Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MWAdI_btbLAscEBt7AWA74PLqVM.roa
File: MWAdI_btbLAscEBt7AWA74PLqVM.roa (raw, json)
Hash identifier: 5e9knzZcHyIMScpiDhPYO/4nl+ZEObHaqtgEiQYUOs0=
Subject key identifier: 31:60:1D:23:F6:ED:6C:B0:2C:70:40:6D:EC:05:80:EF:83:CB:A9:53
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68B682609C8ADC6054FA317217B57
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MWAdI_btbLAscEBt7AWA74PLqVM.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205754
IP address blocks: 95.85.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8b:68:26:09:c8:ad:c6:05:4f:a3:17:21:7b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31601d23f6ed6cb02c70406dec0580ef83cba953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:f9:4f:d4:5c:24:57:4f:fb:b1:6e:07:64:
01:52:81:55:00:1c:f7:18:e0:e5:34:7b:84:58:f1:
45:b4:77:4d:58:e4:a3:82:6a:41:e0:cd:ab:dc:2b:
38:9c:63:32:ed:3b:71:02:12:c5:2a:bb:9e:97:a0:
f6:5d:c0:ef:b1:4e:08:71:25:9b:62:a3:47:6d:22:
89:54:68:70:aa:b3:0e:d2:1f:e6:db:0f:02:9f:d6:
a4:ee:71:84:3c:a7:13:8c:61:fd:eb:21:70:6c:90:
fe:17:73:d8:96:07:3d:64:4b:2e:4b:9a:2f:c5:ca:
09:5c:6d:ae:a5:0c:e2:78:90:2f:4c:e7:59:8e:f7:
21:50:3d:d8:18:89:aa:70:60:5a:e8:a8:1d:79:23:
c8:db:1a:d0:16:04:04:4a:80:40:42:5b:94:3d:30:
2a:26:75:20:05:7b:ca:8c:25:de:4c:b4:17:38:a5:
96:fc:9e:14:14:b7:1b:02:11:dd:dd:94:74:43:2f:
4c:d6:c3:ef:89:8a:ae:fe:82:a4:bf:a3:5a:cd:39:
d5:0c:b2:66:b3:c3:e1:00:0b:4b:27:80:5e:db:ff:
e1:ab:0d:82:6d:48:14:41:44:ce:a1:dd:b6:81:9b:
43:72:70:ec:8f:c0:ef:48:b4:63:88:fc:90:80:01:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:1D:23:F6:ED:6C:B0:2C:70:40:6D:EC:05:80:EF:83:CB:A9:53
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MWAdI_btbLAscEBt7AWA74PLqVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.84.0/24
Signature Algorithm: sha256WithRSAEncryption
79:14:94:74:e8:b5:eb:c1:fa:79:b7:14:0b:97:09:19:00:39:
59:c5:0f:43:58:17:f9:2c:f6:8c:3a:17:ac:de:68:58:6d:d8:
0c:8c:25:40:0b:c7:8b:30:a1:1a:06:e9:37:a2:6e:a2:3a:aa:
d9:11:a4:4c:8a:51:58:23:d4:be:83:de:a1:61:5d:e6:bf:4d:
40:72:63:d2:24:64:69:38:09:06:6d:f3:c2:c2:a2:94:25:ba:
c8:6f:52:e4:1f:48:bd:72:78:d4:1d:41:1b:73:f8:c4:d1:9d:
0d:0a:70:e2:23:b5:76:5d:04:f5:12:6f:e8:fe:b4:3a:8c:3c:
0d:a6:da:d1:23:19:94:35:68:c5:da:a2:b7:c5:11:b8:c1:71:
e7:39:53:31:12:78:1a:3b:1b:6a:59:10:29:1e:5f:d4:e6:65:
50:0a:dc:c1:7b:a6:da:5c:fe:af:6b:c0:bf:3d:88:84:65:e8:
ea:fe:70:65:85:5c:1a:c4:cb:bb:a2:14:ee:4b:f6:33:45:dd:
72:4e:4f:0e:fc:38:d2:07:ad:da:e0:37:74:48:cc:b2:e5:bf:
fa:45:53:73:44:07:e3:3f:0c:20:04:50:52:e3:91:1d:11:41:
c5:88:f4:78:f1:c8:b6:fe:91:be:af:e8:14:c2:1f:16:9f:f2:
9c:7f:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:06 2024 by rpki-client on console-fra.rpki-client.org