Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/MImR3Pt-ZV7L6v8LMjXxS9m_YJY.roa
File: MImR3Pt-ZV7L6v8LMjXxS9m_YJY.roa (raw, json)
Hash identifier: HrHkDTKdvWvLUebcw/ppbB30lwznoQp/ymIQ3oFjbXk=
Subject key identifier: 30:89:91:DC:FB:7E:65:5E:CB:EA:FF:0B:32:35:F1:4B:D9:BF:60:96
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 018D93879FC8B733ADF85FA020280C04E332
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/MImR3Pt-ZV7L6v8LMjXxS9m_YJY.roa
Signing time: Sat 10 Feb 2024 14:59:15 +0000
ROA not before: Sat 10 Feb 2024 14:59:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35575
IP address blocks: 185.190.44.0/24 maxlen: 24
185.190.45.0/24 maxlen: 24
185.190.46.0/24 maxlen: 24
185.190.47.0/24 maxlen: 24
193.238.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:87:9f:c8:b7:33:ad:f8:5f:a0:20:28:0c:04:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Feb 10 14:59:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308991dcfb7e655ecbeaff0b3235f14bd9bf6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:46:61:8c:b5:08:2f:ad:81:5d:6c:40:76:
7b:b2:40:e2:5f:97:72:18:09:c5:24:ae:81:9b:99:
ad:65:8a:94:94:32:84:6c:a0:7b:b4:b1:fa:0b:4d:
1a:b3:e4:e5:cb:81:af:bf:c2:98:1b:08:67:b3:55:
05:dd:7c:fb:af:ff:62:cd:c6:a0:d4:d9:5a:01:78:
9e:ba:78:95:8b:de:74:8b:5a:f0:b1:05:09:90:17:
54:54:28:f9:8e:86:c3:42:c2:bc:a7:5b:e6:82:a3:
d6:50:fc:6e:9c:4f:5b:d7:76:c4:3a:69:76:e4:24:
53:dd:33:13:bc:04:4e:32:24:0e:98:de:39:67:84:
b5:26:aa:17:23:95:3a:0a:a2:7f:f3:db:10:e8:b2:
aa:97:03:bf:b4:36:a7:4e:3e:a8:31:4b:8e:a3:64:
88:87:c7:aa:d8:32:33:e4:10:ec:ee:20:4d:d3:fc:
12:7f:e9:9f:09:ed:1c:15:80:76:66:57:b9:44:35:
a4:74:71:11:3b:ab:19:d8:35:63:b3:90:69:90:c4:
34:5b:a9:fd:49:af:25:4c:a1:ac:03:7b:50:fe:3c:
a6:7f:54:72:42:d0:63:35:f4:d4:ae:39:a4:4d:a6:
2b:fa:da:9d:ef:42:89:6b:94:cd:8c:0b:a5:5c:9b:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:91:DC:FB:7E:65:5E:CB:EA:FF:0B:32:35:F1:4B:D9:BF:60:96
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/MImR3Pt-ZV7L6v8LMjXxS9m_YJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.44.0/22
193.238.68.0/22
Signature Algorithm: sha256WithRSAEncryption
43:0a:fe:90:64:fc:4c:e2:3d:27:c4:15:17:b2:7a:c9:df:e9:
6f:c6:80:15:7e:50:61:c8:58:34:c7:4a:e9:ba:2b:9e:cf:7e:
ae:01:3c:47:bb:da:c4:5b:4b:af:a9:8c:b2:b5:2f:74:a9:2a:
f2:f4:9b:15:d6:4b:0c:5c:d1:17:e5:d7:a3:67:86:aa:ac:5e:
fd:38:9a:15:14:3b:07:5f:e2:ce:61:d8:aa:8d:ab:1d:d8:a1:
e0:38:ed:2a:bc:eb:43:84:dd:b1:b9:80:9d:87:f7:f8:6e:30:
cd:da:c0:9d:bf:21:b5:9d:10:0a:2b:37:6a:14:22:81:7a:a4:
69:54:43:98:15:95:74:1d:b8:75:4a:4a:98:4c:98:0d:68:46:
42:81:97:b9:49:2e:66:f5:22:e6:07:9f:a3:57:64:6d:16:0b:
47:c6:a9:d0:08:1e:c1:88:f7:a8:1a:de:f2:8f:29:04:de:a1:
92:87:95:24:76:6e:99:13:cf:31:01:82:47:0d:6e:2a:6e:50:
17:c8:6e:6a:72:99:7a:bd:7c:b2:23:77:f5:c4:1f:c7:1b:e3:
db:26:39:14:d6:37:66:af:d9:8d:b6:b1:7e:3d:94:d0:e7:93:
99:a9:5d:59:e1:7e:a0:e1:b9:4a:9c:45:cb:91:58:f5:31:9d:
a5:d3:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:09:57 2024 by rpki-client on console-ams.rpki-client.org