Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJ55-9A_mAsKOofyXpp55Dr3VbA.roa
File: MJ55-9A_mAsKOofyXpp55Dr3VbA.roa (raw, json)
Hash identifier: LZSnDcLkkM64Vf3qY5cRLqC6WXU1vL3V/3Qmf6JE2ds=
Subject key identifier: 30:9E:79:FB:D0:3F:98:0B:0A:3A:87:F2:5E:9A:79:E4:3A:F7:55:B0
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE29F568E1F15A9E9378B23E657EC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJ55-9A_mAsKOofyXpp55Dr3VbA.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205608
IP address blocks: 195.136.4.0/22 maxlen: 22
195.136.38.0/23 maxlen: 23
195.136.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e2:9f:56:8e:1f:15:a9:e9:37:8b:23:e6:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=309e79fbd03f980b0a3a87f25e9a79e43af755b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:1c:e8:2b:0e:82:63:0e:59:c2:71:c3:fb:
8f:1e:e5:ae:ef:25:24:9a:83:db:e5:79:8a:5b:54:
af:65:bb:27:6e:d0:0b:fb:8a:a7:bb:a4:d0:db:09:
e6:5a:3c:6a:8b:1d:e1:df:c5:4b:04:b1:5e:b4:5b:
ea:13:a9:1c:46:dd:7f:fb:c2:08:f4:b4:42:b6:0d:
1e:8e:72:e2:61:c3:c4:51:9a:5e:dc:b5:d3:6e:11:
df:bf:ba:b7:8b:ac:1d:7f:8f:7c:ba:e6:37:55:ce:
ea:f8:e3:e1:bb:4e:12:11:ba:cb:e3:6f:a2:69:55:
fb:6a:23:ae:d0:c6:6e:2b:51:af:bf:ff:0a:8e:e1:
19:e5:52:4b:4b:2f:b8:d1:cc:a3:77:2a:2b:ef:bd:
14:20:da:88:33:c4:2e:98:e7:97:e5:9d:c4:52:27:
fe:10:2c:e2:49:97:98:74:a2:6d:f4:7a:25:41:72:
d0:db:a9:e7:ad:ac:41:8d:ed:8d:67:43:e4:d6:8b:
0a:0d:c3:bb:5a:c4:33:7b:06:fe:20:e0:eb:d1:f9:
9c:4e:04:29:3a:00:c1:a6:01:7d:2b:d4:f7:f6:3a:
78:b8:18:c4:84:21:ee:ae:ae:90:55:33:e0:72:45:
6f:4c:b1:69:d5:c1:34:92:2d:68:50:cd:cc:3c:df:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:79:FB:D0:3F:98:0B:0A:3A:87:F2:5E:9A:79:E4:3A:F7:55:B0
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJ55-9A_mAsKOofyXpp55Dr3VbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.4.0/22
195.136.38.0/23
195.136.156.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:76:8c:ab:eb:75:15:15:9d:7a:e9:d2:ae:f9:10:3b:3b:2a:
4c:58:78:c5:ac:1b:53:5e:50:af:fb:db:3b:08:ab:a6:25:65:
30:15:7b:1f:06:23:9c:e1:3c:ee:d0:f4:35:2e:df:55:e4:c8:
db:34:11:d4:08:68:43:ec:42:67:33:cd:fc:fa:e9:80:ec:3d:
86:27:68:a7:7c:f5:eb:2d:2e:ea:30:e6:80:25:93:d7:91:4f:
03:51:43:ae:b4:84:c3:fd:08:50:6e:40:13:ba:3a:3f:2e:83:
60:fa:da:12:33:55:5a:e1:52:3e:1e:3a:50:0b:8e:22:74:b0:
08:9b:b2:1f:ec:a5:23:41:54:71:c2:e5:30:3d:e3:e0:1c:09:
08:f7:82:47:c2:c2:fc:b0:39:bb:c8:cc:c8:35:a0:fb:1b:bc:
88:06:ea:fd:ff:70:15:fc:d9:1a:ee:c9:b5:19:df:64:b8:80:
67:d6:82:13:f1:b2:f7:1e:8e:82:95:13:20:77:42:d4:a3:12:
9a:65:5e:68:61:d2:35:c9:a4:3f:b0:90:79:d7:ba:82:87:a9:
02:4c:0b:d4:cc:94:ee:e3:7c:3b:ff:78:cf:54:10:9e:7a:a0:
e2:23:87:09:f5:2e:94:6d:89:86:6c:09:1a:20:41:02:69:67:
f4:11:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 09:30:21 2024 by rpki-client on console-fra.rpki-client.org