Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MEYU6Z39_vjE5BthGBCjxLiZpmY.roa
File: MEYU6Z39_vjE5BthGBCjxLiZpmY.roa (raw, json)
Hash identifier: Mwi4ph1gdM0brxLdSYsmCWL1z+DyP6+IF6ArNuWQMaA=
Subject key identifier: 30:46:14:E9:9D:FD:FE:F8:C4:E4:1B:61:18:10:A3:C4:B8:99:A6:66
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 018FBEF5ADC45E3C08E302E1A0E7E60A89A7
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MEYU6Z39_vjE5BthGBCjxLiZpmY.roa
Signing time: Tue 28 May 2024 11:28:42 +0000
ROA not before: Tue 28 May 2024 11:28:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140224
IP address blocks: 185.238.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:f5:ad:c4:5e:3c:08:e3:02:e1:a0:e7:e6:0a:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: May 28 11:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304614e99dfdfef8c4e41b611810a3c4b899a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:9b:74:ca:e2:14:9d:fd:4f:f4:78:29:5c:
ac:f3:cb:07:d5:8a:ce:16:6a:d8:bb:c7:ff:d8:bb:
2e:57:47:0f:58:0a:33:27:11:2f:a7:2d:32:8a:3d:
5a:4f:13:36:a3:0b:a0:ba:88:a8:7b:d4:aa:82:a8:
5c:a0:f3:63:82:88:51:86:4f:ab:39:9f:ad:1f:7d:
81:56:73:23:b1:df:a1:49:62:e7:4b:94:36:fd:0d:
95:a6:09:59:91:36:15:d5:d3:ac:fd:1b:2c:8c:7d:
35:4a:a3:8b:be:71:f8:05:a9:d3:9c:f8:e3:d4:d6:
2f:17:72:23:e8:54:3e:b0:5d:09:f4:2b:cb:0e:a5:
c6:c1:af:d8:70:00:87:2a:f4:ac:46:6b:9f:04:a7:
27:27:fa:d1:b0:49:82:7c:63:78:1e:c3:24:f2:b5:
6d:7c:22:59:b0:fe:db:63:2d:30:a7:e1:64:91:57:
64:cf:1c:0e:67:47:2d:b2:17:5c:5c:6c:25:2c:56:
0d:55:79:10:98:41:05:59:6b:46:1e:4f:f9:89:1f:
50:c6:7e:2c:72:75:79:42:11:08:48:29:94:54:fa:
25:0a:78:e8:1f:08:17:2e:bf:71:a1:f0:05:10:02:
98:38:76:be:d2:6c:2f:e9:93:eb:43:a4:b5:fd:e6:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:14:E9:9D:FD:FE:F8:C4:E4:1B:61:18:10:A3:C4:B8:99:A6:66
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MEYU6Z39_vjE5BthGBCjxLiZpmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ba:57:f8:e0:92:a3:54:eb:1b:ea:03:c5:49:e1:f5:d7:22:
82:78:3a:2b:66:2d:00:4a:c1:81:d4:32:ae:6a:60:46:0b:ec:
90:51:ca:9a:e9:d9:3d:1e:91:d3:1e:ea:c2:96:1b:2d:cd:6b:
79:36:58:2e:9b:ca:2e:95:28:5d:62:c0:f3:34:50:cd:11:70:
33:77:78:63:d4:b9:eb:34:df:cb:09:8d:17:dc:90:ca:9a:0b:
d4:b9:91:3d:55:81:a1:49:32:9b:52:45:e2:e2:89:6e:7c:a6:
43:9f:6b:c6:8c:51:87:a6:96:39:ab:15:2d:15:1e:47:25:f7:
b4:93:9b:7a:ba:1f:67:8b:1a:ec:5c:76:4e:75:e2:f4:5a:96:
05:81:9d:87:50:16:3e:4a:23:ad:43:da:b1:1c:4d:ee:df:d6:
b7:34:15:16:f5:8a:b3:87:41:05:d0:75:fb:63:6e:1d:5f:e0:
f0:fd:94:76:c4:fd:57:2e:54:18:06:ae:cc:cd:0f:51:e9:52:
90:83:b4:b0:4a:f6:88:17:02:17:f6:5a:98:d8:1b:cd:52:c4:
c4:d5:4f:52:84:79:c4:d0:c3:7a:cb:de:94:6a:7e:55:e7:c9:
27:22:a2:70:3c:57:73:c4:30:2b:4e:2b:5e:dc:6f:b9:9e:18:
d1:04:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:04:30 2024 by rpki-client on console-fra.rpki-client.org