Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/MZvs5sbD46CGCblHUBEgJQGkLew.roa
File: MZvs5sbD46CGCblHUBEgJQGkLew.roa (raw, json)
Hash identifier: Mgh2rC50nKCeafwD/XGbqV2A1RVG4RvyoF5fDTHPAmg=
Subject key identifier: 31:9B:EC:E6:C6:C3:E3:A0:86:09:B9:47:50:11:20:25:01:A4:2D:EC
Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial: 018CC4247B47174D59D80467F5AC7ECB78A0
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/MZvs5sbD46CGCblHUBEgJQGkLew.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 193.177.141.0/24 maxlen: 24
193.177.144.0/22 maxlen: 22
193.177.140.0/24 maxlen: 24
193.177.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7b:47:17:4d:59:d8:04:67:f5:ac:7e:cb:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=319bece6c6c3e3a08609b9475011202501a42dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:8d:aa:01:61:a3:10:db:f9:f7:40:c0:11:
f5:04:ed:b4:c6:51:f2:61:de:9c:38:70:aa:d0:db:
af:0b:d5:4e:d9:f3:06:cc:ab:77:a7:25:be:ce:7a:
43:86:a3:e1:75:27:e1:3d:6b:41:79:27:19:72:ea:
91:c1:1c:19:fe:92:8c:1b:bc:db:c9:52:29:61:85:
49:1c:64:5c:0a:5d:e9:5e:2b:22:db:12:ec:7b:56:
24:ba:1b:3b:47:32:02:34:19:91:53:3d:43:b5:7d:
d3:78:98:27:e7:f9:30:e0:c3:da:b6:10:81:b6:b7:
4c:e6:14:e0:6d:d4:48:17:ec:b9:f0:4c:c7:c6:bb:
f6:99:45:75:ad:9e:54:b5:7b:c8:e7:ff:a5:9b:07:
32:79:84:a7:07:40:cb:e6:4b:af:18:23:0a:aa:3e:
8f:be:79:38:ce:f0:d1:60:b4:53:b6:74:b1:1e:d2:
48:37:3d:80:2e:ac:b6:73:5a:9b:47:a2:b4:9b:cf:
c2:55:76:14:cb:7b:0b:d8:6d:fe:e3:dd:1a:de:94:
4d:b4:c7:74:f4:28:28:d6:dd:13:09:9a:4e:75:4c:
df:cd:63:5d:f7:ab:be:79:5b:77:f2:d5:1c:c5:47:
10:74:bd:9d:6f:10:43:4b:51:b4:02:d4:5d:3d:c3:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:EC:E6:C6:C3:E3:A0:86:09:B9:47:50:11:20:25:01:A4:2D:EC
X509v3 Authority Key Identifier:
keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/MZvs5sbD46CGCblHUBEgJQGkLew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.140.0-193.177.147.255
Signature Algorithm: sha256WithRSAEncryption
33:28:ba:b7:3e:b8:6c:4a:07:d0:15:33:8c:3c:28:3d:35:68:
a5:86:ab:60:28:e9:eb:a8:35:f7:6c:2e:92:de:10:80:87:ff:
69:63:6b:bf:64:23:12:67:f0:3a:54:09:e3:c0:c8:b0:8b:91:
35:b5:64:97:cc:fc:a7:b5:e3:1e:39:7f:7d:76:cc:26:8e:26:
98:64:df:5a:bf:f2:6f:87:7c:14:60:b6:87:2e:74:ad:ac:74:
68:2f:31:1d:1a:11:34:ee:44:9b:83:54:cb:68:28:ea:f8:06:
be:6d:13:e8:8a:43:53:06:3c:bd:22:f2:23:89:01:44:cd:17:
ca:66:ff:32:44:50:b4:74:9a:04:d1:5a:20:d9:2d:74:85:fe:
00:b9:53:d2:93:57:b1:69:70:77:36:85:33:1d:ba:ed:07:06:
3b:4b:51:a5:58:4f:a9:89:bd:53:62:03:61:9a:90:13:99:d2:
8a:8f:9e:21:0c:5d:d5:81:4c:73:2a:84:46:7a:07:35:93:d8:
ff:c1:54:f6:70:62:9a:59:f3:39:ed:62:fe:f0:10:7e:c4:b8:
18:8c:ae:6c:2e:95:b8:68:1f:fa:dc:13:da:56:2c:ba:a3:28:
7d:bf:b6:4c:9f:b9:54:56:14:ef:61:3c:e2:bc:b1:f7:a0:69:
fa:c6:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:56:48 2024 by rpki-client on console-ams.rpki-client.org