Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mV2EQMpp60mRbBmezJbkX8cVF8w.roa
File: mV2EQMpp60mRbBmezJbkX8cVF8w.roa (raw, json)
Hash identifier: b4ONzzDPop5ZwdPNezqW5jPBQ3B3ygSAOVWpsymelpI=
Subject key identifier: 99:5D:84:40:CA:69:EB:49:91:6C:19:9E:CC:96:E4:5F:C7:15:17:CC
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A3A3866DFC8BCC843ED0D12EB944A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mV2EQMpp60mRbBmezJbkX8cVF8w.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 176.221.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3a:38:66:df:c8:bc:c8:43:ed:0d:12:eb:94:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995d8440ca69eb49916c199ecc96e45fc71517cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:c6:17:fc:30:90:ec:8a:d7:ab:74:af:c6:
db:e0:6e:c2:34:16:a9:9b:49:26:9f:17:4a:98:f4:
8c:5a:cf:8a:f3:24:55:1f:e4:e8:43:42:b7:d1:33:
76:76:aa:ce:35:6c:1c:ea:23:d8:17:4f:91:b8:de:
c6:fb:c9:2c:73:c1:a9:c7:f9:b0:68:87:ae:d1:9f:
11:78:57:7c:ff:55:23:dd:1e:d9:bf:a8:c1:e5:e7:
f7:1f:c4:87:2b:a6:ee:d6:02:7e:f4:97:d4:6d:1b:
27:e2:55:7b:1a:ec:a9:9f:8e:64:64:3a:3e:40:da:
5c:68:ba:da:98:34:02:2c:81:b6:50:7a:74:a2:b5:
bd:e2:77:47:02:19:4e:16:e7:28:83:21:b2:2f:b0:
1a:d6:65:49:8c:9d:40:37:5f:89:11:17:35:fc:34:
7e:2d:fc:19:bc:c4:a9:d5:41:10:42:0b:ba:3c:31:
2f:f3:e0:9b:51:3a:d8:53:e4:7c:10:e1:5b:77:d5:
98:20:f6:49:02:44:3a:07:3f:ef:4a:ac:18:5e:da:
8a:d1:2d:1e:7d:02:48:51:0f:96:ef:e0:8e:64:f1:
9e:fe:b7:b0:24:d9:57:80:45:28:15:21:27:e8:f3:
49:1c:d2:5e:ab:18:e6:b0:a8:a0:10:46:64:5d:95:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5D:84:40:CA:69:EB:49:91:6C:19:9E:CC:96:E4:5F:C7:15:17:CC
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mV2EQMpp60mRbBmezJbkX8cVF8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.30.0/23
Signature Algorithm: sha256WithRSAEncryption
21:4e:61:24:d5:c8:3b:dc:a9:7a:00:01:ab:97:08:c3:2f:c0:
0b:6d:39:14:7a:96:d6:24:a0:27:28:d1:0e:07:74:c3:d7:3b:
1a:ae:50:1b:40:c2:11:e6:5f:dd:28:ea:e0:ec:f9:41:21:84:
f9:fd:76:5a:30:b6:1f:02:ba:c3:3c:c5:a8:88:92:55:61:51:
09:18:76:bf:a8:02:f1:27:fd:48:89:9a:27:18:83:84:5a:d4:
fa:d2:31:48:23:c5:4a:2d:f9:32:34:c5:87:1e:76:cd:ab:7c:
1c:73:ec:06:bf:69:48:af:99:bf:87:0e:67:bc:e0:97:e9:21:
c3:de:6e:b5:78:c6:14:e9:9b:2c:dc:66:cd:8d:c0:4d:ab:81:
9f:24:ab:bd:69:46:3a:bc:87:c0:09:82:b8:4c:78:d9:9f:0f:
4e:92:1d:a4:c3:ba:48:38:48:40:10:2a:99:1b:2d:c0:47:d5:
26:5c:cb:1a:0a:5c:dd:cc:02:e8:f3:65:bc:2b:69:56:6a:6b:
b8:e8:62:80:f7:9a:f2:2f:ac:bb:fb:3c:c0:45:d2:56:1b:dd:
b8:5c:c4:84:5a:ed:37:72:96:16:4c:fd:f5:9c:83:f2:7e:1b:
6d:78:4a:4e:b1:2a:e3:68:8b:18:cf:80:1d:4d:2c:5a:ad:bd:
78:0e:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:43:18 2024 by rpki-client on console-fra.rpki-client.org