Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/MizR5OqCddJnF1z0-0QS_fm9Ng0.roa
File: MizR5OqCddJnF1z0-0QS_fm9Ng0.roa (raw, json)
Hash identifier: fx7592aOnJagezMugf1OBIWJwROP8rXCcarJj0jFWa8=
Subject key identifier: 32:2C:D1:E4:EA:82:75:D2:67:17:5C:F4:FB:44:12:FD:F9:BD:36:0D
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 018CC2DB4333CB558E75BA78801E4B1618B5
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/MizR5OqCddJnF1z0-0QS_fm9Ng0.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198682
IP address blocks: 193.39.164.0/24 maxlen: 24
193.39.164.0/22 maxlen: 24
2a0b:11c0::/48 maxlen: 48
2a0b:11c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:43:33:cb:55:8e:75:ba:78:80:1e:4b:16:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322cd1e4ea8275d267175cf4fb4412fdf9bd360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:7c:de:10:6f:78:bd:5c:bd:d7:31:56:96:
f6:c8:a6:e9:be:dc:50:b0:3b:60:35:0c:09:f5:4c:
18:e0:47:fa:c1:a5:78:6b:8f:fe:59:5a:c8:e3:de:
29:ab:e1:57:b1:c4:f9:a4:ae:53:99:73:0a:d7:bc:
4b:5b:d0:b9:ed:06:c9:2c:8d:d3:7b:c5:e5:61:48:
1d:95:ce:fa:c0:5f:c2:43:b3:e2:21:c0:fd:d8:d3:
ff:a5:7e:d9:fc:0d:12:36:51:3e:00:c1:17:d0:bb:
ba:f7:82:2d:dd:cd:b7:74:6e:ac:af:5f:f9:a5:54:
62:06:12:3c:a4:74:b3:9d:29:83:b4:d4:05:3e:42:
19:01:42:e1:5a:5b:41:31:2b:85:bc:f2:8e:56:ca:
5d:d1:74:87:b2:e2:ad:a8:b6:a6:8b:82:7f:e3:08:
92:57:8c:e3:d7:b9:34:65:0a:4a:42:28:ec:30:ba:
73:1e:cd:5a:70:9a:9d:66:b3:d0:d9:28:6d:3a:36:
ae:8c:48:a7:62:fb:47:69:eb:05:38:35:9a:2d:1c:
ec:e6:72:24:47:7c:b3:05:36:91:92:c5:5f:57:60:
e1:09:dc:a7:50:67:19:58:46:73:0d:95:d8:c0:d0:
cc:65:37:ba:fb:b6:1a:f4:37:c2:8b:91:d7:b2:5e:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:D1:E4:EA:82:75:D2:67:17:5C:F4:FB:44:12:FD:F9:BD:36:0D
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/MizR5OqCddJnF1z0-0QS_fm9Ng0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.164.0/22
IPv6:
2a0b:11c0::/47
Signature Algorithm: sha256WithRSAEncryption
5d:37:68:5b:85:68:c7:8a:29:87:a5:70:8c:37:7d:7f:35:66:
ff:71:a6:b0:5b:f3:07:eb:f4:27:b7:9d:c7:19:aa:59:a8:d4:
9d:e5:6c:8d:92:cf:00:d4:f2:49:d0:c9:8f:c0:3c:c0:18:40:
96:5b:95:4d:e3:04:a1:eb:45:b6:01:b5:08:81:b6:0f:56:e8:
78:37:52:01:33:dd:c2:e7:69:1b:cd:e5:39:cc:92:ef:50:72:
ab:f8:a4:d8:d0:ca:da:e0:81:ec:ba:c1:1c:27:12:05:52:59:
68:58:8f:c8:73:0e:5c:d2:bf:15:4d:d5:c7:8d:ee:1d:1b:9c:
e1:d3:78:3e:c9:d2:a9:26:29:89:de:7d:bb:2f:49:63:b0:a4:
3c:39:6e:5d:26:d6:fa:95:8b:0e:be:8e:04:61:49:5d:cd:80:
e2:fb:e4:1b:64:fb:e9:4b:25:5b:43:2e:82:b2:ca:e5:11:e9:
75:c8:b6:fd:53:89:b5:1c:4f:4e:3e:8a:33:ff:ee:9e:1f:a2:
95:20:db:02:21:ba:b9:54:35:91:a5:9c:77:f1:0d:51:6b:b5:
64:60:07:d1:3c:a0:64:49:d5:ad:7a:1f:24:9b:33:5a:3c:77:
a3:b3:fa:52:62:6d:c2:9a:b7:7e:53:c4:f8:e3:d7:a6:4c:3c:
23:cd:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:00:18 2024 by rpki-client on console-fra.rpki-client.org