Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/M2SfFpw11_r35VmWo4BWGyivnPk.roa
File: M2SfFpw11_r35VmWo4BWGyivnPk.roa (raw, json)
Hash identifier: VQnrzwUP067BZAvsZDzNHflVQ8quEomKWmOCeMDpY4o=
Subject key identifier: 33:64:9F:16:9C:35:D7:FA:F7:E5:59:96:A3:80:56:1B:28:AF:9C:F9
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01915A570BD98625673BD5060D418F677B7D
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/M2SfFpw11_r35VmWo4BWGyivnPk.roa
Signing time: Fri 16 Aug 2024 08:38:59 +0000
ROA not before: Fri 16 Aug 2024 08:38:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206276
IP address blocks: 45.8.12.0/22 maxlen: 22
45.141.240.0/22 maxlen: 22
78.142.212.0/22 maxlen: 22
185.179.184.0/22 maxlen: 22
185.190.100.0/22 maxlen: 22
193.38.224.0/22 maxlen: 22
194.49.56.0/22 maxlen: 22
212.63.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:57:0b:d9:86:25:67:3b:d5:06:0d:41:8f:67:7b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Aug 16 08:38:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33649f169c35d7faf7e55996a380561b28af9cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:f2:21:4b:3c:82:0c:da:8b:88:6f:8e:00:
0e:de:50:5e:fe:3c:16:c6:48:d7:31:2f:03:1a:88:
fa:a4:11:19:f6:a8:f8:3a:81:83:7f:38:32:62:ad:
48:73:63:ab:c3:17:52:a9:ab:33:45:02:1b:39:be:
5b:b1:d0:19:aa:c7:24:0c:bf:7a:55:37:fa:6e:0a:
50:c0:bd:30:15:1c:95:0b:fd:a4:03:c5:c7:bc:92:
85:b6:71:74:fb:91:11:5c:b1:34:c9:f8:d0:c9:8a:
7f:b0:36:69:e8:45:61:5b:cf:0d:b9:9a:19:5d:19:
0e:5a:0b:59:d4:52:a9:e8:5b:9f:f5:33:a8:15:95:
30:91:a9:07:21:4a:7b:0c:f1:e8:37:d3:36:73:6d:
90:53:3b:a2:eb:bf:ce:72:8f:43:60:06:d2:3b:da:
5e:0e:0d:0f:50:02:4a:66:ec:8b:51:ec:1a:67:55:
66:ec:bd:ca:9e:6e:86:8e:e1:32:37:b9:71:03:8b:
0b:63:06:57:d0:95:22:f6:23:c3:a1:be:c6:dd:31:
b0:57:3b:39:0c:b9:ec:18:f5:ee:30:30:ba:2d:c7:
92:5a:a0:d5:6c:0d:b6:d7:53:d3:78:a4:a7:e3:ab:
88:e4:3e:01:ce:9f:58:da:b7:b8:42:69:65:b1:89:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:9F:16:9C:35:D7:FA:F7:E5:59:96:A3:80:56:1B:28:AF:9C:F9
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/M2SfFpw11_r35VmWo4BWGyivnPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.12.0/22
45.141.240.0/22
78.142.212.0/22
185.179.184.0/22
185.190.100.0/22
193.38.224.0/22
194.49.56.0/22
212.63.112.0/22
Signature Algorithm: sha256WithRSAEncryption
37:32:79:71:38:72:29:75:be:32:e2:f6:cf:fa:09:90:98:98:
19:70:2c:23:9e:d2:2c:0a:c4:9a:01:7d:c9:86:a8:91:75:57:
f7:ce:75:bd:84:87:89:a4:17:80:28:25:90:a7:28:28:d1:01:
18:92:51:a3:59:9c:d3:b6:e2:3b:a5:11:a4:aa:a0:f7:4b:78:
4b:7b:e9:fd:bc:89:60:f8:66:64:c9:07:c6:96:5c:53:2e:09:
66:c4:17:4f:4c:46:af:92:dd:63:48:d5:5b:84:86:e1:c5:1a:
e4:c3:23:c4:eb:86:67:98:45:44:5f:0d:f1:aa:fc:4e:77:9c:
f7:ef:a4:0f:f7:7c:c3:15:ff:be:36:83:4b:3a:59:ef:3e:be:
2c:64:d9:44:04:a8:17:dd:44:85:20:7e:33:8d:d7:48:27:d8:
b2:b7:36:c7:44:62:da:68:44:9b:32:b0:87:80:7b:7c:68:31:
9e:45:c1:03:83:a1:29:1b:9d:2b:8e:b5:3d:fa:d5:14:8b:3e:
10:c7:e1:6e:0c:77:ea:f7:c3:31:10:cd:e0:c7:b0:e1:a4:c2:
5b:a0:63:88:c4:0e:74:29:e9:77:18:71:87:0e:88:2a:14:89:
45:70:55:ec:df:cb:93:7e:c0:a9:08:36:5e:52:81:80:e7:18:
dd:29:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:46 2024 by rpki-client on console-fra.rpki-client.org