Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/M5qvFaZa0jjX6USKWgwabLQ71GA.roa
File: M5qvFaZa0jjX6USKWgwabLQ71GA.roa (raw, json)
Hash identifier: WeMMEHXwKsigOeHICITkoK6YmZYDY/LxBORSEwZHG14=
Subject key identifier: 33:9A:AF:15:A6:5A:D2:38:D7:E9:44:8A:5A:0C:1A:6C:B4:3B:D4:60
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F5381E9F59FDAA108E2620B05C7CF
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/M5qvFaZa0jjX6USKWgwabLQ71GA.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.77.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
87.251.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:53:81:e9:f5:9f:da:a1:08:e2:62:0b:05:c7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=339aaf15a65ad238d7e9448a5a0c1a6cb43bd460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:35:7e:96:c6:24:b6:27:54:84:43:6e:11:
ab:92:6f:00:4e:e1:92:e5:fb:d9:db:46:17:40:69:
87:8b:5a:98:70:a0:c2:2d:c4:c2:37:8c:1c:a9:54:
44:54:ec:9a:4f:5c:e3:2c:ee:26:74:f3:3d:68:2e:
8b:e8:b4:5c:43:53:83:91:0d:22:bf:ec:9e:b0:99:
67:ff:eb:d6:41:65:30:e2:29:4f:1d:97:3d:ac:05:
e3:43:91:89:6c:4c:98:8e:5e:9a:99:b9:79:02:41:
94:4a:3c:23:a2:27:7c:21:eb:e8:e4:b9:ed:84:e1:
2e:36:fc:86:1d:c7:cf:59:81:e4:ef:9c:4b:e3:25:
51:26:57:20:96:18:4e:7b:33:f9:1c:38:ef:6c:b7:
1b:27:bd:67:a8:22:e5:ea:1f:fe:c4:8b:12:76:22:
f2:1a:fb:8a:e5:b9:95:4e:75:0f:73:e2:32:22:eb:
bc:e4:39:cf:59:8c:7f:0d:8e:50:69:ce:f4:27:cc:
f0:19:0e:5a:ba:78:97:7b:dc:fe:8e:12:00:bc:97:
ee:e4:3d:75:8b:45:53:2f:15:39:13:26:ff:62:5b:
96:80:0b:9b:62:3b:69:45:b1:c5:63:b2:ea:26:56:
1d:92:3e:4b:ee:06:40:9e:5c:b0:51:b9:4f:e3:9b:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:AF:15:A6:5A:D2:38:D7:E9:44:8A:5A:0C:1A:6C:B4:3B:D4:60
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/M5qvFaZa0jjX6USKWgwabLQ71GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
80.66.89.0/24
87.251.77.0-87.251.78.255
87.251.88.0/23
193.37.70.0/23
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ad:95:14:59:13:33:c9:c1:1d:54:7f:40:b6:12:ae:5e:35:
ec:05:53:39:dc:c8:10:8f:dd:d3:a9:dd:8e:88:7c:94:4b:84:
97:cd:d3:a3:c5:18:60:e7:6d:bd:93:d9:68:5c:8a:d1:20:1a:
0b:14:aa:fa:43:15:85:e8:04:40:cd:1b:88:07:24:37:15:8e:
4c:e1:12:de:0b:19:a4:e9:13:58:3f:dd:7b:bd:42:5c:7e:62:
19:36:d2:f8:cd:cd:ea:8c:0d:9e:7d:c8:3d:60:77:9e:9a:9b:
4a:69:ea:37:ab:2d:af:da:05:e7:2b:bd:83:24:4e:6a:ac:02:
bf:a7:93:48:de:11:9d:00:95:03:f3:77:79:df:ae:1f:5c:90:
b1:b8:f8:97:d2:83:bd:4e:69:24:5e:5e:dc:cb:f3:bd:17:ab:
66:b1:0b:24:ab:f9:05:24:b8:6d:f2:cd:62:bf:b8:9f:da:11:
5a:c9:48:9c:92:18:04:3d:1c:df:52:88:b9:4b:34:8a:d4:ec:
f3:4a:48:d2:e7:4b:f8:3c:5e:d2:18:53:f5:de:93:b9:5e:94:
28:8d:e1:d8:12:0e:c9:07:8c:41:e7:db:8a:81:bf:41:90:4a:
ab:bb:29:72:7b:ea:38:8f:9e:d1:6d:28:e8:3c:a2:0f:d3:db:
ee:bd:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 11:57:04 2024 by rpki-client on console-ams.rpki-client.org