Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mevsoYLQ569uHQjejv1onohxY2c.roa
File: mevsoYLQ569uHQjejv1onohxY2c.roa (raw, json)
Hash identifier: P8Hh0mpfQLdQr0SzkkskmkKEM7GbtDewduGKioQ6Sss=
Subject key identifier: 99:EB:EC:A1:82:D0:E7:AF:6E:1D:08:DE:8E:FD:68:9E:88:71:63:67
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 018CC42563B6CCCF19F364A317C891CDE001
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mevsoYLQ569uHQjejv1onohxY2c.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 193.176.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:b6:cc:cf:19:f3:64:a3:17:c8:91:cd:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ebeca182d0e7af6e1d08de8efd689e88716367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:8c:e9:0e:fd:be:58:b9:a2:4a:97:73:6f:
41:6d:5d:8e:a0:8e:f0:83:5f:80:a9:84:df:d9:b1:
49:d0:5e:c7:d9:a2:3d:0a:94:d4:61:47:37:d3:49:
b3:42:10:04:12:13:08:b1:56:fd:0e:d5:d2:b9:dd:
ce:04:17:56:c3:52:89:ed:6c:38:bb:62:50:00:0e:
8b:c4:1d:65:98:3e:8b:04:8c:8b:f2:5e:4c:16:7e:
23:08:41:ad:5b:04:e3:f8:a4:9f:64:7c:15:91:b9:
f4:fb:f7:69:15:8e:ff:5e:68:2e:a9:08:5a:7c:e0:
b6:44:a6:53:38:bb:19:59:6a:e8:c6:74:93:58:98:
82:25:4b:c1:19:35:91:b2:ec:82:03:4f:2f:11:0e:
3f:68:cf:c2:1d:d9:fa:78:6d:44:3d:64:80:59:e2:
ac:da:9d:1d:a1:9a:0b:b2:f7:b2:29:2e:19:ee:16:
67:5b:86:22:0b:1b:37:8e:34:e8:fa:65:66:f4:de:
d9:45:ba:f3:d4:27:a2:a5:43:5d:1f:84:93:cf:31:
c0:e6:11:7f:7a:c2:fe:1b:8d:29:26:a5:e4:36:40:
c6:46:55:11:43:1f:c5:95:63:59:1d:bc:31:56:ed:
f3:d3:ea:50:0c:6e:c0:da:d0:b8:1f:5f:d4:9e:af:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:EC:A1:82:D0:E7:AF:6E:1D:08:DE:8E:FD:68:9E:88:71:63:67
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/mevsoYLQ569uHQjejv1onohxY2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.136.0/21
Signature Algorithm: sha256WithRSAEncryption
53:ed:64:4c:74:e0:da:8c:9c:41:6b:d6:55:d5:93:c5:66:c1:
cc:6e:3b:d4:23:a9:ca:1a:eb:ce:af:4c:49:34:3c:73:18:4a:
16:81:f9:4b:8c:de:c7:5b:2a:00:5a:77:21:3f:51:8a:76:00:
98:bd:2d:eb:dd:75:48:65:7f:2f:31:e1:fa:4f:fd:7a:62:5a:
2f:32:99:21:64:11:0a:8f:2d:0a:40:ae:58:32:81:1f:4c:ff:
92:bb:8a:f6:34:d9:98:3c:d5:fe:af:aa:1f:3c:b0:d2:3e:cf:
45:34:d1:1b:67:d2:d4:8a:cc:d2:f3:28:46:91:af:74:4d:48:
2d:04:94:a1:c7:7a:68:3f:f4:80:99:df:22:20:48:a8:1f:c2:
7c:66:ad:ac:9a:3c:23:e9:0e:e5:94:c4:10:78:69:55:3f:7a:
ce:60:f0:ec:8b:17:66:9e:b1:99:a5:77:d9:f6:41:f1:2e:93:
06:73:d7:15:2a:2a:7b:e9:bc:95:8a:0a:6f:f1:af:05:4e:5a:
27:a4:c9:1c:e1:25:a2:03:e0:2c:0f:59:f2:ab:33:e7:c2:53:
af:b8:38:e7:1f:72:08:d3:f0:7c:a8:5e:1d:f7:43:db:51:9d:
53:06:1d:04:01:a9:54:a9:99:d3:56:85:cf:7b:d0:76:f2:f1:
32:26:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:19:23 2024 by rpki-client on console-fra.rpki-client.org