Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MjtLuIpMkYnQtrP8OuttPUMLQVo.roa
File: MjtLuIpMkYnQtrP8OuttPUMLQVo.roa (raw, json)
Hash identifier: ifZ/bfx29+VM1RbG+ec5tk7bxEf1gGp6E+KEp69VY90=
Subject key identifier: 32:3B:4B:B8:8A:4C:91:89:D0:B6:B3:FC:3A:EB:6D:3D:43:0B:41:5A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018F3EE6AFB5653D6E85B20C3B7B4115C9D2
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MjtLuIpMkYnQtrP8OuttPUMLQVo.roa
Signing time: Fri 03 May 2024 14:40:56 +0000
ROA not before: Fri 03 May 2024 14:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 5.1.81.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
178.251.228.0/24 maxlen: 32
2a00:f826:3::/48 maxlen: 48
2a01:363::/32 maxlen: 32
2a01:364::/32 maxlen: 32
2a01:365::/32 maxlen: 32
2a01:366::/32 maxlen: 32
2a01:367::/32 maxlen: 32
2a01:367:c204::/48 maxlen: 48
2a01:367:cff3::/48 maxlen: 48
2a01:367:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:e6:af:b5:65:3d:6e:85:b2:0c:3b:7b:41:15:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: May 3 14:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=323b4bb88a4c9189d0b6b3fc3aeb6d3d430b415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:35:75:51:a8:e5:f1:96:b3:f7:40:91:07:
92:e0:f9:27:f9:b6:ed:ba:3c:bc:a4:b3:2c:87:27:
b0:59:28:f1:15:c6:5e:9c:1f:e3:3a:02:b1:98:79:
74:b7:0e:56:d7:bc:03:9f:9c:a3:a9:1c:a8:d8:5c:
b9:93:04:01:ea:37:a9:5a:9f:d0:1e:a5:9d:cf:5c:
6a:4f:97:dc:da:74:b1:53:2c:d2:b8:5e:22:e1:5f:
71:e8:e9:42:ce:bf:f4:93:58:cf:69:66:73:a5:52:
c5:be:99:3b:52:a9:74:70:18:44:6c:7c:92:fc:30:
18:cb:25:b4:e9:28:45:f7:97:70:a7:f0:15:1a:b6:
2f:84:7d:07:88:6b:ba:19:1d:9f:5a:9f:dc:c8:a5:
bb:27:80:b5:3a:ba:4d:24:3b:56:55:bc:bd:84:1e:
ab:a1:a7:71:d7:1a:c9:03:05:44:6d:b1:0d:eb:56:
c5:d8:14:0c:d6:3b:74:21:fb:16:88:b2:b7:32:9c:
3d:1c:14:e0:8a:62:4f:88:aa:9a:18:04:ca:b3:87:
bb:04:33:0b:82:14:3d:1a:12:8d:66:96:19:37:6b:
4d:aa:9f:e5:cf:cd:2d:4e:3a:10:67:a9:e0:43:06:
f0:e8:d7:4a:34:91:ec:cd:e2:b5:1b:f6:dc:80:3c:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:4B:B8:8A:4C:91:89:D0:B6:B3:FC:3A:EB:6D:3D:43:0B:41:5A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/MjtLuIpMkYnQtrP8OuttPUMLQVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.81.0/24
178.251.228.0/23
IPv6:
2a00:f826:3::/48
2a01:363::-2a01:367:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:c8:79:b1:b5:48:72:49:ff:61:e1:e3:6a:f9:08:3c:5f:22:
7d:eb:9b:23:fd:64:cf:8d:f0:ad:00:2f:66:76:4b:05:3f:4a:
b5:f6:48:e1:83:28:40:3c:db:b7:b9:7e:b4:14:86:d1:af:10:
c7:d9:76:1a:ec:f0:97:4c:a8:4c:06:d3:f3:c3:ac:0d:ec:57:
52:f7:88:de:15:83:a0:7c:43:49:19:bf:36:5f:42:6f:1d:53:
4f:32:38:e4:32:3a:30:ee:28:f6:ce:e8:c8:4f:07:b7:74:37:
3e:82:d5:03:fb:39:64:61:cf:52:26:56:a8:67:47:7d:ea:5b:
6e:9f:9a:20:f6:8e:2e:29:e4:5f:df:e6:c9:6c:4d:ec:7c:e5:
05:87:3d:fe:dc:07:0e:55:d9:25:b3:d4:f4:63:a8:3d:ea:15:
58:0e:a7:b3:36:d8:63:35:b5:9d:43:01:85:9a:5a:1a:ea:13:
5f:60:c2:a6:c9:db:b1:19:14:74:15:3e:23:42:96:65:50:42:
9e:74:47:48:42:29:56:11:6b:70:e9:18:82:89:c7:7f:f4:a4:
cb:29:4d:b5:ef:7c:87:36:38:d2:51:e2:63:e7:b4:32:30:16:
7a:6f:a1:ff:e5:99:a4:19:65:a3:9b:d6:85:49:4c:07:44:a8:
47:8a:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 21:16:30 2024 by rpki-client on console-ams.rpki-client.org