Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MzZJToVxau_REYfsZFxgvdw13F4.roa
File: MzZJToVxau_REYfsZFxgvdw13F4.roa (raw, json)
Hash identifier: CZY8J+PUey4OH0dmKh9Ue5dSN2i8QOqOYbh1o8MmSoE=
Subject key identifier: 33:36:49:4E:85:71:6A:EF:D1:11:87:EC:64:5C:60:BD:DC:35:DC:5E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7F96612FE76D30001AF63493EC52851F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MzZJToVxau_REYfsZFxgvdw13F4.roa
Signing time: Wed 27 Mar 2024 11:05:45 +0000
ROA not before: Wed 27 Mar 2024 11:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12400
IP address blocks: 2.22.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:96:61:2f:e7:6d:30:00:1a:f6:34:93:ec:52:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 27 11:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3336494e85716aefd11187ec645c60bddc35dc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:65:78:ed:79:9c:3c:5d:fc:ce:c0:a1:42:
06:5f:5e:92:6d:33:f1:ff:f4:eb:10:11:65:4c:ba:
e4:55:44:e9:30:c3:5b:72:86:ff:ed:e3:91:bb:4d:
a3:a8:d4:a5:17:a8:5e:af:87:61:7c:a5:b7:25:ae:
40:3b:70:d5:fb:79:ae:fe:91:12:67:ed:c5:31:4f:
5d:82:2d:d1:88:34:cc:6e:d2:d0:a8:7a:d5:60:ea:
a8:64:70:3d:2b:72:5d:3e:e2:c0:85:db:00:b0:0e:
07:30:b0:07:3e:11:65:d4:54:bd:ff:0b:49:8e:b5:
b8:a5:3d:2d:29:e9:46:90:88:9b:7d:c4:5e:96:c4:
ca:70:60:c3:66:a2:b4:10:d2:30:f3:53:1c:48:fd:
f8:b1:7b:cf:1c:e0:d4:80:46:5e:c7:e6:50:c9:cb:
00:e9:0a:80:34:ef:a8:dd:ca:bb:2d:65:c3:c5:a8:
d5:db:8f:26:54:aa:18:92:8c:9f:0d:91:fb:18:bf:
e0:b0:96:cf:51:ba:28:f4:0c:b8:a9:e6:84:7e:28:
eb:a7:a0:da:9e:56:34:7f:5c:43:4e:b6:1d:f5:6a:
e1:6b:2b:a7:a4:96:4d:b1:98:d9:02:21:2a:a0:1a:
5c:71:05:20:73:55:ad:4b:6a:86:15:93:ce:1b:8c:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:49:4E:85:71:6A:EF:D1:11:87:EC:64:5C:60:BD:DC:35:DC:5E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/MzZJToVxau_REYfsZFxgvdw13F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.22.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b3:1e:f4:78:6d:f7:88:f8:58:e2:fd:58:f1:99:05:19:5a:
cd:10:f5:e3:df:61:75:ae:96:00:09:d4:22:fd:8e:a9:7d:4f:
d2:93:28:b9:ea:b1:de:34:8d:b8:8b:d4:5c:35:8a:62:e7:70:
46:7b:80:21:99:29:a8:af:03:be:1d:2a:06:32:84:9f:d1:70:
38:c0:8f:28:76:21:b7:61:3b:e0:ea:6f:6a:da:e0:05:e9:f6:
00:70:94:56:6d:c6:25:59:d7:f0:9d:58:25:c7:b0:2f:00:57:
09:30:21:20:58:cc:31:8a:08:11:e8:05:e4:4f:56:69:84:4d:
ab:5e:79:69:45:1d:2f:a7:32:5d:7d:31:4f:47:c1:2e:5b:9a:
f3:eb:b9:1a:b0:79:b5:78:3a:8e:9e:7b:1f:a2:da:8f:e8:bf:
ca:d8:4f:e6:dd:c8:f7:d2:b2:0b:88:a9:1d:14:41:6d:a5:6f:
bc:a9:84:b0:0c:bb:f0:7d:f8:2b:54:39:cc:dc:3f:6d:7b:d4:
3a:92:0a:7d:df:1e:4d:71:0a:cb:e7:72:6f:f4:ee:0e:15:0c:
4d:0a:3d:8a:f5:fb:98:f3:04:a0:a3:6b:28:d0:e0:4b:7a:16:
93:bf:c7:15:34:8c:20:69:0c:32:8f:f8:dd:2d:c7:eb:32:21:
5f:fb:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:34:30 2024 by rpki-client on console-ams.rpki-client.org