f:53:ef:f6:32:e5:d3:25:b3:17:03:7a:
65:7b:bb:f1:f9:1b:6b:d7:29:45:01:be:8f:02:6f:b8:37:e7:
e0:1d:64:fc:82:77:0f:66:f3:a9:14:7b:dd:49:22:c3:e0:7f:
9c:d7:1f:b9:4c:18:c7:26:79:82:16:d7:70:0f:2a:be:37:83:
25:e3:b5:ab:c3:68:7c:d5:f9:55:7c:dc:d6:0d:43:61:18:d9:
89:95:31:cb:d3:64:97:90:82:f5:51:ef:21:d9:59:4b:eb:51:
ba:1b:8a:43:37:d6:ce:ff:7f:67:f1:f1:e0:b4:d5:28:fe:33:
1d:02:ea:8c:d8:a1:c1:06:e0:04:c8:36:61:7f:e9:e2:7e:18:
e8:39:15:ea:a7:71:a2:be:7c:e1:62:e9:8f:e0:2b:25:f8:75:
1d:42:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:29 2024 by rpki-client on console-ams.rpki-client.org