Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/mCU_avQj70ucMkSY5rHMBEWholI.roa
File: mCU_avQj70ucMkSY5rHMBEWholI.roa (raw, json)
Hash identifier: mup2rzijXXxJU811waYiBO+99zCpt8/xuQLA9HG8VZs=
Subject key identifier: 98:25:3F:6A:F4:23:EF:4B:9C:32:44:98:E6:B1:CC:04:45:A1:A2:52
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 0191DAEAD623D319143362BB9A114DAFECF6
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/mCU_avQj70ucMkSY5rHMBEWholI.roa
Signing time: Tue 10 Sep 2024 07:51:48 +0000
ROA not before: Tue 10 Sep 2024 07:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15836
IP address blocks: 5.32.168.0/21 maxlen: 24
87.255.64.0/19 maxlen: 24
185.46.60.0/22 maxlen: 24
212.28.64.0/19 maxlen: 24
217.26.160.0/20 maxlen: 24
2a03:a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:ea:d6:23:d3:19:14:33:62:bb:9a:11:4d:af:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Sep 10 07:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98253f6af423ef4b9c324498e6b1cc0445a1a252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:3d:48:5d:92:2a:7f:e1:e9:5f:46:0e:ee:
b6:86:2d:50:86:d3:7d:b1:cb:4a:c0:65:04:5c:34:
76:2a:17:b5:13:be:4c:76:1a:19:10:ec:52:29:99:
9d:53:49:c0:d6:bd:b9:f0:64:d7:1f:7c:c9:14:26:
40:28:32:32:72:b1:6b:e8:55:b4:eb:e1:36:03:2e:
9f:49:2a:bd:62:d0:62:12:9a:fd:1a:e4:78:d2:75:
86:d9:51:be:ca:64:8d:4b:95:4e:72:af:00:fa:3f:
d7:e9:9e:65:32:9d:1c:b4:6d:3d:64:f2:ec:09:fe:
34:0f:44:09:72:41:e6:cf:7a:27:03:b0:64:88:65:
56:ab:f2:08:ad:6c:64:b1:f6:6f:82:72:f6:d8:30:
57:0e:8c:d7:80:d7:fd:bc:27:16:22:f0:f7:ed:4e:
23:f8:44:36:3a:de:7d:01:1a:cc:f6:ab:b4:8c:88:
8e:e2:df:82:b7:7f:e0:82:d3:43:70:f4:6c:82:b8:
7b:fc:d9:a6:e9:87:f6:06:93:09:90:04:31:7f:6a:
59:f2:aa:d3:9f:b8:5f:fa:aa:d2:dc:c3:e1:e8:e6:
85:29:e5:c1:92:3a:0c:2e:28:d8:6e:79:b4:d5:c6:
9b:a7:94:7c:35:9e:e1:59:c3:0d:3b:62:5e:b0:bc:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:3F:6A:F4:23:EF:4B:9C:32:44:98:E6:B1:CC:04:45:A1:A2:52
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/mCU_avQj70ucMkSY5rHMBEWholI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.168.0/21
87.255.64.0/19
185.46.60.0/22
212.28.64.0/19
217.26.160.0/20
IPv6:
2a03:a80::/32
Signature Algorithm: sha256WithRSAEncryption
00:7d:6c:03:32:69:ce:eb:cc:ee:97:2a:9e:95:55:a7:21:47:
4c:ee:1b:04:ca:b4:e6:94:ae:16:9d:78:3b:b0:9f:2c:de:79:
e6:bc:87:b7:2a:29:2f:67:b6:bb:38:2a:29:a7:52:7f:fe:86:
0d:b7:da:11:01:a4:e9:fb:f2:ee:db:49:fb:9c:4a:0b:fa:14:
ed:e0:f3:1f:07:70:1e:48:7a:cf:14:c9:a9:67:89:e3:cc:b2:
8b:04:a8:89:ab:ae:4c:79:2d:d6:ef:9c:75:f4:5f:9c:97:8d:
b0:80:95:59:35:67:df:57:dc:12:84:67:e2:ad:55:ab:90:2a:
b1:65:fa:9d:9a:64:25:e2:36:e4:54:51:6a:6f:ae:9e:e1:7c:
69:52:29:77:f8:23:f9:dd:97:92:5d:0f:24:c5:92:6c:e8:a9:
1c:f0:be:f3:a1:c9:d4:1c:53:d7:b3:51:b6:41:0a:b3:a9:0b:
bc:a5:6d:89:89:34:5a:07:62:2e:76:3b:81:e8:b3:a1:44:ca:
6a:2a:50:66:34:9b:e9:6a:b4:07:e9:26:c5:e5:d3:eb:34:eb:
f5:aa:92:91:8b:76:c2:ed:ec:0c:18:d0:39:5d:6c:2d:fe:bb:
36:85:4f:26:6b:67:5d:33:78:29:a1:0c:c7:c5:14:89:05:72:
22:aa:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:00 2024 by rpki-client on console-fra.rpki-client.org