Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MxLRhKc87dwygT_nSbgADxIVpQ8.roa
File: MxLRhKc87dwygT_nSbgADxIVpQ8.roa (raw, json)
Hash identifier: fYrz7qobI5S0X/2z64+crlZLmvF67lSD3QioNNV5jFc=
Subject key identifier: 33:12:D1:84:A7:3C:ED:DC:32:81:3F:E7:49:B8:00:0F:12:15:A5:0F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2B040F0FA8D5C2D120614E206B14
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MxLRhKc87dwygT_nSbgADxIVpQ8.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46918
IP address blocks: 91.242.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2b:04:0f:0f:a8:d5:c2:d1:20:61:4e:20:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3312d184a73ceddc32813fe749b8000f1215a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:ba:bf:37:7d:c2:3d:f3:da:ae:62:5f:39:
47:0b:3d:98:53:ac:48:2a:85:e7:1f:ea:46:79:45:
d1:0c:ec:83:b3:0b:d8:b8:5c:11:96:c5:bf:4d:ce:
36:93:00:ff:89:c2:17:db:13:4d:4f:a6:8e:f2:e3:
38:5b:fd:70:e3:8a:ec:98:e7:c5:88:36:0c:18:d4:
de:04:cd:14:0c:ef:d6:ba:fd:e1:f1:23:2e:f7:f3:
a1:73:44:08:79:27:bc:aa:61:d4:35:e8:d9:47:20:
45:ff:32:69:5d:04:17:ee:40:fa:14:cc:e2:0c:68:
06:d0:24:71:bf:d2:e3:e6:c1:e5:e8:f5:21:23:1e:
d0:30:9b:7c:2f:b9:b9:37:03:1a:0a:5c:1e:fe:66:
c2:78:b6:82:2f:ab:d5:6c:b2:10:d4:6a:ee:86:d4:
3c:21:5e:b3:da:38:af:b4:ee:42:2d:94:03:43:f6:
f4:e6:9f:97:5f:9f:3e:fd:7e:ae:e9:f8:93:af:1e:
ec:99:64:ea:21:9f:4b:8f:d0:df:5c:b9:6b:b0:a9:
00:da:dd:49:24:a4:0e:c5:4e:03:62:91:5f:da:ce:
33:6d:d1:58:d3:6d:18:4f:d4:6b:ed:75:a1:4b:35:
15:83:9f:ad:8a:09:f0:ec:96:40:71:f0:ed:f0:03:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:D1:84:A7:3C:ED:DC:32:81:3F:E7:49:B8:00:0F:12:15:A5:0F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MxLRhKc87dwygT_nSbgADxIVpQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
Signature Algorithm: sha256WithRSAEncryption
92:38:8f:fc:35:41:38:e4:b1:03:34:df:f0:55:76:43:df:4d:
b0:c0:36:5d:6e:8d:1e:0b:0a:3f:e8:18:e0:07:53:3e:28:e2:
80:81:c2:b3:da:c1:79:9c:f9:cd:58:0b:08:11:2b:4c:a2:7f:
2b:d9:75:6d:b2:16:94:54:13:e9:95:f6:a3:18:91:f8:ed:c1:
c6:d4:41:12:f5:94:5b:77:20:07:02:2c:da:06:6f:91:23:fe:
1d:1e:bf:b6:9d:c9:53:b9:8c:26:0c:20:b9:08:bd:b1:4d:10:
8e:2c:18:43:84:46:d9:d6:0a:d7:cc:aa:93:39:52:7c:b0:0f:
ff:42:c0:00:7a:64:ba:9c:e5:99:7a:26:ef:18:10:1e:39:c4:
9f:ad:23:8b:5d:03:b6:8e:97:f4:b1:66:21:9e:ea:4b:46:8a:
a1:05:7a:9c:31:d8:25:e6:88:d4:ba:ac:83:5b:fe:79:aa:f4:
8a:45:eb:29:6d:5c:3f:57:c9:5b:01:6e:bb:5f:ef:d8:64:03:
8c:36:3c:79:24:64:76:ee:c9:c5:5d:64:5e:98:6e:08:a9:75:
eb:74:62:c5:b2:1c:93:25:31:65:af:bf:14:66:0d:b9:9b:31:
22:f5:68:0f:ec:20:0a:57:8f:46:6c:ea:9b:62:0a:42:92:0e:
df:b9:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org