Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa
File: MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa (raw, json)
Hash identifier: X+zcH0NMtTWKex4fvkUyU5ApV38Z0IxH4a2oM1PXno4=
Subject key identifier: 31:67:0E:32:EC:04:B7:13:B5:AC:7C:80:5B:D0:04:00:41:3F:AC:6B
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 018CC6B8BD5B2840314635C6926CF7F0148A
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa
Signing time: Mon 01 Jan 2024 20:30:45 +0000
ROA not before: Mon 01 Jan 2024 20:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9033
IP address blocks: 194.59.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:bd:5b:28:40:31:46:35:c6:92:6c:f7:f0:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 20:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31670e32ec04b713b5ac7c805bd00400413fac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:34:60:da:d9:1c:ae:6b:54:d2:9d:20:3a:
47:1a:64:52:02:f8:a7:a7:38:1e:f0:45:76:7c:7e:
f6:2a:b7:71:01:87:9e:e5:d3:cd:f9:a3:fa:72:06:
1f:75:c7:4b:66:60:c3:16:22:f9:a0:44:52:5e:46:
4d:c7:58:9c:44:8f:6e:c4:54:95:c2:4c:6c:54:22:
c3:a6:b9:c5:11:34:3b:a1:b6:60:45:f7:f5:3f:1d:
67:04:57:ac:6d:bd:61:60:77:a4:80:96:c9:f9:31:
a0:8b:4c:cf:65:fe:91:4d:6d:aa:fb:84:4a:f8:8f:
8c:7f:f0:b5:8a:34:5c:58:44:f9:b7:d5:cc:8e:17:
ce:f2:4d:1c:98:f9:87:01:a7:c5:ee:43:0a:23:62:
75:e1:0a:5f:5d:bf:3d:50:b5:de:8b:14:a4:75:a2:
05:2b:2f:f0:56:17:30:e1:01:33:7f:2d:39:7f:cc:
6c:a2:be:46:f8:bd:d0:68:96:f5:9d:36:83:4c:34:
19:cc:b7:c6:e3:22:b9:bd:92:22:81:b4:e3:27:e1:
22:9e:f5:ee:46:28:f1:c3:c1:32:24:2e:f1:cf:3a:
a8:74:26:fd:75:c3:2e:37:55:c8:69:17:0c:d5:89:
c5:af:2e:12:05:65:39:bd:a8:19:b7:1b:41:2a:d3:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:0E:32:EC:04:B7:13:B5:AC:7C:80:5B:D0:04:00:41:3F:AC:6B
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.191.0/24
Signature Algorithm: sha256WithRSAEncryption
63:11:de:47:95:f5:e7:13:ee:a5:47:18:ca:ed:c1:16:56:0b:
44:a5:7c:5e:e2:5c:12:ab:33:ad:c0:87:7e:46:f7:b8:82:5d:
76:5f:67:c1:ea:73:66:8f:33:84:60:78:0a:fc:de:d3:24:fc:
8d:20:aa:07:32:7b:67:df:59:39:04:de:73:d5:15:3b:87:56:
b6:be:4d:fe:fa:c3:d3:1d:02:96:ff:3f:0a:b9:ab:f1:72:74:
96:80:66:84:7a:90:cc:4b:27:2d:bb:af:b0:82:bd:31:2c:7f:
12:c0:88:15:4a:bf:91:7b:54:e7:95:9e:76:08:86:c5:2f:59:
eb:38:a7:65:33:7a:c4:d0:c1:dc:19:79:4d:2b:a1:e0:a5:35:
b8:7d:29:76:6a:f8:d3:ef:df:ef:23:61:8a:1f:5b:d0:aa:90:
70:a1:9e:40:1c:03:5d:bd:b3:f8:8b:ab:d1:0b:c0:94:34:2f:
dc:5e:7c:35:42:09:59:17:7a:2d:af:16:ea:25:f1:2e:4d:af:
9c:f9:77:af:37:d4:95:cf:3c:c6:b1:20:f5:73:49:10:06:98:
cf:9c:78:8b:a5:ed:e9:e1:c0:ab:a4:f1:70:a0:5e:b7:5f:db:
68:c5:aa:b4:8f:d5:13:52:b6:f0:17:73:36:d7:9e:9a:63:2a:
3d:cf:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:38:36 2024 by rpki-client on console-fra.rpki-client.org