Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/mcc1sb9IxdbsFjtdxlnw4JKt7Eg.roa
File: mcc1sb9IxdbsFjtdxlnw4JKt7Eg.roa (raw, json)
Hash identifier: EvNyatMQ6X9zI1JE0AAp+3IciYX334q0dDS26MFes5o=
Subject key identifier: 99:C7:35:B1:BF:48:C5:D6:EC:16:3B:5D:C6:59:F0:E0:92:AD:EC:48
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 018CC56DEA763E0C98C27CE68493FBC51978
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/mcc1sb9IxdbsFjtdxlnw4JKt7Eg.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50349
IP address blocks: 93.190.36.0/22 maxlen: 22
91.214.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ea:76:3e:0c:98:c2:7c:e6:84:93:fb:c5:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99c735b1bf48c5d6ec163b5dc659f0e092adec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:63:8a:7b:fe:1f:cb:f3:7c:55:f1:0e:2e:
bd:22:5c:50:df:32:d6:5e:dc:b1:6d:99:85:a8:59:
6c:15:2c:4d:b1:12:5c:53:38:8e:a7:0a:63:a2:e0:
6d:98:2d:8b:2a:09:9a:40:ac:f5:b5:69:31:55:d9:
2f:40:a9:7b:72:36:78:bb:7f:3a:de:8b:0a:ab:73:
f6:80:46:c8:fc:2a:40:62:80:b7:10:fb:ce:a3:2c:
20:4b:b6:cc:aa:cc:34:93:50:06:69:ae:17:4f:19:
20:9f:52:2e:9c:e7:76:74:55:ee:3c:a1:02:21:82:
0a:63:08:c4:b3:a7:df:2f:e8:04:6c:47:72:14:87:
4c:55:ef:6d:3b:28:99:3f:67:bb:e5:87:bd:6e:99:
e8:8a:c7:e4:71:d0:77:ea:92:57:d2:d7:0c:8e:dc:
b0:fc:9f:6f:b3:e4:e6:db:dc:e2:43:09:1f:32:9b:
4c:cd:b4:59:e5:b3:cc:6c:57:a7:53:11:7f:5c:e7:
ab:1a:b4:96:4e:ee:b8:68:d3:c7:df:0f:51:57:78:
03:ca:13:bb:55:25:92:ea:0f:65:8f:20:c1:5d:d8:
a7:42:68:d6:44:c0:e9:8c:ab:5e:66:fa:f3:38:26:
74:a5:f5:69:33:55:66:e0:b4:2b:ee:58:ee:e4:1a:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:35:B1:BF:48:C5:D6:EC:16:3B:5D:C6:59:F0:E0:92:AD:EC:48
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/mcc1sb9IxdbsFjtdxlnw4JKt7Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.0.0/22
93.190.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:4f:88:d1:1d:6d:45:91:36:3d:e2:ba:49:6e:63:7c:57:cf:
73:d6:ad:e5:21:56:13:d7:9e:71:cd:c0:b6:5c:a3:dc:ca:9c:
d8:06:bb:17:6a:9a:1c:47:1c:7a:d0:78:39:8b:ff:3e:9e:a0:
d2:57:30:34:1e:a1:56:32:58:2a:b5:48:65:af:3c:0b:26:5f:
1e:03:f9:b8:13:56:06:02:5e:d7:ce:b3:c4:f7:bc:8a:7e:14:
ea:00:63:ce:bf:1e:0a:11:60:ff:0c:ae:69:6d:60:22:15:1c:
5d:eb:64:db:98:ad:ae:68:fc:55:07:2b:84:04:2f:1f:df:e9:
c4:cd:2f:7f:a9:e8:2c:a9:f4:f0:3f:5c:4d:22:ff:16:2b:c6:
44:97:3b:c8:17:7a:63:90:1c:4d:01:0b:ff:48:1a:93:43:3c:
8f:5d:c1:18:4b:ae:0b:d7:80:da:90:65:15:53:a0:2e:d1:76:
73:60:dd:89:f2:4f:f5:90:82:27:f2:29:84:e6:d2:ea:b3:39:
b9:d0:dc:63:d1:8e:29:95:f0:48:7d:98:a2:fd:b5:a4:f2:0e:
fa:46:b6:f3:e8:1e:20:c6:b3:de:31:5a:5f:4b:42:f2:db:ac:
40:11:88:0f:8c:af:9e:ec:8d:7f:38:3a:83:9f:40:29:b3:a8:
83:5d:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:01:10 2024 by rpki-client on console-fra.rpki-client.org