Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/MCCZ93tPW3-GMlMx2SfyUUK3qvQ.roa
File: MCCZ93tPW3-GMlMx2SfyUUK3qvQ.roa (raw, json)
Hash identifier: 52INk9CiSvzG9C18X1Jzp+eZL2DYY/oxi0V8e07sJ3c=
Subject key identifier: 30:20:99:F7:7B:4F:5B:7F:86:32:53:31:D9:27:F2:51:42:B7:AA:F4
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 018CC500659F87F0EC423C99BA3E0D91541E
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/MCCZ93tPW3-GMlMx2SfyUUK3qvQ.roa
Signing time: Mon 01 Jan 2024 12:29:46 +0000
ROA not before: Mon 01 Jan 2024 12:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198318
IP address blocks: 185.148.224.0/23 maxlen: 24
2a07:6200:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:65:9f:87:f0:ec:42:3c:99:ba:3e:0d:91:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Jan 1 12:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=302099f77b4f5b7f86325331d927f25142b7aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:b8:09:78:2c:5f:83:4d:92:ef:0e:98:9f:
c3:0e:32:db:99:3d:ab:56:e8:0e:85:0f:10:ba:3f:
40:e8:72:64:21:eb:5a:32:eb:93:4a:d7:76:d4:2e:
a5:26:46:b4:af:60:2c:f0:80:1d:ee:4d:c0:1d:55:
00:b8:e5:88:e3:99:1f:14:16:b2:28:c1:c4:f7:1e:
a2:aa:61:de:bb:07:66:65:5e:1f:91:bf:bd:14:23:
62:47:62:33:e5:13:15:71:f1:6f:f0:a9:a4:94:a9:
b9:12:ba:ca:03:47:91:2f:e6:61:ab:c9:f8:0f:a5:
a9:3f:40:2c:a2:c1:30:8b:c6:c9:d2:86:17:75:fd:
6d:03:6f:e0:87:e5:41:e0:17:2c:61:ed:0c:86:e2:
64:7b:ff:c9:77:dc:91:b2:71:b2:b1:ff:e9:b2:9e:
68:d3:cc:5f:de:5e:01:2c:df:57:09:84:94:a2:3f:
be:18:ff:9a:b1:71:a6:95:f7:00:99:3b:f2:3b:e1:
3d:6c:66:a7:d0:9c:81:e8:f0:ed:ef:f2:52:0c:90:
db:c6:c0:83:32:60:82:46:d0:8d:42:00:a2:ab:d2:
f6:c9:8c:35:7f:10:84:c6:f9:a8:cb:78:76:5b:9c:
9b:52:75:f7:35:ec:d0:e5:ca:98:da:28:85:7e:c7:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:99:F7:7B:4F:5B:7F:86:32:53:31:D9:27:F2:51:42:B7:AA:F4
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/MCCZ93tPW3-GMlMx2SfyUUK3qvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.224.0/23
IPv6:
2a07:6200:1::/48
Signature Algorithm: sha256WithRSAEncryption
c6:b9:d5:62:72:4b:e0:7a:db:fe:4f:f8:59:47:b6:df:86:d6:
66:b8:30:f1:85:3f:04:73:8e:64:aa:35:28:5c:51:c0:c3:b8:
b5:2b:55:eb:e9:9c:03:ef:48:76:80:2a:7d:03:88:fc:c3:85:
29:2c:b1:0c:d3:79:cb:aa:71:6f:fa:ec:e2:71:e5:83:30:68:
a7:20:73:7a:c8:91:b2:dd:17:10:6f:d2:4d:b1:18:7c:13:8e:
41:49:b3:4d:75:f7:01:82:5c:20:46:f3:1e:75:d0:1b:d5:3f:
a4:80:93:eb:6e:24:b2:65:85:1a:f7:79:80:dd:b4:db:01:f7:
47:bb:18:eb:7d:aa:98:7b:1a:21:d9:2f:1f:4d:c9:2f:d9:0a:
61:87:49:56:0c:84:24:66:b1:f8:60:ba:ba:b3:b0:ef:ee:53:
f3:4b:0a:13:56:64:b0:28:3e:03:0e:8f:43:9e:f4:dd:14:78:
e2:9a:5b:83:6b:a1:e1:12:df:5a:f9:f0:8d:d6:1a:1a:50:31:
28:08:a1:b5:9b:e3:ce:3f:68:a2:3a:6d:30:8a:c8:94:d7:6d:
0f:d7:3d:54:f9:ac:f4:32:a0:3a:4a:38:e2:ea:0c:35:99:98:
94:8c:8f:91:cb:9f:aa:ba:20:89:15:09:f7:81:d4:f6:90:bf:
0a:63:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:33:41 2024 by rpki-client on console-fra.rpki-client.org