Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mp2g6Amy-hnnpIHUWHoa2eTDV6Y.roa
File: mp2g6Amy-hnnpIHUWHoa2eTDV6Y.roa (raw, json)
Hash identifier: J7E9MpVpKfdVAzXKfYJV3PKVAaJ9ipbNnIruXXRfJIY=
Subject key identifier: 9A:9D:A0:E8:09:B2:FA:19:E7:A4:81:D4:58:7A:1A:D9:E4:C3:57:A6
Certificate issuer: /CN=98ccb184d128384e4f767d85258e0dea73f18e43
Certificate serial: 018CC86F56F00FB3273CDA28551C922A9B58
Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mp2g6Amy-hnnpIHUWHoa2eTDV6Y.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49580
IP address blocks: 193.33.22.0/24 maxlen: 24
193.33.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:56:f0:0f:b3:27:3c:da:28:55:1c:92:2a:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a9da0e809b2fa19e7a481d4587a1ad9e4c357a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:d4:76:62:ad:00:3c:4e:1a:03:3b:dd:c6:
e1:d3:a2:09:6a:ae:8b:25:68:7d:0a:0a:98:45:7f:
d6:e7:3a:c6:12:79:b8:40:27:e3:28:2a:bc:27:02:
50:44:22:01:74:96:bc:f4:32:ec:e5:98:0f:12:40:
16:19:64:aa:45:e3:c5:fc:74:bb:68:c6:3b:ac:51:
16:bd:c8:44:0c:80:ea:c5:1e:7d:40:1a:bd:40:55:
6d:93:c5:b9:ea:ad:2a:30:a0:6c:31:51:8d:be:4b:
6b:84:2c:e6:83:98:be:27:2b:61:4d:2b:e6:02:88:
93:62:2c:b0:00:79:1d:e5:f0:f2:15:64:a9:41:4f:
22:80:5d:ba:81:8c:c8:11:60:a0:a3:34:61:17:bf:
08:82:ee:84:7b:96:39:10:7c:51:db:67:c9:bb:dc:
61:85:a7:06:d3:38:03:36:b9:fd:55:ff:25:a2:af:
a2:eb:d4:d9:be:2f:73:d8:9a:f9:40:6e:64:3a:ef:
e1:5b:a1:ca:02:23:a0:3d:61:30:1d:dd:d9:2c:2c:
0a:79:08:ef:2f:46:3f:6a:ec:03:dd:ff:67:16:1d:
54:12:a1:f6:bb:15:10:5e:58:1a:7b:e1:e5:28:14:
b3:0f:d1:52:2b:d2:06:b7:af:24:94:6b:eb:6f:4b:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:A0:E8:09:B2:FA:19:E7:A4:81:D4:58:7A:1A:D9:E4:C3:57:A6
X509v3 Authority Key Identifier:
keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mp2g6Amy-hnnpIHUWHoa2eTDV6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:ef:53:ec:37:42:a6:d0:08:0f:63:cd:24:a5:d6:04:a5:61:
f5:1a:ec:36:fe:9d:b2:33:ee:f7:5e:e7:2f:77:ee:ee:d0:d4:
55:72:78:1a:90:40:97:0d:16:33:fe:44:40:af:55:ec:48:ba:
57:a7:3d:94:f5:2f:98:3a:46:33:0e:5e:17:b7:5a:00:f1:9b:
ba:fd:27:1b:0b:fe:97:9c:5e:fa:c1:bc:b6:58:1f:a7:2b:c7:
cd:db:06:00:40:4b:32:d0:c9:e3:0e:71:c1:68:0d:1a:74:dd:
8a:e1:b8:7e:21:8c:93:6f:f6:87:d4:46:fa:68:69:89:5a:46:
e6:e2:2f:9a:48:72:1a:30:4f:16:a5:fc:ab:ff:b0:7e:31:14:
21:be:ea:36:74:d7:e3:dd:78:a9:cf:0d:c4:bc:8a:10:d5:c9:
39:c8:a6:b8:9d:47:cf:6e:07:8a:57:97:99:9c:4e:33:72:d9:
39:c1:29:37:5e:80:56:75:67:6c:35:04:24:01:b8:d0:57:70:
66:cd:d5:97:c8:9f:58:4d:e1:ba:5a:a4:b3:95:2a:09:a8:b7:
50:aa:82:b8:ee:d4:64:bc:0c:8a:d8:3e:6a:60:b8:c2:3a:c1:
41:fc:1c:a4:b3:aa:c0:48:81:d7:51:51:90:93:69:d3:6a:60:
f1:5e:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:03:27 2024 by rpki-client on console-ams.rpki-client.org