Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/MKBv9tXINH5m5Ju4rAUZzUomkN0.roa
File: MKBv9tXINH5m5Ju4rAUZzUomkN0.roa (raw, json)
Hash identifier: AK6t/tpKDx3EHUAKJQ7TMNpjzB8piMyPBSjiu+HTFWc=
Subject key identifier: 30:A0:6F:F6:D5:C8:34:7E:66:E4:9B:B8:AC:05:19:CD:4A:26:90:DD
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 018CC424552416E1C6206FD2D7DE1BD892F9
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/MKBv9tXINH5m5Ju4rAUZzUomkN0.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42049
IP address blocks: 188.126.0.0/19 maxlen: 19
188.126.0.0/21 maxlen: 21
188.126.0.0/20 maxlen: 20
188.126.8.0/21 maxlen: 21
188.126.16.0/20 maxlen: 20
188.126.16.0/21 maxlen: 21
188.126.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:55:24:16:e1:c6:20:6f:d2:d7:de:1b:d8:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30a06ff6d5c8347e66e49bb8ac0519cd4a2690dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:38:14:b1:43:4a:be:1a:6f:e0:35:2f:5c:
0e:2c:2a:a8:59:c9:48:05:d2:5a:c3:8d:eb:b4:fc:
dc:f2:05:a9:c8:4f:0f:fb:db:21:3f:65:09:91:a1:
d6:f9:5d:4c:ab:31:21:bd:bd:01:06:b5:1d:a4:0a:
41:60:7c:3a:a2:68:f4:90:45:ce:77:fd:90:64:6b:
41:81:bf:bd:37:79:8a:29:0c:3d:1f:56:42:ee:6f:
b6:75:e6:03:40:95:91:78:de:85:8c:26:9c:a5:ab:
19:eb:d9:28:bb:b3:59:87:c0:69:af:97:56:f5:8f:
45:13:0f:65:4e:a6:22:fd:e3:8a:df:90:f0:f8:84:
b8:0e:c0:0b:78:71:7d:9a:41:37:fc:ff:e9:2d:2b:
79:1a:1e:ca:a1:d1:db:91:87:64:a2:e9:d1:2b:af:
e3:f5:80:ff:db:39:83:f0:01:e7:53:f5:c5:3e:a7:
55:90:55:e1:16:14:20:54:cf:33:b5:36:45:3e:5c:
af:06:79:ff:2b:6a:33:af:82:8c:33:dc:2b:db:b4:
d5:2b:85:b2:33:d9:35:06:1a:27:fe:d5:5b:a6:df:
d8:ce:5b:19:c8:ce:b8:db:10:ca:de:1c:bf:d7:0f:
ba:e0:ad:14:dc:71:89:ca:77:16:9b:00:f5:cb:ea:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:6F:F6:D5:C8:34:7E:66:E4:9B:B8:AC:05:19:CD:4A:26:90:DD
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/MKBv9tXINH5m5Ju4rAUZzUomkN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:2d:04:94:d9:ee:12:c5:f1:a7:52:32:a1:20:5e:94:4d:cb:
8e:b1:3b:7f:16:70:c9:1c:1d:5d:e1:0c:c7:fe:2a:3f:52:45:
e0:9e:22:17:b2:04:5a:6f:d0:a0:80:09:91:e8:65:26:dc:6d:
79:6a:f6:11:66:68:6e:16:b3:e1:58:eb:ae:7d:ff:b6:78:db:
72:77:af:23:85:9a:29:f7:68:ab:9e:13:79:79:b6:06:3a:a2:
af:24:db:29:60:3e:38:c2:6e:58:ea:66:35:f5:7f:75:71:14:
ad:ba:01:57:3f:23:38:88:e4:11:1b:89:27:01:ca:0a:ab:ea:
50:58:3f:77:a6:1c:8f:c7:7b:87:7c:59:a9:d7:35:da:fd:28:
02:80:8c:28:3f:80:02:22:51:32:8f:96:b0:25:c8:57:e0:a2:
c4:f4:05:d8:2f:b7:b8:79:8f:a8:99:6a:9d:b7:63:49:84:c4:
74:9f:f8:a9:e5:8e:67:c9:e2:c5:63:25:16:b7:5a:7a:a3:23:
46:62:59:7b:f2:56:83:2a:6b:52:9f:64:c9:08:ff:ff:5a:70:
c1:fe:4a:0f:98:e9:3e:24:b3:50:8c:de:0d:41:de:fa:4a:cc:
90:03:dd:e0:07:cf:69:83:59:c0:e4:bf:2b:29:71:7c:00:72:
1d:3b:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:40 2024 by rpki-client on console-ams.rpki-client.org