Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/MIloPFRdAfZQ8Tk4Gn9Ro7frzTI.roa
File: MIloPFRdAfZQ8Tk4Gn9Ro7frzTI.roa (raw, json)
Hash identifier: +WhpKzrq8LmO7rJGs1yEm0jMg9HHSaQ2XDZTLocRabg=
Subject key identifier: 30:89:68:3C:54:5D:01:F6:50:F1:39:38:1A:7F:51:A3:B7:EB:CD:32
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 018CC9BBFC76F5BA2D5C58BFEBB810B94E36
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/MIloPFRdAfZQ8Tk4Gn9Ro7frzTI.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50369
IP address blocks: 195.200.86.0/23 maxlen: 23
89.46.168.0/22 maxlen: 22
89.46.172.0/22 maxlen: 22
185.135.64.0/24 maxlen: 24
194.150.216.0/23 maxlen: 23
185.135.66.0/23 maxlen: 23
185.135.65.0/24 maxlen: 24
188.241.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fc:76:f5:ba:2d:5c:58:bf:eb:b8:10:b9:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3089683c545d01f650f139381a7f51a3b7ebcd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:02:a2:bc:83:39:c5:5f:50:07:62:3d:c0:
78:b2:7d:6a:9a:bf:da:57:a6:08:11:f7:de:f7:00:
63:e3:1f:cb:5e:5e:8e:67:d2:b3:8b:87:13:27:61:
09:f0:e8:68:7c:ae:1c:53:29:4f:ac:94:41:c6:67:
51:0f:99:ed:17:b8:d2:fb:ce:8e:45:58:60:3d:d4:
f1:d4:61:01:34:a3:e6:3f:91:65:93:d9:37:2a:11:
3a:81:37:0b:2b:89:0d:77:4f:86:2e:21:f3:68:43:
b2:37:a8:bd:d5:1f:18:e6:8a:34:76:a5:6b:12:36:
c2:91:cf:0e:3e:24:69:b7:e2:f5:81:1c:5b:b6:a0:
42:de:7c:3f:9b:7b:18:97:97:45:b8:b3:55:52:67:
3b:26:00:41:08:9a:67:25:11:6c:de:44:1d:8e:e4:
56:dc:8e:f2:d8:0a:ac:d3:84:df:60:38:80:7a:b3:
a8:53:1f:41:87:fa:30:2d:2f:10:9c:19:8d:9f:f8:
16:55:8c:01:2c:9c:97:4a:40:c1:39:92:d5:4c:63:
87:8f:61:af:6f:45:e0:b5:a5:26:69:34:58:e5:39:
96:4e:84:33:3b:95:f9:c1:45:1d:f1:23:14:26:20:
91:24:f9:34:62:a1:c3:03:b1:64:5b:7f:58:48:0b:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:68:3C:54:5D:01:F6:50:F1:39:38:1A:7F:51:A3:B7:EB:CD:32
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/MIloPFRdAfZQ8Tk4Gn9Ro7frzTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.168.0/21
185.135.64.0/22
188.241.210.0/24
194.150.216.0/23
195.200.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e3:81:63:be:b4:82:05:8b:33:3a:4b:29:00:8f:4b:c2:ab:
6f:46:cf:b1:62:59:9f:75:5e:85:49:7d:00:0a:66:81:1f:0b:
03:27:58:c3:77:70:10:38:79:a2:1a:f9:15:e2:30:c3:22:d7:
9f:34:bb:45:27:6d:12:e1:c4:5f:fc:8d:5e:f2:b3:01:3d:d3:
f2:44:32:ed:12:cb:c7:4c:23:1d:9d:56:4a:df:21:8c:bc:ce:
47:1c:e6:5d:80:d3:d9:91:35:89:18:4e:35:41:c0:2d:0e:b9:
35:9d:a1:57:7a:20:04:5f:67:9d:b9:70:c8:30:a4:12:43:da:
7f:e3:5d:9f:d2:d4:eb:38:53:03:48:c0:ac:79:e0:ab:c3:34:
eb:d8:9b:2e:10:8d:21:92:c2:aa:61:bf:06:52:ca:4f:f5:ac:
a2:66:76:72:e6:08:3a:22:1f:8f:b4:ba:d5:13:4c:b9:0b:67:
60:dc:85:55:5f:94:60:9f:46:d5:e0:d6:06:6e:6a:b4:a9:9b:
e9:28:d1:56:72:66:99:f6:6d:38:87:88:d7:4e:38:8b:c9:85:
98:1b:6a:ca:92:f6:8a:b3:46:5d:63:6b:7e:e7:02:93:45:02:
bb:87:0a:5d:9a:fe:43:bd:67:d6:c0:18:7a:c9:65:17:07:7a:
5a:ca:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:41 2024 by rpki-client on console-fra.rpki-client.org