Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MWOLfqrRefqDKgD0FRmWb5mJB5s.roa
File: MWOLfqrRefqDKgD0FRmWb5mJB5s.roa (raw, json)
Hash identifier: sTC0HjGQAUBSlf9jIM7Cq60mIxulcUS93PJDsBHfqvQ=
Subject key identifier: 31:63:8B:7E:AA:D1:79:FA:83:2A:00:F4:15:19:96:6F:99:89:07:9B
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018D6DF25D0EC086C717C25C81E764810B4F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MWOLfqrRefqDKgD0FRmWb5mJB5s.roa
Signing time: Sat 03 Feb 2024 07:50:16 +0000
ROA not before: Sat 03 Feb 2024 07:50:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 82.163.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:f2:5d:0e:c0:86:c7:17:c2:5c:81:e7:64:81:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Feb 3 07:50:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31638b7eaad179fa832a00f41519966f9989079b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:2d:c0:fb:63:25:25:e7:2f:a0:ce:51:47:
db:03:fd:ed:13:35:03:7e:64:b4:c5:c5:51:e8:64:
9e:80:7b:b1:a8:ba:40:49:7e:a6:23:85:d6:75:b8:
6c:53:96:12:6d:2e:0c:a5:63:fb:1a:1a:50:35:3a:
cf:7c:8b:73:58:17:60:2a:e9:22:4c:72:78:47:10:
53:02:32:8e:ca:8f:14:a3:96:8a:c9:dd:06:51:a6:
f7:b9:33:9b:bc:d0:92:27:fb:0e:05:27:37:9d:96:
01:d8:8e:14:4a:f8:38:24:17:63:fd:ec:65:22:9f:
3d:a1:bf:5f:85:c7:c3:59:88:f5:f3:5f:cc:fa:e8:
b5:a5:18:22:08:32:25:61:2b:17:6a:c9:9a:21:25:
59:29:cc:2b:71:e4:ab:84:63:df:a2:73:51:e7:3c:
d3:93:71:ea:69:01:68:d8:c7:82:0f:96:02:9a:94:
82:59:f2:eb:36:56:55:c6:08:e6:29:23:cc:52:84:
c6:65:38:7c:5b:cf:75:c5:44:47:dc:e9:16:7b:b7:
56:17:dc:ec:4f:46:a4:89:09:ad:5d:05:48:a6:1a:
91:01:da:64:f2:e1:0f:7c:3d:80:7b:3d:39:be:42:
05:67:66:26:ec:a1:1e:48:59:17:8e:ba:ed:e0:82:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:8B:7E:AA:D1:79:FA:83:2A:00:F4:15:19:96:6F:99:89:07:9B
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/MWOLfqrRefqDKgD0FRmWb5mJB5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.228.0/22
Signature Algorithm: sha256WithRSAEncryption
17:41:4e:3c:9a:94:eb:74:a8:d0:47:c6:d7:a6:92:f8:0e:0c:
68:1d:9a:36:51:bf:9a:bc:d8:23:59:8f:98:36:f7:81:3e:2b:
f2:d7:c4:e2:58:74:f8:94:4d:66:1a:b1:2d:65:30:2c:a3:38:
28:d7:86:fa:74:cb:e2:8c:bd:ef:91:d5:be:21:bc:db:25:2a:
b4:4c:d8:2c:29:7e:f2:df:0a:fb:ee:6f:cc:15:ab:4a:87:87:
1a:44:02:57:71:9e:22:bf:4c:50:6f:cb:29:1d:03:26:22:1d:
21:cd:b9:3c:3d:df:cc:12:8d:79:0a:29:f2:be:6e:4c:95:ac:
15:bc:d8:06:52:38:68:2b:b7:85:a1:32:e3:37:4b:45:e2:91:
78:2b:60:cc:63:ea:1c:94:a3:c8:df:aa:dd:75:ce:6e:66:82:
2c:46:b5:72:4b:59:64:88:77:96:1e:1e:ff:84:5d:25:79:f6:
6e:3a:6f:7b:39:24:82:a2:f6:82:74:7b:c7:ad:7e:e9:b4:ed:
71:6c:ab:f8:c5:48:c3:1e:55:cb:83:e8:39:54:56:3c:06:39:
e5:fd:bc:d1:65:8c:71:03:56:3d:c0:da:9f:5a:fa:2f:87:79:
37:db:4c:00:aa:d5:42:b5:9c:c4:b0:43:b2:79:0b:5f:31:55:
cb:95:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 18:11:45 2024 by rpki-client on console-fra.rpki-client.org