Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/MwZPS-4evsmr8U6RxU3_g8SE80s.roa
File: MwZPS-4evsmr8U6RxU3_g8SE80s.roa (raw, json)
Hash identifier: Rh0aL5thHdOiE3ShT4J3mdo/GjbQaUwLXfEJ2oYo1sY=
Subject key identifier: 33:06:4F:4B:EE:1E:BE:C9:AB:F1:4E:91:C5:4D:FF:83:C4:84:F3:4B
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 018CC86F029E888F7D6D236DAF2945892696
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/MwZPS-4evsmr8U6RxU3_g8SE80s.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211547
IP address blocks: 193.3.56.0/24 maxlen: 24
2a10:c5c1::/32 maxlen: 48
2a10:c5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:02:9e:88:8f:7d:6d:23:6d:af:29:45:89:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33064f4bee1ebec9abf14e91c54dff83c484f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:36:9a:e4:4d:66:90:b6:93:bb:ed:22:8f:
c2:cc:d8:70:ac:0d:51:1b:38:8f:bb:7a:43:ac:38:
85:36:91:dd:62:70:bd:21:9e:7a:35:55:11:10:60:
44:34:1b:c7:99:81:a7:b6:ea:41:e6:5a:9a:e4:a7:
3b:4a:5c:f0:0a:98:6e:53:56:97:b3:dc:b7:58:7e:
91:f4:90:95:48:0f:11:b1:60:fb:cd:d9:1d:fd:bb:
83:d3:6e:16:f6:13:f5:34:ea:5f:70:f8:92:b6:9c:
31:82:b4:b1:49:c1:52:e3:92:8b:a0:4e:e5:68:d6:
23:5c:17:7b:ed:a0:82:02:42:64:34:dc:4d:1b:29:
be:6c:eb:98:f8:04:0d:f7:44:b3:56:7d:16:4e:a0:
42:aa:80:a6:2f:2c:68:ff:fe:f1:48:2d:c6:b7:89:
0a:84:78:dc:fa:a2:a5:24:0a:05:fa:ef:ca:3c:3b:
08:02:b0:e3:41:a9:2b:0c:6f:00:f7:52:3a:91:95:
34:61:84:5f:09:86:72:3a:52:ca:42:56:76:5d:77:
fd:1e:dc:b9:66:1c:bf:3a:06:b4:da:35:25:5a:a5:
70:fa:9b:0e:aa:e4:1b:7c:89:6d:72:65:ce:a7:86:
58:73:19:51:f1:8f:0e:7c:49:81:40:f9:c8:f3:f5:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:4F:4B:EE:1E:BE:C9:AB:F1:4E:91:C5:4D:FF:83:C4:84:F3:4B
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/MwZPS-4evsmr8U6RxU3_g8SE80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.56.0/24
IPv6:
2a10:c5c0::/31
Signature Algorithm: sha256WithRSAEncryption
7a:1b:3d:06:77:e7:27:9f:be:16:af:47:81:15:32:21:dc:15:
d6:af:2b:d4:70:c8:23:20:83:0f:3f:64:6f:67:87:35:db:30:
11:27:46:2b:9d:de:cf:46:4c:66:4f:53:13:0e:75:27:e8:3e:
67:05:a1:b8:08:a7:a4:1a:0d:06:9b:df:b4:9b:71:b8:39:c4:
15:44:11:28:19:71:98:7c:19:d3:50:70:ec:9f:be:a7:6f:e4:
3b:a4:0d:e1:7e:d3:1b:6d:d1:fd:a0:a0:8f:34:3e:8c:0e:e2:
59:25:53:b5:ac:14:94:4a:44:0d:ce:3d:fc:49:8c:a9:5f:73:
f3:eb:19:ee:7e:c7:7c:d2:ea:03:7d:30:09:fc:2f:f0:5d:52:
50:c3:43:c4:de:60:d0:9c:c2:7c:ef:fe:cf:76:b1:1d:7c:14:
76:b9:72:f5:73:c2:82:de:8a:ef:7c:eb:a7:64:d7:a7:cc:b4:
e6:8f:2b:3b:c2:84:32:cf:2b:dd:12:ac:bb:ee:0e:06:49:b7:
1a:34:57:48:ba:54:78:48:89:cb:d4:59:d5:9d:fe:0c:48:11:
fa:67:48:92:e6:f5:b6:4a:2f:15:c9:8a:a9:f9:f5:2f:0b:82:
f3:b9:91:fc:13:7e:db:85:63:2e:a0:35:85:cc:01:2c:00:0b:
d9:a8:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:20 2024 by rpki-client on console-fra.rpki-client.org