Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/MB6yCe80KSSHfXA9345T-61P_Y8.roa
File: MB6yCe80KSSHfXA9345T-61P_Y8.roa (raw, json)
Hash identifier: /6F2TRQI2g49lzqnMdQQhr4pRzpPgb8uOB8Dj87x0S0=
Subject key identifier: 30:1E:B2:09:EF:34:29:24:87:7D:70:3D:DF:8E:53:FB:AD:4F:FD:8F
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 018CC2DAF3A05D685847B3342CDA3D99A513
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/MB6yCe80KSSHfXA9345T-61P_Y8.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209948
IP address blocks: 212.81.52.0/24 maxlen: 24
212.81.55.0/24 maxlen: 24
212.81.53.0/24 maxlen: 24
212.81.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f3:a0:5d:68:58:47:b3:34:2c:da:3d:99:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=301eb209ef342924877d703ddf8e53fbad4ffd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:75:6f:eb:84:2c:96:1e:1b:77:db:ba:50:
98:ed:9b:f8:c0:28:1c:af:c1:ab:a1:c2:46:06:aa:
8e:b7:a2:d7:05:41:fb:0c:be:2a:22:bd:ca:2b:f5:
dc:5b:f2:86:a4:d1:11:d4:ae:9a:ca:e4:bc:b5:8d:
80:12:67:df:7b:7c:fc:7f:2a:13:e0:d7:10:59:c2:
7e:23:4a:03:cd:d7:3f:75:da:b9:dd:79:51:22:2b:
bc:50:8b:d1:17:d8:ef:80:53:e7:2a:48:dd:aa:55:
8f:61:18:45:49:6f:bc:69:61:6c:9c:73:81:3e:ef:
5f:f9:15:b5:ad:d7:b5:c8:39:05:3e:6d:45:ca:57:
3b:7a:a2:46:c8:e8:17:2c:38:f2:20:16:03:93:83:
48:1f:82:c7:21:01:50:e0:b8:c4:2e:29:dc:7f:95:
a4:8f:f9:88:6b:bd:00:9f:aa:2b:0f:c9:3c:5a:a5:
02:0e:13:ee:6b:43:ff:6e:3e:1b:80:be:42:a9:07:
73:d4:97:e7:06:ed:e4:d9:00:c5:21:41:5f:61:cf:
64:d8:20:89:4e:92:2c:ab:ac:39:f6:22:1f:9a:90:
f4:33:36:41:17:f4:6b:a5:e3:6a:b7:6e:88:61:be:
65:de:31:95:f2:f7:aa:73:80:a7:0d:5e:a4:0c:56:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:B2:09:EF:34:29:24:87:7D:70:3D:DF:8E:53:FB:AD:4F:FD:8F
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/MB6yCe80KSSHfXA9345T-61P_Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
af:0b:e7:f0:69:27:67:43:bf:47:45:ad:74:0e:b8:27:81:7d:
a1:1c:3d:0e:bf:d6:15:83:2f:06:fa:1a:cf:be:99:7b:a5:16:
32:a8:d0:01:75:b9:0e:aa:09:e6:a1:e7:29:74:40:f5:37:8f:
11:10:9d:c9:30:7d:ed:53:43:01:7c:a2:fb:ec:19:f1:3c:97:
ee:c2:66:40:65:f6:ad:b8:67:f9:db:18:6c:72:d4:80:a2:02:
e7:f2:73:31:16:b3:a4:bf:47:50:1d:ab:19:af:20:43:c1:f6:
c5:b6:51:73:a7:e1:d5:1d:7f:2a:9d:e8:e6:78:f8:23:42:8d:
95:fe:16:f8:d0:ac:0e:5f:d3:7d:00:d0:17:49:02:0b:37:e5:
e6:c2:29:bc:a9:7f:3d:12:5d:06:cd:ec:a1:5b:dd:89:8a:65:
ea:4b:85:95:02:b4:f1:57:46:0c:fe:7d:4e:7c:e8:a1:f7:81:
6a:cf:92:90:2c:87:a9:2e:06:1e:27:2b:b2:2d:5a:5e:f2:19:
4c:b4:2a:62:42:d8:79:3f:b3:89:08:51:57:67:eb:bb:a7:e6:
19:a6:cd:52:d8:15:c0:04:ce:6f:ca:8c:83:06:63:57:b3:6b:
b8:97:8d:9a:c1:59:c8:c0:38:dc:dd:00:5d:03:d6:88:53:0d:
ab:c6:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:04:21 2024 by rpki-client on console-fra.rpki-client.org