Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mk6wu-oyA3kEFBzFf2OyeWYtx0A.roa
File: mk6wu-oyA3kEFBzFf2OyeWYtx0A.roa (raw, json)
Hash identifier: Y1i5VaRmy0MjDXphcY5BZoqengQMP4oAsM6Iys9lTkQ=
Subject key identifier: 9A:4E:B0:BB:EA:32:03:79:04:14:1C:C5:7F:63:B2:79:66:2D:C7:40
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF97775A5F6284CB30052981E5131
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mk6wu-oyA3kEFBzFf2OyeWYtx0A.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211294
IP address blocks: 80.96.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f9:77:75:a5:f6:28:4c:b3:00:52:98:1e:51:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a4eb0bbea32037904141cc57f63b279662dc740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:4f:99:15:ca:9c:84:fd:7f:76:8b:c9:65:
f1:35:3c:ac:a7:e6:b0:dd:a3:45:17:f6:1a:b7:9e:
f9:80:0e:ac:39:23:fa:1a:cc:81:11:84:6b:92:a2:
83:c7:97:7f:46:1b:8a:57:af:65:13:f9:0b:10:8b:
1e:5d:fe:e4:3a:a8:71:48:bb:4d:24:b2:04:29:f8:
5a:0c:14:b5:09:b5:27:74:16:07:a5:b5:2a:6f:69:
9d:a8:48:7f:bc:29:85:92:11:24:aa:34:32:cd:9d:
28:16:7e:38:5c:43:45:91:39:96:3f:93:41:05:9c:
b5:a1:05:bf:d5:73:f3:d5:a6:fd:18:6d:d1:1e:9c:
66:fa:a7:fb:68:13:a7:17:d5:47:be:ae:bb:4c:bf:
2f:ae:ce:eb:de:aa:07:f0:b2:be:d7:d7:60:44:85:
9b:15:a1:ec:bb:b6:a1:1d:4e:c3:d1:29:b6:e4:18:
5f:cf:c9:50:72:01:53:e6:ad:70:ff:01:60:65:bc:
5f:2c:72:b8:05:a5:ca:a3:f7:69:24:d4:1c:d1:cd:
0d:8a:52:b8:3f:1c:4e:85:bb:0c:07:14:1e:83:b7:
6c:ee:b4:cf:a4:e0:f2:e8:99:58:8b:a6:73:87:c2:
ee:fe:25:9b:12:77:87:a7:48:df:14:c2:26:93:6d:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:B0:BB:EA:32:03:79:04:14:1C:C5:7F:63:B2:79:66:2D:C7:40
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mk6wu-oyA3kEFBzFf2OyeWYtx0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9c:8f:e1:b1:f5:38:d5:3a:e6:23:ab:14:9d:3c:76:3c:43:
f8:21:8f:40:19:0d:ba:25:63:05:33:95:ef:aa:0e:a9:d9:a0:
ed:bd:2a:bc:bf:9b:98:eb:5b:85:f7:62:bb:25:4c:3a:e7:51:
4a:5c:67:b4:9a:1b:fc:18:37:5e:74:24:80:33:30:34:a5:fd:
48:85:56:8e:f0:e6:03:fd:ef:ce:6e:c9:e7:b9:6c:d6:a3:24:
64:9c:9b:e8:b5:c5:78:b4:a9:69:30:23:b2:99:1f:a0:50:55:
b4:19:7a:52:63:ad:01:ea:46:f9:4d:6e:fd:63:6b:d3:24:6a:
e8:c4:96:d6:1f:e9:fa:79:a6:b6:fe:42:cf:2d:f0:1a:f4:be:
6c:34:96:55:04:8b:dc:22:71:5f:14:15:a1:7f:a2:7f:b2:ca:
9f:d2:d9:60:6e:b6:f8:18:aa:e0:49:4c:bc:0f:ff:a6:44:91:
9c:cb:c3:6b:52:41:ae:02:a4:bf:95:66:78:3b:ec:a0:ae:2e:
bb:63:0c:c1:91:f8:ba:9f:0c:2d:8e:fc:4e:ed:6c:4c:db:1d:
f8:34:27:a0:2e:27:43:4f:73:5f:63:9d:fe:30:e9:ff:a1:e2:
42:34:c3:74:c6:f4:23:67:d1:0d:c3:a4:67:07:23:ff:82:cd:
d4:48:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org