Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MrJUvfCknioUtYi6wWdH7_rZvKc.roa
File: MrJUvfCknioUtYi6wWdH7_rZvKc.roa (raw, json)
Hash identifier: owciRMTW3yZrSWfgSafnWpabEdutBFSqlo8mR7rg+LY=
Subject key identifier: 32:B2:54:BD:F0:A4:9E:2A:14:B5:88:BA:C1:67:47:EF:FA:D9:BC:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EF663E72EC6357F42C25CF01473B78365
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MrJUvfCknioUtYi6wWdH7_rZvKc.roa
Signing time: Fri 19 Apr 2024 12:45:26 +0000
ROA not before: Fri 19 Apr 2024 12:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 87.121.38.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:63:e7:2e:c6:35:7f:42:c2:5c:f0:14:73:b7:83:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 12:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32b254bdf0a49e2a14b588bac16747effad9bca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:e7:10:42:5f:61:d1:35:2c:4a:52:a5:8f:
bd:d3:db:47:1c:96:96:a4:16:f6:6f:12:82:98:fc:
a1:30:6d:40:2c:60:a5:e3:2d:13:7d:b2:69:46:eb:
59:c4:1a:28:78:0a:23:7b:f6:3a:0b:c3:41:94:fa:
d4:76:b5:2e:16:94:17:41:ad:19:a1:38:75:6d:d7:
2d:7f:3d:27:ae:61:8f:5d:d0:ab:9e:21:28:a6:59:
fa:d1:59:e4:b8:4f:ae:3c:8d:c5:e6:f7:79:e5:49:
91:5a:c0:24:ee:86:45:cb:fd:dc:df:5a:43:cc:1c:
f7:01:60:e2:64:6b:56:9f:6e:e1:4c:05:62:d8:ad:
73:b1:06:16:a3:be:f9:0b:75:0f:e5:bf:d0:26:6e:
1b:35:82:31:b3:85:12:43:bb:22:07:c7:81:47:be:
0f:5a:f3:41:ea:8c:e4:82:69:32:18:cd:8f:d0:2c:
06:41:db:58:62:e1:c1:af:d7:46:a1:61:6f:28:bb:
63:a4:0c:b3:21:cb:01:72:bb:99:b2:6f:19:11:75:
8b:da:62:ff:26:34:d4:9f:80:b0:f3:2d:b8:a5:88:
88:71:f6:f8:b4:b4:a5:5a:19:ee:43:e6:01:d1:90:
d3:ac:fc:12:a3:34:b0:01:ee:eb:c4:63:de:a1:34:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:54:BD:F0:A4:9E:2A:14:B5:88:BA:C1:67:47:EF:FA:D9:BC:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MrJUvfCknioUtYi6wWdH7_rZvKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.38.0/24
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b2:45:39:ac:45:66:be:60:b0:a8:ae:cc:14:68:ac:d0:b5:
c8:f5:f6:e6:30:27:93:39:00:6e:ad:cf:ae:c4:cf:92:11:9a:
2b:9b:b4:8f:33:da:aa:3a:e1:78:b6:cb:88:03:ba:5d:b0:3c:
9a:a4:e8:a4:c3:5f:de:63:12:25:a2:53:6a:8c:ad:91:01:15:
69:83:8c:62:c3:9c:ad:41:e3:92:48:53:d4:db:8e:45:1f:d0:
9c:14:48:15:69:66:7f:35:a2:34:0c:6e:36:c0:ba:6c:12:53:
b9:7e:70:c1:9e:6c:d3:b1:7f:73:38:ad:62:8c:dc:1f:48:09:
d4:ea:48:81:79:ec:7d:9d:cf:1e:52:4a:c5:b3:d4:0f:53:a0:
ab:e0:13:03:26:25:52:a2:55:19:07:5f:72:28:d1:37:59:66:
7a:e9:7a:e6:f4:8a:ca:d9:f9:fc:23:fa:5b:27:22:45:2f:d3:
5e:ed:a1:a5:ee:a1:96:3f:26:bb:60:31:35:f0:d0:30:68:61:
7a:2e:aa:67:02:43:f9:76:24:47:ea:5b:f5:dc:4c:d0:d6:ad:
d2:45:d0:a1:f0:d9:ab:ca:0e:41:30:d6:0f:13:d2:5f:da:82:
7d:7d:e5:7f:f5:ce:b3:99:fc:e8:34:91:b5:18:a2:ad:a4:97:
1a:d7:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:48:04 2024 by rpki-client on console-ams.rpki-client.org