Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/MikwiNMqZgBnlab0AyraAotWHEE.roa
File: MikwiNMqZgBnlab0AyraAotWHEE.roa (raw, json)
Hash identifier: pZoC8sme6fgr1zm746I5ZeB5sUKSLbb3MrioN6S70+s=
Subject key identifier: 32:29:30:88:D3:2A:66:00:67:95:A6:F4:03:2A:DA:02:8B:56:1C:41
Certificate issuer: /CN=755397e4fac505622aba4868b9091c4e3ffff6fd
Certificate serial: 018CC9BC4A015A9A2DBD3628BCDA345BB3AE
Authority key identifier: 75:53:97:E4:FA:C5:05:62:2A:BA:48:68:B9:09:1C:4E:3F:FF:F6:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVOX5PrFBWIqukhouQkcTj__9v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/MikwiNMqZgBnlab0AyraAotWHEE.roa
Signing time: Tue 02 Jan 2024 10:33:29 +0000
ROA not before: Tue 02 Jan 2024 10:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206479
IP address blocks: 2001:67c:16c8::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/dVOX5PrFBWIqukhouQkcTj__9v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/dVOX5PrFBWIqukhouQkcTj__9v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVOX5PrFBWIqukhouQkcTj__9v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4a:01:5a:9a:2d:bd:36:28:bc:da:34:5b:b3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=755397e4fac505622aba4868b9091c4e3ffff6fd
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32293088d32a66006795a6f4032ada028b561c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:fd:47:60:b6:46:b9:9b:03:9d:58:f8:7b:
ff:e1:90:7c:9d:ea:c2:45:93:b9:2c:32:e1:bc:f7:
6f:cc:ad:a3:e8:eb:35:47:1a:d6:c6:6c:e2:5a:4e:
f5:1c:a7:45:73:d5:27:9b:e3:fb:c2:1c:1c:3e:4c:
78:05:17:bd:9e:b3:a1:ae:39:03:76:77:d0:df:ee:
30:7e:77:51:66:d8:6a:66:50:e3:03:80:19:22:f5:
7c:b6:bc:64:2e:eb:53:e6:77:66:38:c6:71:59:b3:
0f:ff:87:0a:51:82:27:98:44:23:9a:82:f7:db:8c:
27:4e:70:53:9a:87:76:e5:26:04:83:35:df:1a:09:
df:72:ca:bd:68:05:45:ae:72:a7:8d:c8:df:31:99:
58:8c:b3:16:4b:ce:09:ca:26:c9:0f:f1:f7:09:c0:
3b:1a:d3:d7:bf:c1:5f:27:40:1a:79:7e:1d:23:a6:
4b:db:c6:b2:27:80:58:9d:1b:6c:ea:6c:22:8a:90:
02:91:b5:3d:0b:c4:10:65:22:45:66:a6:eb:19:24:
c5:d0:53:6a:72:fe:ec:bf:c9:f3:c5:f1:ad:d5:10:
3e:38:d7:79:43:d7:30:a5:af:8f:98:b1:63:57:8d:
ce:20:0c:8d:d5:7a:80:c0:51:8f:b1:33:72:02:40:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:30:88:D3:2A:66:00:67:95:A6:F4:03:2A:DA:02:8B:56:1C:41
X509v3 Authority Key Identifier:
keyid:75:53:97:E4:FA:C5:05:62:2A:BA:48:68:B9:09:1C:4E:3F:FF:F6:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVOX5PrFBWIqukhouQkcTj__9v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/MikwiNMqZgBnlab0AyraAotWHEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f8aa40-23e1-45f6-84f3-08b4205067b3/1/dVOX5PrFBWIqukhouQkcTj__9v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:16c8::/48
Signature Algorithm: sha256WithRSAEncryption
77:69:6f:31:cd:b4:6a:62:43:03:d9:14:da:a6:24:cf:d8:a0:
58:a2:dc:72:f2:3b:d1:25:2e:f8:3e:03:51:f0:6b:da:22:95:
d3:67:e7:da:29:51:d9:f3:17:77:b9:18:11:e9:23:16:52:36:
2e:e1:9e:8b:6e:7e:de:20:36:de:12:2d:c8:35:93:6e:10:6a:
97:2f:ea:9e:dd:28:5b:9f:4d:b9:69:c6:58:96:ff:b3:a0:6c:
dd:e8:67:4c:18:76:5c:4f:76:58:56:bb:68:81:11:6a:69:c4:
96:b2:ad:4c:b1:72:12:48:8e:3f:34:07:47:07:ed:c9:e6:92:
bb:58:29:c7:25:d8:f4:56:1d:b3:eb:64:53:a1:80:2d:b2:5c:
99:50:d0:be:0f:06:a7:9f:67:e0:8d:9c:a4:0b:01:45:74:c8:
e0:32:e3:ff:84:6b:91:9f:c5:ea:f0:8e:01:38:a5:7f:07:bc:
f9:27:cb:f3:ca:75:37:32:26:d0:de:c0:3c:25:67:18:6a:41:
fe:cf:ee:41:bf:54:1e:8e:3a:e1:00:1e:b1:f1:75:ce:d2:01:
4b:27:8c:03:3f:6e:2e:cd:2d:40:6a:83:2d:10:87:0c:40:05:
96:57:c1:fa:e2:27:e3:95:40:70:58:79:c8:ef:8a:47:d0:38:
82:5a:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:27:28 2024 by rpki-client on console-fra.rpki-client.org