Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MI5nWwymMnhXhB06GKauybwDqac.roa
File: MI5nWwymMnhXhB06GKauybwDqac.roa (raw, json)
Hash identifier: UckvXWNc4fNHkdGTDG8rCHnW2sU5ngGVEHsBSDa53nI=
Subject key identifier: 30:8E:67:5B:0C:A6:32:78:57:84:1D:3A:18:A6:AE:C9:BC:03:A9:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190A5CD713D3B50FCCDC21E09AA89C11CA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MI5nWwymMnhXhB06GKauybwDqac.roa
Signing time: Fri 12 Jul 2024 07:17:02 +0000
ROA not before: Fri 12 Jul 2024 07:17:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29030
IP address blocks: 31.13.200.0/21 maxlen: 21
31.13.242.0/23 maxlen: 23
87.121.65.0/24 maxlen: 24
94.156.20.0/22 maxlen: 22
94.156.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:cd:71:3d:3b:50:fc:cd:c2:1e:09:aa:89:c1:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 12 07:17:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308e675b0ca6327857841d3a18a6aec9bc03a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:9a:90:87:36:85:3d:b8:6f:e3:15:b0:d2:
f4:27:6e:a6:69:06:99:4d:93:50:24:08:5e:05:6e:
fb:39:66:07:f3:57:cd:6e:e5:48:88:3f:07:92:9f:
35:b9:7a:39:0d:7d:28:6c:51:8d:98:11:12:f2:07:
b4:fe:48:ad:82:72:f5:d9:3a:64:f7:cb:4b:93:d7:
8c:26:07:44:dc:10:f6:0b:f3:07:15:60:cf:31:b0:
53:73:0c:4a:71:5b:72:2a:d4:f5:0e:22:04:38:6d:
ad:c6:37:04:ad:6c:4d:3a:d6:bd:97:77:3f:a8:9c:
8d:1d:7a:f2:c7:1c:c9:57:27:59:73:48:42:e0:9f:
86:01:82:df:4e:7f:c1:aa:6d:4c:49:31:e3:21:b0:
ac:7c:62:08:94:71:3c:c0:0d:36:d3:b9:5f:cc:1b:
cb:80:b1:57:29:4f:56:5e:9c:10:a1:69:1f:46:6f:
92:44:5d:59:73:86:74:69:98:60:51:cf:57:87:75:
54:47:76:c4:89:ca:8c:f3:b5:ab:bf:4f:fc:c8:dc:
2c:65:aa:b5:3d:4f:00:b1:78:a9:56:78:f2:3f:10:
8c:3a:7c:5f:6c:a6:9a:3e:77:e3:1a:ce:13:31:4d:
e9:a4:9f:31:d5:9f:f8:b0:9e:c5:4a:a2:eb:09:df:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:67:5B:0C:A6:32:78:57:84:1D:3A:18:A6:AE:C9:BC:03:A9:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MI5nWwymMnhXhB06GKauybwDqac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.200.0/21
31.13.242.0/23
87.121.65.0/24
94.156.20.0/22
94.156.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:de:6c:65:e0:fe:43:61:fe:a2:dc:db:10:1a:5c:6c:ed:0b:
68:64:64:ee:ea:f5:e5:0f:c8:47:ae:c7:0d:11:5c:9e:88:17:
5e:0e:7e:e6:bc:94:19:b7:74:69:78:9a:b3:fb:e5:79:db:0f:
ba:ad:d4:0e:94:70:04:64:49:8f:2e:e2:46:56:63:7f:89:7c:
c7:d4:44:90:f7:ec:f1:56:fd:e4:15:6b:c3:93:08:1e:7d:cb:
dd:b7:d2:08:33:26:04:a1:e8:ef:fd:29:88:07:82:ba:bd:5d:
78:31:e7:67:d2:f0:b6:0d:c8:0e:46:95:0c:88:8a:e9:20:c2:
4d:a2:4f:3a:96:fb:02:e2:96:00:30:a1:b4:6b:e9:de:bc:d2:
83:22:48:b4:9f:75:c5:06:3f:4b:c0:cc:91:ae:aa:9c:9c:db:
b9:8a:6c:97:91:00:8a:26:9e:c4:df:f6:f0:c8:52:5b:e2:a7:
f3:1c:d7:29:8f:a1:d2:f0:23:2c:0f:ad:10:c1:3c:0d:0e:6c:
97:4d:a4:c6:0c:ff:d7:70:f0:1e:a1:9e:8f:f9:7b:2d:a5:c9:
c2:99:1d:cb:57:24:cd:3a:d9:82:18:a5:5e:b4:99:cc:9b:6f:
b2:e1:b8:e3:36:94:42:3d:b7:26:60:f8:71:91:fb:fc:ea:69:
c3:a3:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:56 2024 by rpki-client on console-fra.rpki-client.org