Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/mfdXD-p1mOuMpD-3nigvl-pIoNo.roa
File: mfdXD-p1mOuMpD-3nigvl-pIoNo.roa (raw, json)
Hash identifier: Fza+O21uXfNjK+m/0DHD2ALefnNpWiNcHa4rMYPUQz4=
Subject key identifier: 99:F7:57:0F:EA:75:98:EB:8C:A4:3F:B7:9E:28:2F:97:EA:48:A0:DA
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 018CC42524E7763D24E13A5EC5637BDAF8A2
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/mfdXD-p1mOuMpD-3nigvl-pIoNo.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205981
IP address blocks: 45.9.132.0/22 maxlen: 22
212.63.104.0/22 maxlen: 22
185.194.108.0/22 maxlen: 22
45.137.72.0/22 maxlen: 22
185.248.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:24:e7:76:3d:24:e1:3a:5e:c5:63:7b:da:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f7570fea7598eb8ca43fb79e282f97ea48a0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:45:61:7a:54:11:06:a6:20:15:88:53:1f:
3a:b5:d0:1f:08:18:9d:c3:ba:2d:c0:fc:ae:23:be:
37:ad:cf:f9:14:87:54:f9:34:ef:5a:5b:ac:67:ef:
77:ad:81:8c:ff:d2:14:df:e9:00:f6:48:fd:d3:13:
09:70:12:89:c3:5a:e6:e0:e5:22:ca:26:dd:ca:f5:
ea:40:1c:8a:4a:09:44:fa:c7:db:ea:e5:01:2f:58:
b3:5f:8f:15:a9:1f:a3:23:5e:0b:84:3e:3a:73:bc:
72:94:37:c9:3f:3d:e9:67:61:f1:13:9e:49:8d:43:
e5:74:99:ba:f7:56:ae:67:57:fc:17:b5:7f:ad:52:
3c:4b:26:5a:37:1d:4b:9d:d3:15:48:eb:11:c2:21:
33:52:e0:3d:7e:b7:d8:d0:d3:64:2d:bc:92:6f:b8:
eb:ca:48:f2:6e:13:45:29:95:51:56:a0:34:3f:b1:
dc:74:e9:be:77:9d:60:63:f3:c3:74:03:e0:7d:bb:
15:5d:4a:71:12:1b:c9:c8:c9:b9:86:e3:70:66:7b:
bd:18:ae:80:f9:58:d1:2a:ce:14:0a:d3:de:31:7b:
73:c8:43:c0:5b:f9:11:0c:36:cd:20:c2:a5:aa:42:
fa:0a:0c:49:7f:dd:6d:51:70:b4:3d:32:b7:eb:ce:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:57:0F:EA:75:98:EB:8C:A4:3F:B7:9E:28:2F:97:EA:48:A0:DA
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/mfdXD-p1mOuMpD-3nigvl-pIoNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.132.0/22
45.137.72.0/22
185.194.108.0/22
185.248.124.0/22
212.63.104.0/22
Signature Algorithm: sha256WithRSAEncryption
41:1b:7b:ea:44:e9:31:6c:c0:5e:61:ab:80:48:76:a0:1d:06:
39:a8:70:f8:2c:50:d4:d5:56:63:90:56:f8:4c:73:c5:14:6b:
9d:a6:03:6f:9c:ae:dd:d8:64:7e:6c:ab:27:c6:4b:ec:bb:7f:
02:74:c4:37:7b:65:f6:f0:ed:0c:28:2d:02:48:e2:76:af:69:
80:a6:6c:f1:06:93:36:99:39:e2:ed:f3:91:33:04:b5:b7:dd:
e9:2d:4d:87:84:7f:70:f9:bc:4f:f5:e6:90:4e:9f:22:33:0a:
a2:0a:3c:75:4d:5c:e4:70:d4:2b:ea:aa:54:34:94:eb:a2:65:
bf:f1:7e:a1:69:51:fb:4f:7f:55:c4:9f:b0:ea:2d:19:5c:80:
ed:02:93:66:86:64:fe:62:f6:9f:0c:0d:72:e0:f8:13:67:f3:
e2:79:9b:c2:db:9d:1e:b3:4e:35:95:01:21:4f:d1:c0:1f:81:
d5:e3:17:bb:df:49:0d:9c:28:f9:fc:c0:e8:4a:48:4c:58:e8:
5f:f6:ca:99:7b:75:b7:3f:ac:15:c9:d6:0b:8b:08:f7:1d:c0:
ec:ff:95:0b:0c:85:3d:18:53:1c:27:4f:2c:9a:59:2f:0f:42:
12:38:6c:5f:c4:c8:fe:c5:3a:59:70:dc:28:2a:bb:e3:d5:75:
cb:3a:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:31:49 2024 by rpki-client on console-fra.rpki-client.org