Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/MS5iIWq5h4SxBHuDK4hjP0Mf8V8.roa
File: MS5iIWq5h4SxBHuDK4hjP0Mf8V8.roa (raw, json)
Hash identifier: aSDEOqf0ZxLZ+SoZtD7LpXiy85gwPlGGNRu5QZUiEg0=
Subject key identifier: 31:2E:62:21:6A:B9:87:84:B1:04:7B:83:2B:88:63:3F:43:1F:F1:5F
Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial: 018CC2DB4669735A13B392C55C0D750655B9
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/MS5iIWq5h4SxBHuDK4hjP0Mf8V8.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 185.67.200.0/22 maxlen: 24
185.88.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:46:69:73:5a:13:b3:92:c5:5c:0d:75:06:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=312e62216ab98784b1047b832b88633f431ff15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:f7:ea:da:95:ff:ae:dd:8e:19:eb:06:d8:
95:14:24:32:9f:86:ab:31:e5:5d:e5:95:1f:7f:73:
1c:2d:47:ef:ab:1f:59:12:b7:40:d8:8e:8b:51:10:
48:f1:ce:6f:ce:df:93:96:2c:8a:1f:51:2b:9a:42:
e0:f7:d8:d7:8c:f3:9f:84:0c:d1:7f:90:ac:9e:8d:
9f:64:17:e1:18:63:ad:48:f6:f0:05:2e:dc:65:61:
74:66:e3:9f:5c:02:ea:cb:c0:c2:45:b5:af:9e:fd:
7b:99:09:8e:94:f9:50:34:e5:3a:15:c6:4c:c1:b7:
76:16:b4:0f:a2:ab:a4:34:c3:44:63:e3:4b:1f:82:
2f:51:6f:9b:1f:1b:45:2c:72:d6:6f:f6:0a:cc:ce:
fe:37:78:e9:5c:1b:73:de:5b:4e:09:c7:47:f7:cf:
97:a5:45:5c:25:2d:a4:06:14:32:73:a9:29:f3:1a:
ad:99:ad:bb:06:d3:f0:7d:c5:6e:42:92:0b:f0:35:
cc:aa:f2:8a:84:dc:c0:9a:44:58:58:eb:07:ea:61:
70:64:8b:dc:74:9c:62:d8:cd:06:24:fb:ac:c3:71:
8f:0d:85:13:6b:a7:f7:16:24:0e:75:e6:b5:e6:72:
48:f8:50:a0:8e:59:91:bd:14:d9:c1:98:6f:48:f8:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:62:21:6A:B9:87:84:B1:04:7B:83:2B:88:63:3F:43:1F:F1:5F
X509v3 Authority Key Identifier:
keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/MS5iIWq5h4SxBHuDK4hjP0Mf8V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.200.0/22
185.88.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:22:27:61:6f:d2:2b:a0:19:be:ee:17:ab:65:47:a6:33:32:
b8:a3:46:6f:0e:73:65:ea:c6:88:96:b7:19:d7:f0:f4:df:e1:
7d:98:3c:d8:bb:eb:15:1a:86:be:cb:ac:67:57:25:e9:b0:f3:
c3:5f:8c:c7:20:a0:a3:1c:21:30:51:6e:9a:7a:79:dd:e7:1e:
b2:5f:7d:3d:09:23:94:3e:c8:25:82:2a:66:88:30:8a:58:40:
af:d3:85:cb:6c:2a:a7:eb:b9:33:84:72:5d:c0:2b:8b:9d:4b:
0c:66:f4:b8:d1:1c:b8:b8:43:e0:f1:4a:09:c2:9a:f3:a1:63:
f9:dc:a5:e7:00:9e:61:c6:74:29:44:50:0d:4a:ae:57:4d:e6:
32:e1:4f:0c:b6:62:66:86:6b:e1:f7:3a:a4:ca:10:79:0b:e1:
96:de:63:0f:74:f1:03:bf:1a:98:d2:a8:ee:a5:f8:fd:8e:7d:
61:58:8b:4b:d6:26:24:4e:f1:f2:fa:2e:34:b7:a2:f5:d4:bd:
bd:3d:40:53:14:d0:76:0f:b4:24:7b:6f:12:75:01:14:52:2a:
74:08:19:22:df:a7:0a:4c:95:70:25:bd:a0:57:6a:54:96:ae:
7f:02:24:fe:00:c2:5d:74:6c:db:ea:5a:6e:3e:37:4b:fd:54:
14:4c:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:54 2024 by rpki-client on console-fra.rpki-client.org