Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MBUZLD5hY63omDcH4x_jmM8Sf9Q.roa
File: MBUZLD5hY63omDcH4x_jmM8Sf9Q.roa (raw, json)
Hash identifier: nLK7BA/oEQJAfwh/9XnU8tg+k+XYDnKlJxQMizNAwWI=
Subject key identifier: 30:15:19:2C:3E:61:63:AD:E8:98:37:07:E3:1F:E3:98:CF:12:7F:D4
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA295A539B07CDBC32360B388D584588
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MBUZLD5hY63omDcH4x_jmM8Sf9Q.roa
Signing time: Tue 02 Jan 2024 12:32:36 +0000
ROA not before: Tue 02 Jan 2024 12:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200240
IP address blocks: 2a0e:8f02:f052::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5a:53:9b:07:cd:bc:32:36:0b:38:8d:58:45:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3015192c3e6163ade8983707e31fe398cf127fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8d:12:0b:60:f7:f0:a9:3e:97:f0:a3:04:64:
4b:34:e8:8b:41:34:35:bd:ba:be:1a:ff:5e:49:16:
4b:33:3e:b1:12:01:e1:b8:60:b6:ad:6f:b6:00:0d:
6a:e8:d6:b6:ef:ce:f4:7f:11:42:92:10:99:93:f8:
47:38:91:77:e1:5f:36:4f:e6:49:86:ec:d2:06:7c:
f7:ee:5b:b2:57:02:b7:f0:89:7c:fb:a4:e6:0c:d4:
46:38:e7:95:05:b0:17:38:7f:45:5f:af:f4:96:79:
26:09:44:33:07:0d:8e:96:2c:05:27:f7:9b:18:92:
6c:e2:05:a9:02:2f:20:df:cf:d5:48:3f:bd:81:bd:
33:3c:03:2f:c0:a7:20:2b:b7:0e:aa:ad:53:b1:ac:
4c:c7:72:5d:cb:b1:18:70:81:bc:61:97:44:d4:54:
34:60:87:fa:43:3c:a6:1f:00:ce:40:b3:d3:26:f8:
fb:c7:d9:ab:ac:da:8e:67:97:25:7f:74:b4:22:60:
57:5b:15:69:02:b0:7c:e4:33:fb:33:6f:63:7b:b9:
e3:75:d2:08:06:f1:bc:4a:b6:f4:76:7c:17:a0:86:
a0:cd:fe:5b:c7:ea:ba:03:e6:73:8b:59:67:58:29:
4f:19:b2:f4:21:7e:6e:84:3a:0b:79:66:5b:b7:d8:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:19:2C:3E:61:63:AD:E8:98:37:07:E3:1F:E3:98:CF:12:7F:D4
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MBUZLD5hY63omDcH4x_jmM8Sf9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f052::/48
Signature Algorithm: sha256WithRSAEncryption
30:e7:ff:60:66:a7:90:2a:4d:93:a4:78:42:0f:6d:78:d2:a7:
1a:11:6d:18:ea:80:7a:21:cf:d1:ef:61:38:d0:60:60:b8:e0:
8f:fa:9f:56:7b:ea:22:29:b5:21:8f:7b:0d:49:e3:31:fb:9d:
f9:8a:0b:bc:cc:b8:1a:a9:83:05:f5:38:92:a7:45:55:53:0f:
ef:59:bc:e5:86:b8:81:b7:05:31:b7:38:ec:09:0d:63:5c:a2:
31:ea:e5:af:ac:57:0c:43:b0:df:c7:5e:2e:dd:c9:b7:1a:fe:
4d:fd:c1:de:03:0c:32:fa:4f:7c:f0:34:ce:97:f9:cf:e5:50:
7c:ed:54:fc:f0:49:ee:a9:53:ea:c9:85:70:55:a3:dd:f5:bd:
af:2b:7b:96:54:4b:96:cb:4d:44:55:6f:8c:49:9b:d0:31:0c:
40:1f:7b:20:ac:d2:3e:41:48:12:72:37:07:14:7b:5e:68:9a:
b7:e5:90:ea:8c:78:63:26:a7:6b:cd:84:34:57:a9:d7:23:e1:
38:0b:2f:1b:42:d2:e4:cb:0b:3b:89:89:de:6c:f3:ed:11:1f:
47:6a:61:56:e8:b4:bb:e0:41:bf:78:11:b1:6b:0b:17:4a:51:
83:59:b8:4b:d2:f4:76:af:6c:06:4f:ac:3f:dd:dc:8c:33:5b:
1f:29:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:28:25 2024 by rpki-client on console-ams.rpki-client.org