Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Mv59xKNTEcz_kBacgEr8Dukm5gc.roa
File: Mv59xKNTEcz_kBacgEr8Dukm5gc.roa (raw, json)
Hash identifier: bVI3RHcR810CapDxisC4oWPJVa7P1bY+2fBgP7eqTdU=
Subject key identifier: 32:FE:7D:C4:A3:53:11:CC:FF:90:16:9C:80:4A:FC:0E:E9:26:E6:07
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 018CC94DF789C5081F3CAD63AEEAAAF745B4
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Mv59xKNTEcz_kBacgEr8Dukm5gc.roa
Signing time: Tue 02 Jan 2024 08:32:59 +0000
ROA not before: Tue 02 Jan 2024 08:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200081
IP address blocks: 92.246.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f7:89:c5:08:1f:3c:ad:63:ae:ea:aa:f7:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32fe7dc4a35311ccff90169c804afc0ee926e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:36:b4:1b:c9:6c:ca:2b:80:9e:26:c0:c8:
4b:a5:a7:13:aa:d6:a1:e6:aa:5e:a7:3c:47:28:63:
8b:47:72:ca:84:4f:01:81:a0:ce:94:f0:3c:32:6d:
c3:f5:34:02:c3:f1:c1:e3:0a:c7:ab:47:dc:f8:e0:
cd:93:be:a6:70:d8:2b:8c:94:c9:28:35:b7:40:03:
14:00:c3:3d:dc:71:e1:dc:2e:c7:c7:8b:c6:83:de:
64:14:ba:be:19:e8:79:7f:82:d3:56:73:a6:55:d9:
ea:51:76:28:12:87:8e:ff:54:00:47:80:2c:f1:9e:
e8:c3:95:84:e7:04:18:27:8d:e9:a9:4b:4c:5f:84:
9a:55:27:37:c5:5e:96:91:14:93:a7:f4:50:ff:d8:
2a:5c:94:94:f8:2b:27:fc:07:db:2c:f6:cf:a7:c0:
70:ac:b5:fd:a7:e7:56:85:8e:da:79:d1:3a:15:21:
78:df:f3:a3:3d:fb:a0:49:5c:e6:a8:bc:a6:af:81:
c3:85:4b:06:b3:4a:9c:22:64:ad:a3:b4:ff:92:2f:
88:7b:2c:00:fa:05:55:f7:c3:2d:28:76:72:ed:7e:
64:e0:3d:22:e6:0d:3a:c3:46:6d:8c:51:99:4e:b7:
89:02:96:4e:af:36:3b:13:c0:db:a7:04:bd:45:e2:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:7D:C4:A3:53:11:CC:FF:90:16:9C:80:4A:FC:0E:E9:26:E6:07
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/Mv59xKNTEcz_kBacgEr8Dukm5gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a5:62:66:b0:c5:49:6c:2c:fb:df:e7:0a:53:d9:d4:82:82:
97:d1:14:82:5f:c4:a4:11:ec:0f:4e:40:9b:2c:1b:48:b0:90:
2c:3b:f6:46:34:71:32:54:cc:23:f0:f5:19:b9:0d:33:18:10:
f2:09:ef:2a:6d:ea:99:90:f9:84:3d:70:52:53:ef:d6:21:f0:
e3:7d:af:90:1a:eb:53:92:6f:d6:a8:b4:16:62:45:7f:f2:45:
1e:16:a8:79:d6:4c:4c:33:52:c7:ee:5e:32:3f:e2:4b:5e:37:
f6:1e:dc:12:47:1d:fc:20:aa:8c:7f:4d:53:53:d0:e6:02:5f:
ba:42:20:19:5a:7e:0d:ec:6a:f1:7f:e8:e5:5f:2b:54:c1:03:
78:ac:a5:1e:ab:53:03:b9:a2:da:ce:7d:b8:9b:c1:16:28:e9:
6c:1b:d4:52:ff:a5:52:77:74:3d:10:3d:d6:25:d3:a2:32:47:
77:fc:6d:b9:64:76:10:56:9d:df:7f:17:1b:9b:3a:5a:81:41:
da:6c:af:c7:87:ec:8c:45:1e:72:a5:06:86:01:20:a8:4e:90:
9d:a9:f4:36:52:2c:b6:b2:c4:cb:0f:1f:65:0d:a6:a1:88:4c:
8c:64:ad:cb:ad:31:54:c4:40:b7:41:0d:79:5f:24:9d:61:99:
f9:eb:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:31:19 2024 by rpki-client on console-ams.rpki-client.org