Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MQCBTxmepaVQLz953ipFUmRFBbc.roa
File: MQCBTxmepaVQLz953ipFUmRFBbc.roa (raw, json)
Hash identifier: h6HMwF6NSuvkUGTfUySxeFqmBKiip+JwXi8u9MjeU6s=
Subject key identifier: 31:00:81:4F:19:9E:A5:A5:50:2F:3F:79:DE:2A:45:52:64:45:05:B7
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018CC795411D004372AFACFB8FADCE3DD347
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MQCBTxmepaVQLz953ipFUmRFBbc.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207456
IP address blocks: 185.239.206.0/24 maxlen: 24
185.239.205.0/24 maxlen: 24
185.239.204.0/24 maxlen: 24
185.239.204.0/22 maxlen: 22
185.239.207.0/24 maxlen: 24
185.241.159.0/24 maxlen: 24
185.241.158.0/23 maxlen: 23
185.241.158.0/24 maxlen: 24
185.241.157.0/24 maxlen: 24
185.241.156.0/22 maxlen: 22
185.241.156.0/24 maxlen: 24
185.241.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:41:1d:00:43:72:af:ac:fb:8f:ad:ce:3d:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3100814f199ea5a5502f3f79de2a4552644505b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:2b:5c:da:d4:24:98:e1:a3:78:a7:0a:ca:
8a:bf:ac:76:f0:20:c0:c9:44:60:69:ee:70:f4:04:
25:27:d9:6a:27:d7:d8:a8:ea:79:4b:47:84:6b:cd:
41:26:74:aa:d0:86:b2:55:ca:d6:47:9c:27:d0:b2:
33:ee:c7:19:61:98:09:ab:d1:40:bb:eb:77:48:e6:
f1:a0:22:c3:2a:d7:d8:ae:d8:5b:65:d0:ef:d9:fd:
d3:ee:02:a4:59:b4:0b:e1:6f:79:2d:13:e4:d3:ee:
b3:51:60:e4:85:4d:1b:fb:ca:d7:e0:c6:4b:80:18:
8d:67:43:90:9f:84:a7:be:c2:28:d3:a3:79:ba:28:
b4:9f:c5:c4:3e:8f:12:30:90:3e:ee:55:99:6c:72:
e9:6c:e4:c1:f4:32:cc:da:95:4a:25:7a:2a:ea:6b:
21:2c:2f:ea:e9:73:ab:47:d7:04:fb:be:eb:f7:63:
ec:c6:5b:ff:ad:c0:4d:87:b5:46:3c:47:18:9a:18:
be:11:99:06:15:03:da:7b:2b:33:a0:03:de:e6:63:
04:38:c2:42:5e:a0:a2:b1:b5:2e:ac:b8:f3:0b:f2:
fd:2c:54:59:e0:c6:f7:31:7f:aa:a2:75:80:b3:c2:
c1:e4:be:7e:f8:a6:15:1e:c9:2a:72:c3:4d:b1:63:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:81:4F:19:9E:A5:A5:50:2F:3F:79:DE:2A:45:52:64:45:05:B7
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MQCBTxmepaVQLz953ipFUmRFBbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.204.0/22
185.241.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f3:b0:ed:32:1d:20:77:60:b6:c7:94:d0:70:f8:eb:ab:51:
21:81:64:22:57:17:c2:e9:d6:b5:f1:a4:40:05:6e:63:b3:62:
6c:e0:27:17:dc:32:bb:6e:ca:a2:33:50:10:f9:06:99:60:ae:
e2:78:23:c0:17:f9:7b:10:7a:4a:83:a2:21:b4:b9:41:dd:ff:
da:62:ea:4d:15:02:11:4c:4b:4e:09:bb:ba:35:4d:08:6f:f6:
50:15:c9:5d:a8:02:96:36:2d:ad:e0:3e:f8:1f:f2:4f:aa:9e:
c6:c1:f1:c4:05:b0:a3:4c:69:b7:24:66:3c:6b:08:19:94:d5:
99:ae:e1:fd:56:a1:59:2f:2a:0a:bb:ab:88:fc:04:a3:34:5d:
e1:f0:8e:7b:94:2c:da:14:ad:3f:df:25:e7:6b:05:8b:96:53:
75:5e:a9:a8:ea:71:51:1f:64:c6:73:c4:fd:ba:bd:bd:75:a1:
e3:72:f4:26:d6:a2:7d:be:38:36:89:cc:f7:61:31:ca:d0:af:
bb:5e:05:22:58:c1:69:73:80:55:f7:0e:bc:c3:90:58:55:99:
1e:a6:0c:29:9e:34:ab:0c:7b:6e:1c:53:23:20:f9:9e:99:ed:
93:5b:d0:0f:f3:51:2c:45:fe:f5:57:87:cb:8c:4c:ed:4c:de:
f3:5e:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:54:08 2024 by rpki-client on console-fra.rpki-client.org