Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/MAQmOa8DCOFnP1AvP10tvRzxgoU.roa
File: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (raw, json)
Hash identifier: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=
Subject key identifier: 30:04:26:39:AF:03:08:E1:67:3F:50:2F:3F:5D:2D:BD:1C:F1:82:85
Certificate issuer: /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial: 0194228D147B243682CC072A90390C1B4B3E
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/MAQmOa8DCOFnP1AvP10tvRzxgoU.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16263
IP address blocks: 193.111.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:14:7b:24:36:82:cc:07:2a:90:39:0c:1b:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30042639af0308e1673f502f3f5d2dbd1cf18285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:e5:f5:12:03:64:25:6e:1a:06:15:25:52:
cd:89:6d:6a:77:19:1f:43:76:f2:05:20:ea:ce:76:
6c:b2:b2:01:70:ba:b5:d6:bb:d0:6d:f5:ed:44:94:
97:b3:ac:2c:7d:35:7b:06:a8:e6:ca:f3:d7:2a:ed:
07:58:91:c9:20:1b:60:e2:38:2c:a6:99:06:ad:de:
1d:e8:d7:54:45:84:01:e2:43:f1:d5:2c:79:47:e5:
a9:fa:ae:79:0d:f1:fb:54:79:f0:f5:8c:46:8c:7c:
ad:ba:8e:63:b5:64:19:71:4c:f8:cd:cc:bc:28:7a:
fa:82:37:db:87:9a:54:4d:5c:2f:81:17:e5:1d:66:
7a:71:d5:67:67:71:b8:7f:81:d7:e5:7b:e8:ad:13:
c1:24:9e:e4:50:8b:78:31:cf:2c:5a:60:5e:0f:54:
52:0d:de:47:66:8d:c4:fb:27:bc:c3:38:00:32:13:
55:58:29:a5:26:86:03:19:90:f9:c4:79:9e:03:ac:
f8:7e:23:7d:7e:60:f2:60:12:4b:63:57:49:2e:53:
e3:2a:7f:e7:53:04:39:6d:9d:26:aa:1e:71:ec:fc:
6e:fd:79:80:66:f1:be:9d:64:9f:1a:49:43:66:31:
25:f4:ce:5f:cb:f5:5f:23:a6:68:27:38:0a:f6:90:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:26:39:AF:03:08:E1:67:3F:50:2F:3F:5D:2D:BD:1C:F1:82:85
X509v3 Authority Key Identifier:
keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/MAQmOa8DCOFnP1AvP10tvRzxgoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:82:ae:a5:b9:1a:88:73:36:67:f3:8f:3d:08:ca:6a:de:55:
d2:3f:a6:cd:a9:e4:af:2d:8b:d6:ea:95:6b:6a:c0:e7:d3:21:
27:83:96:fe:54:8d:f4:2d:09:4c:cd:38:16:ef:bb:33:f7:e9:
ba:1f:13:de:01:df:18:48:4d:11:30:a8:be:ee:23:44:8c:64:
cf:8f:a1:1b:bb:ec:23:db:a5:91:01:a3:d1:2f:c8:c9:27:b4:
48:26:db:e8:46:1c:d5:59:af:f4:3b:55:af:a2:39:b1:63:be:
ef:ce:0b:65:86:27:8c:bb:8f:95:22:34:37:78:65:cd:b3:c0:
6a:66:29:48:7c:3f:2a:ed:df:a6:e8:45:6d:7a:19:42:bc:78:
71:c4:8d:29:8c:07:3b:42:3b:30:f4:6e:8c:d4:34:b0:d3:8f:
4a:9c:6e:d0:7e:65:9e:7e:66:03:0a:d9:71:81:08:5e:c2:b0:
97:f5:08:9c:02:97:4a:7c:99:f5:a6:02:f5:75:0e:d0:01:6d:
57:94:89:1d:fd:bb:72:e2:13:4d:e6:7c:ed:ab:5b:75:d2:fe:
40:5f:0e:97:88:a6:40:4e:0a:fe:7f:b9:42:0b:7b:19:9c:7d:
b3:d1:95:c4:db:56:c8:26:4b:42:22:fc:8c:1f:46:78:fe:ff:
75:03:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:09 2025 by rpki-client