Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/M2Xp18U-PDBAtsOOuM80XS5SkQw.roa
File: M2Xp18U-PDBAtsOOuM80XS5SkQw.roa (raw, json)
Hash identifier: +GgloJbwt/3Brd9zOw37AqirtOoYu/qpQNv9SBDog6U=
Subject key identifier: 33:65:E9:D7:C5:3E:3C:30:40:B6:C3:8E:B8:CF:34:5D:2E:52:91:0C
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 018CC9BCC4C5C26F498621B9CA7FC0C84766
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/M2Xp18U-PDBAtsOOuM80XS5SkQw.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.99.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c4:c5:c2:6f:49:86:21:b9:ca:7f:c0:c8:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3365e9d7c53e3c3040b6c38eb8cf345d2e52910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:2a:4f:c7:dd:af:78:08:78:93:76:15:ae:
1c:f9:71:37:f1:63:b5:85:c8:ae:56:68:d3:1c:08:
10:16:33:f7:ff:01:08:f3:62:15:fb:8c:15:da:67:
16:5b:c8:6c:77:42:e0:61:15:8e:7a:6e:59:52:aa:
96:8d:be:fd:3a:c5:d1:84:9e:20:9e:cd:fc:09:99:
32:54:22:32:f4:48:ca:07:41:84:ce:d2:db:93:c8:
3f:b7:1f:d1:11:9f:83:3f:15:7e:31:1a:d0:e9:54:
ff:0d:c4:e7:6a:49:c2:7c:cc:b2:2e:4a:02:dd:3e:
fd:ef:8e:b0:af:cf:f6:01:08:e9:54:fa:be:40:0a:
2b:96:b9:c6:24:86:0e:21:7c:bc:7b:cf:d3:d4:68:
6d:99:d6:c0:c6:23:78:20:18:4e:38:e5:51:a5:a2:
1c:ab:9d:cc:6b:c8:0a:2b:0e:6c:db:3e:9b:5c:2c:
3f:49:d1:27:5f:34:87:08:9d:9c:c1:89:51:a9:92:
3d:99:97:6b:fe:5a:2b:3e:54:f5:2e:b9:9b:90:6d:
1b:21:9c:c7:cd:c8:71:f8:ee:23:6c:9b:52:bc:5f:
40:59:8f:86:8c:3d:27:d4:5c:fb:39:e9:bf:8e:3c:
bc:16:85:f7:81:b1:60:2f:36:a4:bd:b1:05:9c:21:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:E9:D7:C5:3E:3C:30:40:B6:C3:8E:B8:CF:34:5D:2E:52:91:0C
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/M2Xp18U-PDBAtsOOuM80XS5SkQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.12.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7e:2d:3c:64:90:ad:73:af:e8:f6:02:fa:00:69:66:a0:0a:
30:82:b5:53:9e:de:68:87:40:eb:66:0f:36:42:4d:eb:0a:85:
ce:52:47:f2:1f:66:ae:3d:51:93:80:93:a1:e4:b7:3e:dc:ee:
59:16:9c:09:16:91:08:59:77:57:d7:d3:a0:cc:28:7d:42:92:
5d:60:d7:62:a7:c9:ef:fb:79:39:0a:b3:a3:cc:7b:1e:05:74:
98:1f:c4:50:02:8b:9f:d3:ae:73:f0:d3:3f:0c:07:18:9d:20:
b8:5a:35:9c:b7:1b:4b:13:ce:e4:25:2e:7e:ed:61:24:21:4c:
a1:f8:1d:e7:cc:5c:d9:ad:02:42:bb:e1:ab:16:18:6c:f5:9f:
bd:30:63:25:10:38:11:5b:56:05:aa:dd:11:93:63:af:96:2e:
a5:54:b1:b7:c4:89:f5:41:32:d9:38:90:0e:ac:45:68:34:b9:
f4:c9:02:3a:4d:c8:5f:5c:8f:7c:3a:5a:ee:c3:04:48:57:06:
23:23:8c:b2:a6:a5:ae:04:d7:05:29:1e:23:7d:b3:92:0b:6c:
b5:76:80:30:20:c8:8b:e9:e7:0a:c4:92:34:55:23:fc:3c:6f:
e4:43:af:8f:03:3e:48:b2:e0:56:b7:cb:bc:39:ed:16:0f:bd:
ee:f2:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:37:03 2024 by rpki-client on console-ams.rpki-client.org