Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MFMdvlHo9RQhKIqqXYySWx1pOxc.roa
File: MFMdvlHo9RQhKIqqXYySWx1pOxc.roa (raw, json)
Hash identifier: eB9YxvIXF81A/EzRNIQelLnSzktGVxzNaQkPF4+PYlI=
Subject key identifier: 30:53:1D:BE:51:E8:F5:14:21:28:8A:AA:5D:8C:92:5B:1D:69:3B:17
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42552817FC708C46707184AB1A0B400
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MFMdvlHo9RQhKIqqXYySWx1pOxc.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 185.242.224.0/24 maxlen: 24
194.31.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:52:81:7f:c7:08:c4:67:07:18:4a:b1:a0:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30531dbe51e8f51421288aaa5d8c925b1d693b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:75:0c:05:15:d5:00:66:45:62:e9:cb:e2:
86:1e:fa:d4:1d:0e:c9:ff:00:e3:d4:80:47:97:a3:
e0:c2:a5:b5:ee:79:41:56:a3:f9:33:4b:91:63:fc:
5b:e3:04:c1:91:e1:84:f7:3c:05:3a:36:c8:9c:45:
41:a4:96:a1:3a:c9:6d:6c:08:41:be:e6:e5:08:b7:
2a:67:21:ba:8b:0a:33:10:27:82:0e:4d:6e:ce:b1:
f9:f0:84:0e:2f:7f:13:71:a2:59:68:f3:77:7e:69:
39:b5:4f:78:30:d3:96:93:c8:a9:3f:61:5c:17:58:
d2:38:b7:b5:6c:2d:a4:ed:0b:37:84:b9:64:e6:68:
90:c3:88:bb:92:fd:d6:da:82:21:ca:07:db:b5:87:
30:ea:eb:04:5c:22:27:b8:10:08:f0:51:a7:ad:46:
6c:bf:bb:0b:2d:f1:62:80:10:61:87:9c:ce:de:ec:
01:27:a7:34:5e:ad:f2:24:9f:4e:e3:17:fc:de:aa:
e0:87:3f:d1:7b:c8:91:57:97:33:d7:0b:59:3f:42:
c5:1f:a2:b6:31:43:c7:92:5e:04:da:0f:9d:47:ea:
9d:40:f6:c7:a8:79:a3:b0:36:00:b9:6c:3b:95:e4:
1a:c5:39:7e:22:55:0b:e2:d7:70:6c:5e:70:9d:09:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:1D:BE:51:E8:F5:14:21:28:8A:AA:5D:8C:92:5B:1D:69:3B:17
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MFMdvlHo9RQhKIqqXYySWx1pOxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.224.0/24
194.31.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2b:4e:ee:8d:a2:f6:07:cb:59:78:b4:93:84:7a:39:82:1f:
c2:01:56:fd:9d:95:cb:93:7f:c0:2b:03:00:be:99:87:6f:08:
3e:6c:f1:a7:69:1c:d4:96:6c:b5:4f:e2:8e:71:36:2e:25:8f:
30:ac:73:fd:38:54:b7:b8:52:ee:d0:cc:6a:1a:60:ed:18:bb:
77:2f:7b:66:ce:02:44:45:44:96:d0:5e:ab:08:72:e0:47:70:
6a:b7:fa:08:f0:c3:19:da:0f:47:c8:04:5f:77:97:65:e9:26:
0c:fa:bd:d3:37:6c:9c:28:f0:38:af:09:8a:f1:40:63:38:42:
2f:cc:e6:2b:a3:d0:8f:40:46:9d:36:7e:b6:ce:26:41:7a:b0:
ed:e5:42:77:ef:c3:c2:6d:77:32:6b:3d:ff:e2:58:35:dd:0e:
9d:4d:c4:f3:57:58:64:42:9a:23:d2:f2:9b:cb:bc:e3:ea:b6:
12:8c:8e:d0:1c:35:5c:82:77:70:3a:3e:da:c4:65:4b:61:a7:
f5:d3:80:8d:fd:7e:07:4e:b2:5c:99:36:8a:fb:8d:30:9d:b8:
fc:77:cd:0e:39:49:b6:8d:f4:80:fa:96:20:e3:51:d4:a9:97:
94:19:ff:6c:17:37:b3:50:fe:1e:12:eb:ae:03:f4:c3:09:f9:
f4:96:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 12:19:16 2024 by rpki-client on console-fra.rpki-client.org