Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/M2PS_M8K4cJPfKnh5uOSkIkD8bw.roa
File: M2PS_M8K4cJPfKnh5uOSkIkD8bw.roa (raw, json)
Hash identifier: gaswQmAOk3xQp1JUWYtXPODa8k/2OIuF247c2ywJgII=
Subject key identifier: 33:63:D2:FC:CF:0A:E1:C2:4F:7C:A9:E1:E6:E3:92:90:89:03:F1:BC
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 01900BD2FAA20B343B006D9283D234AA8C3C
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/M2PS_M8K4cJPfKnh5uOSkIkD8bw.roa
Signing time: Wed 12 Jun 2024 09:41:34 +0000
ROA not before: Wed 12 Jun 2024 09:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57255
IP address blocks: 45.88.4.0/24 maxlen: 24
91.230.156.0/24 maxlen: 24
2a0e:f300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:d2:fa:a2:0b:34:3b:00:6d:92:83:d2:34:aa:8c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jun 12 09:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3363d2fccf0ae1c24f7ca9e1e6e392908903f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:92:b1:18:84:99:e8:70:db:14:1f:05:22:
5b:2e:97:21:b3:70:ce:a0:8c:4d:a1:71:d9:8e:0e:
4e:ed:4f:cc:0f:ed:d8:66:cc:dc:43:b7:5e:7e:f4:
0a:bf:a8:d8:e7:92:58:e8:8e:0f:aa:76:f5:fd:c8:
45:ed:7f:c6:3b:85:1d:11:05:e2:63:c3:7a:21:18:
db:58:78:3c:a5:ea:c1:4b:c5:d4:12:8b:a6:1e:9b:
d4:b9:da:82:c3:96:a1:19:ca:d5:3a:bb:9a:8e:19:
83:42:ef:36:2a:ba:a3:d3:6b:e5:f3:84:f4:dd:6b:
69:dd:fc:6d:b6:bf:12:a9:1e:77:cb:6b:00:e0:c0:
d6:ad:2a:ff:31:6e:9f:0c:8e:1b:6f:42:f9:19:f2:
a8:e6:a1:99:72:24:e5:4a:d2:82:e4:ab:e5:d4:23:
be:4a:c0:f1:43:e7:67:98:1f:82:d0:eb:f4:0e:26:
14:5c:7f:88:af:93:13:31:87:92:b3:2d:7a:cf:25:
6e:a3:2e:14:db:1f:8a:f0:9a:74:f3:35:09:27:ed:
5c:d2:ce:fc:b2:48:49:1e:ee:2b:49:f0:a1:78:aa:
d4:bd:82:d0:76:61:44:4c:8e:66:87:29:5c:19:0a:
a7:65:8e:df:27:3e:03:cf:2a:c5:d8:6d:0b:74:b8:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:D2:FC:CF:0A:E1:C2:4F:7C:A9:E1:E6:E3:92:90:89:03:F1:BC
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/M2PS_M8K4cJPfKnh5uOSkIkD8bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
91.230.156.0/24
IPv6:
2a0e:f300::/29
Signature Algorithm: sha256WithRSAEncryption
95:1a:c4:46:09:99:a5:09:2f:09:15:16:58:ce:07:d3:c8:f7:
c2:60:ca:64:ad:01:da:92:14:16:71:ec:18:95:4f:80:42:d9:
f4:07:91:40:99:6e:23:fa:66:94:45:14:7c:a0:98:69:0b:32:
20:6b:9a:20:31:6f:e9:9f:ae:84:cc:6d:f1:3f:f6:af:e9:dc:
51:95:51:99:21:75:68:44:96:97:f5:58:b1:29:68:4e:2f:ee:
15:71:9b:41:46:32:cf:6c:65:e2:9c:ca:90:9e:e9:80:c5:b3:
10:90:eb:09:27:de:6a:c9:a6:bc:7d:c2:2f:4e:9f:73:9d:69:
7d:91:3a:1b:ba:75:fd:fc:6c:c8:09:c0:51:c8:60:73:7d:e1:
3b:83:f9:b4:47:59:78:b2:a6:57:0a:4d:47:38:b5:30:c2:27:
1c:59:dc:01:fd:03:bd:a5:e9:c8:8f:9b:6b:de:07:08:e4:86:
e7:ae:87:a2:04:6f:e0:db:36:3d:45:08:32:79:38:2a:db:5c:
04:b8:ff:a3:8c:82:49:21:4a:d1:1d:20:92:a6:5a:8e:50:e2:
1a:5b:98:5c:10:de:44:fd:e9:8f:c5:13:1d:a6:b8:a2:6a:4f:
bb:bc:3c:a1:d3:6a:5c:ba:63:3e:37:a8:2b:fa:11:72:cf:7c:
04:64:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:56 2024 by rpki-client on console-fra.rpki-client.org