Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MYGXdEFmwTfMr1wmsb6VE-XZYFU.roa
File: MYGXdEFmwTfMr1wmsb6VE-XZYFU.roa (raw, json)
Hash identifier: guXxoGptUbqel+4trI+h9VR70yMUk6DU/LdFkLR3Gwg=
Subject key identifier: 31:81:97:74:41:66:C1:37:CC:AF:5C:26:B1:BE:95:13:E5:D9:60:55
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DB2110D488FB22805D8D95F55D1D65728
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MYGXdEFmwTfMr1wmsb6VE-XZYFU.roa
Signing time: Fri 16 Feb 2024 13:17:58 +0000
ROA not before: Fri 16 Feb 2024 13:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216146
IP address blocks: 31.210.41.0/24 maxlen: 24
188.132.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:11:0d:48:8f:b2:28:05:d8:d9:5f:55:d1:d6:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 13:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=318197744166c137ccaf5c26b1be9513e5d96055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:e7:c9:25:f1:f7:93:4b:a8:db:71:ca:b2:
9e:21:93:3b:27:c9:e4:96:fa:4c:ce:d3:c1:a4:9f:
fd:b1:a2:63:e1:74:77:6b:3a:de:27:89:6d:2a:9c:
e8:12:b8:01:0a:89:5a:5e:3f:ec:c2:5f:86:f8:02:
57:46:bb:84:f9:77:8b:7f:dd:71:a5:b5:8e:1b:0b:
17:d1:00:1a:db:ef:f8:7f:08:8c:51:89:b0:cc:e4:
2e:50:f0:6b:cd:ad:5e:cd:99:52:1a:5a:6b:e1:19:
be:5c:22:bd:aa:f4:1a:e9:8f:91:73:95:1f:e2:e4:
a0:fe:57:61:54:41:a6:f3:1e:36:f6:de:ef:ca:e4:
5b:e4:df:34:23:86:1c:9b:18:4e:48:c7:fa:02:9b:
51:41:6e:fb:b2:7c:89:e2:36:f9:dd:4f:34:57:b2:
0e:a9:97:1b:cc:b1:7d:1e:95:f6:a2:61:8f:81:bc:
2c:45:3d:20:91:ae:be:8a:4a:bf:8d:d9:98:98:66:
dd:71:07:c4:29:f5:12:4d:01:f2:1a:51:24:f0:d9:
44:5d:0e:d7:a6:d1:03:58:89:7c:60:bb:fa:1a:22:
2d:47:4b:77:38:13:85:7c:e4:cb:68:de:c4:8f:dc:
32:63:45:df:a6:81:29:c9:45:12:e2:21:2f:b5:67:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:97:74:41:66:C1:37:CC:AF:5C:26:B1:BE:95:13:E5:D9:60:55
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MYGXdEFmwTfMr1wmsb6VE-XZYFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.41.0/24
188.132.240.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5c:64:eb:9e:a3:0f:22:df:57:fd:39:a6:ad:75:91:5e:48:
70:39:f2:1d:ce:01:94:cb:98:f4:83:3b:58:94:ec:ad:70:b1:
60:ad:37:e4:5f:f9:6e:b0:c2:fa:06:c5:48:65:b4:bf:f7:ed:
5e:68:42:db:9c:7e:30:63:40:86:1b:f3:0f:62:72:27:90:94:
29:20:b1:e1:f2:c9:73:da:57:06:11:b0:eb:bc:af:4c:5b:c9:
9a:89:bd:8c:ff:d3:0c:7e:0b:00:29:33:eb:01:9e:2d:ae:4e:
78:a0:dc:13:d1:66:98:6f:fc:60:09:a5:49:d5:12:57:b5:b9:
64:5d:9c:7e:c3:90:5a:f7:fe:1f:be:f9:e4:e1:9a:88:c6:ff:
6b:f3:2d:51:fe:e5:e2:4f:73:9b:9e:e6:74:35:17:c8:ed:50:
ba:b3:38:45:c8:fc:93:67:33:f8:75:30:1c:d9:38:62:0f:3a:
f3:cc:b8:a6:0a:95:38:26:cc:37:d5:8e:25:77:77:ae:6e:45:
43:8d:79:f4:ec:85:ce:2b:c5:e9:0b:88:6d:86:ff:5a:11:6c:
c2:06:60:d7:86:44:02:3e:09:74:2a:32:f1:2b:36:a3:df:52:
5f:d8:97:88:0d:59:d9:7d:f2:e8:f3:b5:4d:37:9e:21:da:43:
f7:93:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:06:45 2024 by rpki-client on console-fra.rpki-client.org