Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/mD_MywGlWauNS-HPPG-4UzzCDBA.roa
File: mD_MywGlWauNS-HPPG-4UzzCDBA.roa (raw, json)
Hash identifier: GHS9sHNuJ/MM5nxE3RXjJCmx/miDeh6F0kxwJ0mjrdg=
Subject key identifier: 98:3F:CC:CB:01:A5:59:AB:8D:4B:E1:CF:3C:6F:B8:53:3C:C2:0C:10
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE4DEC4FDEB5AC938A01FF470D769
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/mD_MywGlWauNS-HPPG-4UzzCDBA.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8739
IP address blocks: 213.145.98.0/24 maxlen: 24
94.155.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e4:de:c4:fd:eb:5a:c9:38:a0:1f:f4:70:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=983fcccb01a559ab8d4be1cf3c6fb8533cc20c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:47:92:90:fa:ef:94:68:82:77:71:8d:09:
93:bb:94:d2:b2:99:f0:7b:74:93:a0:bd:4a:98:ab:
6a:d0:e8:0e:74:e3:d9:f7:99:2a:7a:4b:cf:65:50:
47:29:cf:e0:3b:d6:fe:64:8f:e3:b7:9d:66:09:da:
8d:93:3d:42:b8:cf:d2:87:af:f6:85:d6:d3:54:86:
c8:14:d1:6e:dc:4d:4d:a6:c7:35:a6:e8:03:cb:49:
46:5e:d2:39:4b:21:27:5a:b9:76:d7:05:03:70:4c:
4b:2e:73:92:3d:70:82:00:bb:64:30:f6:31:17:09:
1a:b3:b2:c1:93:ed:c4:bb:96:f7:06:18:76:5d:46:
f8:1e:cc:8d:83:3a:ce:f8:0d:de:33:8e:79:5e:32:
24:98:4d:2a:96:3f:fc:13:0e:11:ec:bd:8e:06:b5:
29:6b:50:fb:c2:2b:b9:a2:e1:b3:ac:0c:f9:2f:e8:
8a:29:4e:99:40:4b:cc:0e:ae:26:df:6c:79:07:7e:
99:33:18:ea:a8:9a:93:2b:3f:3b:a9:89:f1:fe:94:
f8:42:0c:ba:66:f1:a7:90:7f:86:a4:55:37:12:85:
81:dd:6c:d1:00:6e:4c:1f:ba:ca:d1:e2:87:ef:30:
af:03:8b:cc:4c:b8:45:56:40:ba:d0:e6:e9:27:7f:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:CC:CB:01:A5:59:AB:8D:4B:E1:CF:3C:6F:B8:53:3C:C2:0C:10
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/mD_MywGlWauNS-HPPG-4UzzCDBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.37.0/24
213.145.98.0/24
Signature Algorithm: sha256WithRSAEncryption
43:34:5b:e1:25:73:4e:97:80:05:be:42:a5:6e:12:1d:65:50:
01:65:49:c8:7e:e5:df:c2:b3:ad:26:9c:72:52:5a:e7:f0:e8:
09:cb:3a:29:e2:2f:25:62:3f:88:d0:f4:78:e3:70:52:d3:11:
4e:c5:d9:30:13:50:74:2c:18:a7:ab:95:db:c0:14:d2:c5:aa:
8a:96:56:b3:dc:5c:93:9e:ca:ab:6f:51:b6:94:95:3f:6f:c4:
9d:fe:62:3a:00:91:39:22:80:3d:45:f3:62:33:17:39:52:62:
23:28:24:ad:9f:90:96:ff:51:13:55:83:c7:43:70:3e:ef:ed:
ec:ae:b5:fc:15:e4:4b:fb:de:84:49:67:50:7d:b8:11:d6:33:
af:df:17:e2:5a:ea:77:a2:ec:a5:33:34:3d:b0:f5:94:03:30:
bb:4c:20:18:11:fd:57:04:30:da:63:15:44:38:c7:68:bb:0f:
ef:1f:56:78:7b:55:9f:4b:9b:74:43:3e:24:26:c5:f1:2d:19:
4f:89:02:33:6a:c7:1a:80:f3:0f:2f:2c:39:1b:27:3f:c0:e7:
6c:2d:78:88:04:35:d7:c1:72:35:5c:dc:ee:37:08:16:08:6d:
d6:d9:3c:8e:25:d2:ab:06:06:8b:87:e7:2c:84:33:2f:bf:a6:
84:bc:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 04:29:35 2024 by rpki-client on console-ams.rpki-client.org