Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/mfgtK-3NFj7rHnv7PG-oRxfqPBI.roa
File: mfgtK-3NFj7rHnv7PG-oRxfqPBI.roa (raw, json)
Hash identifier: oJsU6jJzpLoZXSwDeUtzlQ60XVTIdKe0dfPYmDSzLVE=
Subject key identifier: 99:F8:2D:2B:ED:CD:16:3E:EB:1E:7B:FB:3C:6F:A8:47:17:EA:3C:12
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4B96B4519F8C5EBA65D9CDB76C15
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/mfgtK-3NFj7rHnv7PG-oRxfqPBI.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60040
IP address blocks: 194.226.174.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4b:96:b4:51:9f:8c:5e:ba:65:d9:cd:b7:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f82d2bedcd163eeb1e7bfb3c6fa84717ea3c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:a9:9c:ff:28:a5:c7:d6:09:b1:6d:f5:fc:
54:a9:cc:3e:4c:76:3b:3d:ef:ae:65:55:e7:2d:86:
8d:31:2e:4a:ba:c7:5a:fd:53:ad:f6:77:35:02:20:
67:9f:c0:8b:a2:0b:78:f1:e0:cf:2f:aa:6b:c6:e5:
be:0b:cd:03:ee:67:c1:5c:fc:35:d5:d4:ed:08:a0:
30:06:4d:46:17:38:73:59:71:ce:fc:1f:af:78:8e:
a5:7c:e6:80:e5:2d:5a:07:78:74:6d:4c:0f:62:0d:
c5:46:e2:ee:63:04:fb:d4:e3:1b:8f:ae:b4:9d:53:
8b:35:7b:8a:e6:01:84:1a:5e:ab:37:c1:65:c6:b8:
03:38:a4:56:b3:6a:a3:8b:bb:1d:92:a1:ef:61:32:
d7:de:70:02:82:af:c5:c0:62:a1:36:a8:53:95:40:
29:3e:ba:1d:91:83:ed:bc:1e:71:fa:68:46:03:ff:
ef:fa:e6:68:65:a1:03:99:49:b7:06:2c:29:11:80:
e9:3f:11:d2:ca:3f:4a:6a:15:d2:5f:eb:9f:13:97:
31:13:1e:1a:5e:3a:f4:cd:4f:4a:6d:a3:22:15:c8:
d1:26:8e:a0:b3:51:68:f9:9f:b5:61:16:c3:54:66:
c8:60:8e:7c:49:c0:63:96:22:ae:98:d2:a7:66:aa:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:2D:2B:ED:CD:16:3E:EB:1E:7B:FB:3C:6F:A8:47:17:EA:3C:12
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/mfgtK-3NFj7rHnv7PG-oRxfqPBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.174.0/24
Signature Algorithm: sha256WithRSAEncryption
77:30:2f:7d:b9:5e:fc:9e:80:58:d3:ba:c1:5e:12:82:92:41:
41:7b:6d:bb:25:3f:5f:fe:ff:5d:cf:9c:a9:f3:3a:2c:35:bd:
62:9b:0a:80:ce:8b:e6:21:a5:52:bf:2b:2e:0a:57:13:33:12:
cf:a9:4e:fc:59:e0:60:3c:da:bf:08:62:5f:ab:9a:65:81:71:
84:8d:a3:60:77:5a:25:f0:71:dc:65:7d:bc:1f:ba:22:f7:ea:
80:69:2f:a6:b3:05:ae:c8:96:79:16:6b:8f:4b:29:44:f8:05:
d6:be:04:9a:de:e3:b7:b4:06:23:3d:92:3e:bd:ee:f2:7a:83:
3d:5d:ef:7f:67:e8:22:fc:80:21:54:f1:c7:0f:68:b5:34:72:
78:04:a1:97:5f:89:88:d3:2d:3e:19:9f:cf:81:44:46:fb:cd:
24:e1:e7:e2:5f:93:61:7a:47:a2:8c:32:a0:5e:ac:6c:d7:a8:
dc:e6:ae:95:62:3d:a2:a8:6d:db:68:1a:0b:22:a8:10:fd:fa:
91:51:72:40:8c:d4:70:c4:92:42:c3:d3:1a:2b:e3:bd:92:3d:
2f:83:ed:f0:45:2a:a0:46:db:95:c3:22:1c:3d:fa:ee:0f:4c:
38:e4:f8:33:a2:38:7e:1d:eb:a2:8a:62:0a:e6:0b:08:78:e3:
7a:e9:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org