Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mMZoBz6VrvmaEqIGoTnDn3LbCLU.roa
File: mMZoBz6VrvmaEqIGoTnDn3LbCLU.roa (raw, json)
Hash identifier: RMIuMHi+CyGPQrq8IkW/B0s8cJY2DQmAsT3x89B5FbA=
Subject key identifier: 98:C6:68:07:3E:95:AE:F9:9A:12:A2:06:A1:39:C3:9F:72:DB:08:B5
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D091D91DD1D9394B1149535702748
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mMZoBz6VrvmaEqIGoTnDn3LbCLU.roa
Signing time: Tue 02 Jan 2024 08:31:58 +0000
ROA not before: Tue 02 Jan 2024 08:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203069
IP address blocks: 2a0a:280:1e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:09:1d:91:dd:1d:93:94:b1:14:95:35:70:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98c668073e95aef99a12a206a139c39f72db08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:f9:65:e3:86:e1:c7:57:37:0b:19:44:8e:
b5:64:e5:a2:38:fd:e0:da:47:3c:9b:dc:59:af:10:
3c:fd:fc:c5:4a:c0:fe:f0:71:02:42:9d:2c:bd:29:
01:41:07:9b:2e:32:ac:95:12:91:78:16:60:6d:a4:
06:3e:2d:94:63:1e:c6:4a:bd:5f:c9:c6:28:6c:d6:
be:6a:d3:e9:7f:a4:e4:5a:70:76:0f:12:31:2b:c2:
00:6f:c0:a8:71:e9:b5:cc:b8:af:0e:1f:9e:3f:b9:
17:f3:46:a4:2a:5d:38:17:2a:b4:99:6d:80:95:9a:
c8:73:f1:be:37:d5:df:01:29:3d:4b:d6:cb:d8:82:
1f:bd:e4:d0:51:c1:36:ba:a9:15:56:d1:13:0d:c9:
8d:1a:5d:dc:bb:f7:71:84:8b:47:c4:cc:b1:08:3d:
62:38:5b:95:95:62:89:7a:76:0d:ac:32:3e:0b:43:
af:b6:c1:71:7f:ac:7d:05:c5:c1:58:03:5e:59:9f:
e7:9a:13:84:16:a6:55:8f:84:2b:02:f9:78:f3:c6:
3d:ee:54:24:b8:48:57:e9:11:e7:1e:fc:8e:29:fc:
41:05:16:18:41:91:84:1e:9d:31:c8:ae:ba:2a:fe:
6c:22:00:dc:28:66:45:d7:fe:be:82:04:97:74:03:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:68:07:3E:95:AE:F9:9A:12:A2:06:A1:39:C3:9F:72:DB:08:B5
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mMZoBz6VrvmaEqIGoTnDn3LbCLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
4c:3f:53:41:7c:6c:8b:20:c5:cf:48:f3:31:e4:2d:91:72:dc:
af:51:45:1a:e7:ed:26:aa:a9:3d:7c:dc:84:32:29:46:e6:f6:
eb:69:74:a2:bd:d0:85:2b:ca:27:1d:b7:97:fa:85:fa:70:9e:
74:e8:b5:3f:d8:8a:75:cd:bb:b2:40:4f:67:0e:6a:10:93:90:
01:ac:70:53:b4:f6:ea:e8:58:a6:38:7a:3d:d7:f9:6e:bb:bf:
ed:c9:72:66:c2:3f:33:15:bb:1d:b5:9e:e7:60:6d:30:fe:d8:
a6:3f:c2:3d:32:0a:9e:81:7b:96:63:67:b1:a1:f8:67:63:98:
18:55:a8:ba:25:f0:e0:df:cd:11:a4:3e:44:8e:d7:aa:e6:4b:
f1:90:39:64:ef:83:76:6a:7f:9c:01:85:78:33:8e:fd:5a:7c:
59:3d:db:3f:96:a2:35:41:7c:6b:f4:b9:d0:9b:7d:22:90:7e:
2e:38:80:a7:5c:d5:6e:80:55:3b:cc:c1:cf:a9:57:0a:b7:00:
80:8f:f7:0c:20:84:b9:de:d3:f8:1f:34:be:50:45:50:c3:7d:
5b:6e:07:70:39:43:63:52:6f:7c:da:8c:99:4f:0b:9a:04:ec:
f0:e4:82:c5:2d:44:8a:d6:21:a5:3d:c7:15:4a:95:77:b0:70:
e6:e0:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:22 2024 by rpki-client on console-fra.rpki-client.org