Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MkVsC817bgHYj49pOy_F0jyst8E.roa
File: MkVsC817bgHYj49pOy_F0jyst8E.roa (raw, json)
Hash identifier: e9eZN8oBNA4TTUMdp/y03/TKKN8BP0gtVhvg1rX1csI=
Subject key identifier: 32:45:6C:0B:CD:7B:6E:01:D8:8F:8F:69:3B:2F:C5:D2:3C:AC:B7:C1
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68C8ECBFBDCD9F16E53CD4AEFE6C1
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MkVsC817bgHYj49pOy_F0jyst8E.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210342
IP address blocks: 79.133.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:8e:cb:fb:dc:d9:f1:6e:53:cd:4a:ef:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32456c0bcd7b6e01d88f8f693b2fc5d23cacb7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:20:f1:38:9c:c4:dc:fe:f1:8a:52:4c:64:
cc:01:59:c0:cd:e9:52:27:b4:ae:8a:b9:cc:5a:d7:
ee:ff:ab:ae:43:e2:55:36:7f:12:c0:b2:b7:f3:02:
11:9c:99:8d:db:0b:11:aa:bb:17:85:14:a4:eb:11:
ff:fe:42:2b:1e:82:a8:2f:17:59:79:82:fd:ee:5a:
0d:3d:ea:40:2b:15:62:7f:53:4c:4c:d7:76:3d:c9:
da:a5:2a:3b:fe:90:89:1d:9e:6a:07:98:c1:25:19:
28:8a:72:c3:ec:57:30:a9:57:ac:a6:ff:3c:5b:78:
f5:81:97:2e:ac:18:07:e3:64:d2:a3:31:4a:2d:16:
9a:dc:53:c5:ba:d2:c2:8f:2a:b8:9c:b2:23:a6:95:
0a:53:62:ad:fd:06:76:71:8a:f1:e2:11:8e:f2:d7:
05:a7:d2:26:fc:80:b6:6a:31:88:ac:97:49:dd:d7:
bb:45:1e:ba:31:27:ca:fc:f0:42:f3:73:7b:2c:c9:
c4:7a:2f:e8:45:87:3b:03:a0:23:bf:5f:a9:ae:b3:
ad:0c:81:9c:fe:b1:3c:c5:3e:ba:fc:b1:af:42:04:
fa:4d:2e:7e:50:15:32:f5:d7:56:1b:13:40:72:2a:
b9:cb:b5:6f:00:36:ff:f6:9e:93:c8:f3:a8:df:13:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:6C:0B:CD:7B:6E:01:D8:8F:8F:69:3B:2F:C5:D2:3C:AC:B7:C1
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/MkVsC817bgHYj49pOy_F0jyst8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.99.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ee:57:dd:2b:7b:ce:f5:98:f4:4f:d5:d8:df:0c:f0:5d:85:
1b:75:f0:c8:43:2c:e9:17:0d:dc:f6:fe:97:91:59:dd:b4:00:
a9:8c:96:4a:2c:ec:86:ee:95:0b:72:b7:8b:18:66:ca:3e:9f:
f8:68:08:70:1f:1c:a4:48:64:6f:3b:b5:41:f7:49:ee:de:e6:
95:51:a6:ef:af:b4:72:9e:dd:7b:5a:3b:0d:d1:de:3b:5a:7a:
dc:23:ee:7e:b6:00:99:17:af:d1:d3:47:73:c8:cc:27:a8:9b:
86:d5:79:f4:7c:4c:6e:61:08:2e:37:e1:05:6e:72:52:6c:7b:
13:49:45:9e:18:e2:7b:01:c3:73:69:cb:0a:a1:f7:91:f7:9f:
24:3f:fd:e9:cc:fa:80:7b:89:75:fa:5c:cc:e1:06:fd:90:fd:
1e:48:42:cd:e8:5e:bb:56:4f:6c:11:4a:0c:97:c0:28:80:28:
d3:f2:df:0d:f3:6c:00:b6:18:4d:ac:14:ca:9e:d5:a3:d8:42:
c8:7a:55:8e:e2:34:3a:a1:3d:58:70:9b:90:ab:88:a9:4a:f8:
8e:57:b9:14:07:3a:0c:71:b8:3a:e5:46:c1:ed:e3:05:c7:80:
1f:af:85:17:98:30:24:e0:34:55:cc:94:3e:ce:93:0c:04:69:
ae:c9:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:04:58 2024 by rpki-client on console-fra.rpki-client.org