Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/MPeEU5qoofCuRp-y6y3oU3mDt9w.roa
File: MPeEU5qoofCuRp-y6y3oU3mDt9w.roa (raw, json)
Hash identifier: FhNtQm50BmFpda858KdO0LT2Kj0Yyp6OnxyoEHGN4js=
Subject key identifier: 30:F7:84:53:9A:A8:A1:F0:AE:46:9F:B2:EB:2D:E8:53:79:83:B7:DC
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 018CC5DC72A1A58CB91DCFADCC09119791BC
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/MPeEU5qoofCuRp-y6y3oU3mDt9w.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41451
IP address blocks: 185.46.172.0/24 maxlen: 24
195.43.80.0/23 maxlen: 23
195.43.80.0/24 maxlen: 24
2a0c:f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:72:a1:a5:8c:b9:1d:cf:ad:cc:09:11:97:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30f784539aa8a1f0ae469fb2eb2de8537983b7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:be:e2:cc:80:f6:2f:b2:4d:90:23:00:49:
e3:2e:93:de:50:7f:0f:be:16:09:0d:6b:a6:ed:a8:
e6:8e:cc:75:1c:2f:ef:ec:a4:44:80:c5:84:73:76:
30:31:1e:67:3e:36:ee:a0:3e:37:96:88:4a:56:6e:
c8:2a:ce:e4:33:4d:4b:79:95:df:58:29:b3:27:09:
65:3c:b5:a3:9d:6e:cb:5d:1a:fa:f7:df:7e:8f:1b:
f9:48:cb:07:24:f2:aa:d4:80:13:5e:db:55:52:09:
84:c2:9c:00:1d:a5:ee:cb:13:ad:68:6d:cc:75:06:
aa:36:4a:de:bc:ef:6c:12:43:15:4a:5e:d1:22:f6:
e6:fe:21:c6:20:77:84:c7:a0:30:4b:87:10:f6:a4:
92:6c:f6:56:1c:cb:b7:cf:8a:2a:5f:b0:ca:97:59:
0f:bb:eb:50:40:aa:ad:af:30:c5:4e:49:80:65:6a:
b5:97:be:7b:fc:63:c7:06:66:bc:06:e1:fa:90:56:
95:a9:bc:a7:9a:5c:37:d8:14:30:a3:24:19:d0:62:
ef:b4:f8:d9:50:87:3d:df:37:14:41:f5:aa:75:d0:
a7:45:9e:df:8d:d3:b7:01:2c:d3:23:20:0b:d7:94:
48:f0:ed:85:b3:8e:3e:6e:f3:c8:fe:62:1e:66:66:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:84:53:9A:A8:A1:F0:AE:46:9F:B2:EB:2D:E8:53:79:83:B7:DC
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/MPeEU5qoofCuRp-y6y3oU3mDt9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.172.0/24
195.43.80.0/23
IPv6:
2a0c:f40::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d2:5b:3b:fb:cf:19:df:5c:53:90:17:37:a3:d9:a3:c1:b4:
06:bb:be:c3:a5:59:17:a9:80:0f:30:c6:dc:d0:b1:72:3e:41:
68:87:c2:24:4f:ba:11:e4:91:cb:01:99:c0:b7:1c:a6:53:49:
ab:27:ee:71:fe:94:69:7a:d7:9d:ba:c3:7b:d7:ae:72:f8:7b:
bc:41:0d:35:2e:ef:0a:e5:92:ba:f2:9b:b1:96:83:c7:01:39:
91:2e:69:6e:16:73:bb:72:ca:8f:ea:66:5e:ac:fd:e1:af:5e:
0c:39:28:71:21:b5:4e:ee:af:38:7d:97:28:20:34:49:59:88:
b6:3c:4c:3a:0a:c6:9e:3b:08:05:1f:87:07:6c:1b:68:e4:1f:
44:f9:e0:8a:ab:b7:05:05:b2:41:2b:f9:1f:16:c8:32:85:15:
82:68:91:ec:43:69:e0:0f:71:99:88:0d:1a:a8:7c:11:a6:cc:
0b:5b:4d:fc:2f:7f:3c:66:5c:38:2d:13:24:ab:11:5e:d2:10:
f4:19:8e:f4:57:0e:39:9b:f4:34:28:ad:95:b6:8d:93:93:1f:
95:08:55:35:dd:05:00:b3:ef:70:62:91:a3:fe:70:9f:ee:67:
03:26:f3:bf:17:aa:e5:d0:4c:ba:35:de:98:aa:22:49:9c:d9:
c9:b9:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:16 2024 by rpki-client on console-ams.rpki-client.org