Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MzQJIavXhS__nH50Nt80DOENTTA.roa
File: MzQJIavXhS__nH50Nt80DOENTTA.roa (raw, json)
Hash identifier: bPp96TBTgq6ffn024TZFiCiS2CNkeZa27eOIuy+MVbE=
Subject key identifier: 33:34:09:21:AB:D7:85:2F:FF:9C:7E:74:36:DF:34:0C:E1:0D:4D:30
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1635789F42640049556B6984AD6D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MzQJIavXhS__nH50Nt80DOENTTA.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57016
IP address blocks: 95.46.80.0/20 maxlen: 24
31.148.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:16:35:78:9f:42:64:00:49:55:6b:69:84:ad:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33340921abd7852fff9c7e7436df340ce10d4d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:96:81:10:0e:d5:fd:cc:31:d4:6a:a7:a0:
ed:88:02:70:32:0e:b9:26:98:1d:88:d3:90:95:0d:
3b:1a:ab:35:8e:27:11:ee:21:86:fd:09:a5:32:ce:
cf:67:e1:ac:0b:07:76:79:93:dc:9a:56:0d:dd:b8:
cb:39:d8:94:e2:5c:50:e7:2a:63:bb:0c:38:55:f7:
13:45:7c:b9:f9:b0:ac:ed:90:9b:f5:be:90:62:1c:
0a:07:ba:17:b3:c9:44:41:74:9f:c4:23:53:64:07:
c4:ed:c4:a4:61:bc:35:7a:f2:e3:5a:e0:03:68:57:
60:26:5b:15:dd:ee:27:8e:a7:f8:e4:cc:db:11:cb:
f9:5d:14:a9:02:df:4c:ed:23:bc:5a:fe:2f:02:d6:
f7:d9:3b:ef:83:d2:da:84:c8:52:83:e6:f9:ac:aa:
0f:73:26:b3:21:c8:1f:14:62:80:09:f0:84:e2:37:
d9:6f:4a:a2:50:9d:d5:e6:9b:d1:a4:4c:e4:6a:0f:
d0:0d:3f:22:58:0f:23:c7:d8:58:66:15:b9:e2:ff:
3c:22:8d:f7:b0:d3:5d:0d:49:1d:a7:2d:16:52:c8:
0f:18:46:62:e5:4a:8f:34:65:58:8a:27:e8:e3:2a:
af:d1:7d:51:43:6f:39:8c:29:18:e0:25:5f:b4:cc:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:09:21:AB:D7:85:2F:FF:9C:7E:74:36:DF:34:0C:E1:0D:4D:30
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MzQJIavXhS__nH50Nt80DOENTTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.160.0/21
95.46.80.0/20
Signature Algorithm: sha256WithRSAEncryption
61:02:2c:c8:5f:24:96:9e:8b:8b:b7:d7:d9:ec:d4:4a:c3:ce:
ae:21:bd:1f:42:98:a3:bf:c2:58:e6:d9:b0:16:40:12:e0:ef:
22:32:bb:50:ee:c1:08:b4:fc:22:b0:ef:a9:12:c4:66:41:7c:
34:91:2e:7b:bf:c3:19:9a:9a:ff:c8:60:7f:72:21:67:3e:16:
ef:ca:61:48:70:a1:80:32:c1:b5:54:b5:f4:df:d8:e9:84:d0:
e3:c9:57:f9:3f:c9:ea:6c:c3:7f:3b:6a:97:30:81:4b:17:16:
61:76:4f:ca:37:86:8e:d2:d7:61:cb:a5:c6:79:1c:2c:a5:31:
80:68:07:d7:00:d2:d9:2e:41:49:3b:85:d3:8b:33:46:3e:1c:
a3:8b:20:52:56:51:8d:88:bd:f1:9e:ca:e6:c6:75:ec:08:7f:
cc:7e:ff:62:1b:ab:72:24:b1:30:8a:bc:a5:17:fb:f3:77:a0:
86:a6:e8:96:40:54:56:2b:5d:4b:94:54:31:b7:9c:be:b0:d8:
0a:31:1b:9d:87:01:b5:45:cc:82:e4:1f:86:b0:da:1b:5e:96:
4b:4e:be:71:a6:74:24:5b:33:7a:d6:e1:74:c8:2f:51:06:fb:
5e:f8:8b:ae:cc:59:bb:67:fe:54:c7:84:36:a3:0a:3d:bb:60:
3c:21:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org