Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/MvTDhS4F8rDjxaNeaFZLh2gDwAg.roa
File: MvTDhS4F8rDjxaNeaFZLh2gDwAg.roa (raw, json)
Hash identifier: 3H2TIDBjhsbgt2f4YZSlx+8NpsT4EbPoFbySta94y/s=
Subject key identifier: 32:F4:C3:85:2E:05:F2:B0:E3:C5:A3:5E:68:56:4B:87:68:03:C0:08
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC801347773D2166CD720CBEE0CB2647D
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/MvTDhS4F8rDjxaNeaFZLh2gDwAg.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9020
IP address blocks: 153.96.134.0/23 maxlen: 23
153.96.135.0/24 maxlen: 24
153.96.133.0/24 maxlen: 24
2a03:db80:3810::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:34:77:73:d2:16:6c:d7:20:cb:ee:0c:b2:64:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f4c3852e05f2b0e3c5a35e68564b876803c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:11:8c:93:d9:1c:13:b0:15:c3:7b:3c:c6:
85:ce:7b:82:3d:0d:51:25:b5:40:d7:02:4d:8e:82:
8e:e7:ce:68:e9:4d:5c:36:f6:ce:76:37:d5:2a:34:
7a:77:23:b0:b0:b7:95:fc:16:3a:22:d5:e6:49:c0:
2a:90:fd:70:ac:1f:d9:a9:f2:d9:fa:ea:8f:d7:98:
0b:60:f8:5d:26:6e:d7:b5:34:9b:e8:6c:41:ce:2a:
d1:8f:00:44:56:ee:65:30:80:c7:ca:06:86:ed:17:
05:1c:81:9b:f8:a1:ea:29:30:6b:3b:40:f8:79:e4:
e3:8e:95:53:db:1c:0b:65:7c:b4:4c:68:63:76:de:
13:c1:01:b3:94:1f:38:29:4c:f3:1a:1f:ff:a6:cb:
61:60:95:0c:d4:31:cd:4c:3c:1c:e1:1f:91:e9:da:
3a:32:6e:02:11:a0:02:8c:2d:eb:2e:f9:e9:a6:31:
5e:fa:30:1b:33:d7:83:22:2a:0e:62:7e:50:cf:71:
c0:dd:83:f1:b2:34:81:d1:e7:71:50:fc:ab:f0:0f:
a6:45:f7:63:02:cc:7d:c4:e8:ce:14:e3:09:f9:cf:
6d:1b:60:9b:1b:3c:94:0a:5b:20:64:69:b1:16:60:
62:45:2c:34:52:8a:f8:61:bb:b6:49:3e:85:6b:54:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:C3:85:2E:05:F2:B0:E3:C5:A3:5E:68:56:4B:87:68:03:C0:08
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/MvTDhS4F8rDjxaNeaFZLh2gDwAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.133.0-153.96.135.255
IPv6:
2a03:db80:3810::/48
Signature Algorithm: sha256WithRSAEncryption
1a:c3:be:f7:3c:1f:83:df:d1:5e:2b:9b:fc:3f:4a:e6:0c:c8:
e5:78:92:ca:84:44:33:2b:c1:e7:95:2e:3e:c5:96:65:15:8a:
73:64:e7:0c:80:54:22:a7:5b:93:ac:1e:cb:d9:7a:21:c1:49:
c2:54:d5:fb:e4:ae:a2:6e:fa:27:62:eb:0c:1c:43:b8:43:67:
fd:7f:af:17:59:8f:2d:e0:5c:70:c2:43:b9:8b:82:12:f9:1b:
2c:63:32:1b:2f:6c:ea:8d:9d:37:6f:d3:78:e2:14:b7:59:e3:
11:b5:d6:a7:37:a6:05:8a:93:d3:4f:f8:63:77:cb:c1:ec:18:
d1:06:df:52:94:20:38:43:63:4e:92:8c:f0:60:dc:cc:52:d0:
24:60:d0:eb:26:4a:ba:b4:88:9b:94:fb:f4:b6:e1:98:2f:af:
9c:25:ac:a1:01:e2:3c:ef:38:2d:ab:c8:b9:35:ac:3d:fd:a3:
8a:0c:6e:d5:e6:89:6e:b2:42:cd:a7:77:e3:34:bc:59:6e:60:
97:83:63:75:a7:86:49:77:aa:9f:25:97:1f:a6:2b:5f:e8:f0:
2d:98:14:1b:e9:b6:6c:4e:de:9b:f8:7e:9c:c7:07:19:1f:95:
3a:b2:10:fb:0f:90:b1:30:27:06:51:3b:3b:3b:e2:ab:af:4d:
f3:a5:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:02:33 2024 by rpki-client on console-fra.rpki-client.org