Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/mSNEbbmwWNJllmvQB3dWGRhzI2E.roa
File: mSNEbbmwWNJllmvQB3dWGRhzI2E.roa (raw, json)
Hash identifier: wdUjck6RxKj0ZrRMGMlg1AOQMXS1F/z1dagpnC5UKGI=
Subject key identifier: 99:23:44:6D:B9:B0:58:D2:65:96:6B:D0:07:77:56:19:18:73:23:61
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 018CC726E1067AF034491A9F3541B823D1CB
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/mSNEbbmwWNJllmvQB3dWGRhzI2E.roa
Signing time: Mon 01 Jan 2024 22:31:03 +0000
ROA not before: Mon 01 Jan 2024 22:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9208
IP address blocks: 193.58.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e1:06:7a:f0:34:49:1a:9f:35:41:b8:23:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jan 1 22:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9923446db9b058d265966bd00777561918732361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:4b:ca:ad:33:6d:b4:58:63:23:bf:e8:fa:
9c:7b:0d:01:1f:82:88:5f:85:c1:71:26:98:d7:b9:
72:68:d7:01:2a:f1:06:c0:8f:7b:1e:43:90:cd:20:
aa:b8:85:9b:84:d1:a6:62:3c:5b:d0:02:53:3e:ab:
bf:21:9f:49:96:fa:76:69:41:3e:1e:5b:84:b5:4f:
4f:1c:70:ad:bd:42:b5:b4:cc:19:2e:49:c5:27:58:
ac:4d:e6:76:b5:03:0a:1e:65:88:87:30:1c:38:06:
1d:be:a0:72:b1:71:f0:b9:b3:4f:1a:6f:45:41:b5:
03:78:50:04:74:53:d5:2f:ce:e7:a7:d7:95:b2:ee:
97:83:75:40:2b:25:a1:d9:2d:42:b1:41:b9:b7:32:
ad:52:e3:32:06:0b:d0:88:60:88:6b:bb:3a:3e:ee:
c6:69:db:16:66:05:6e:fa:0b:2c:e0:cb:bc:9d:47:
46:d4:01:ec:de:c4:4d:ae:65:07:d6:a3:8d:bd:ea:
7d:65:ca:15:0a:84:65:7d:5b:26:96:d9:1f:e8:69:
17:5b:e8:a8:68:ad:74:d3:aa:f6:cc:27:da:40:7c:
dd:a2:dc:a2:3d:e1:e9:e7:8b:45:2a:47:c1:03:7f:
b1:33:6e:20:9a:a7:ca:c9:8c:80:c8:09:7a:6d:8d:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:44:6D:B9:B0:58:D2:65:96:6B:D0:07:77:56:19:18:73:23:61
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/mSNEbbmwWNJllmvQB3dWGRhzI2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
66:6a:10:b6:7d:f4:56:35:96:bf:0d:de:f9:c8:94:e5:28:75:
c1:0d:06:fb:6d:5d:c7:f0:f5:cb:6a:98:b7:31:13:98:fd:be:
30:74:06:4e:ed:d1:a7:f7:9d:32:d9:d8:e0:fb:ae:29:82:fb:
20:41:47:5e:19:c5:02:12:94:8d:73:a1:81:c0:03:a2:b5:6e:
4c:8a:85:3c:5f:bb:20:99:62:ba:bf:d7:ad:85:98:41:e6:ba:
89:9e:4c:cc:5f:cd:04:8e:f2:31:3f:78:96:f0:3f:25:e0:68:
94:b7:9f:3b:c8:08:76:36:0b:76:68:d0:5f:30:64:3f:8a:06:
39:e3:f5:9f:80:60:be:15:05:8a:13:39:7e:1e:e1:90:b8:5f:
9c:fa:f0:f6:03:1f:03:08:a4:21:f7:2f:c1:f0:76:68:23:07:
66:a2:3e:c6:33:85:f1:55:12:f0:5c:74:53:4d:f0:1d:72:b8:
34:62:33:b1:70:73:66:be:01:00:48:0b:df:49:9f:8d:fe:60:
42:d6:b8:d0:8b:6f:e5:f9:74:92:b5:58:e0:2d:91:8a:32:05:
ff:81:f4:55:59:50:a8:ab:0e:ab:47:88:1a:54:4f:77:5b:f3:
5e:2a:20:7a:59:cb:38:86:84:74:7d:ca:ca:1b:86:1b:cc:cd:
15:3d:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:01:53 2024 by rpki-client on console-fra.rpki-client.org