Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/8MGxGzHz6CinAh02_ZqJb98AzDk.roa
File: 8MGxGzHz6CinAh02_ZqJb98AzDk.roa (raw, json)
Hash identifier: soIHb2Di+E0RSPOBlNxRdHSFI3T6DGafG+gbX2ko4AQ=
Subject key identifier: F0:C1:B1:1B:31:F3:E8:28:A7:02:1D:36:FD:9A:89:6F:DF:00:CC:39
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01933ED55CA21BA19105641A3AC88BA88789
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/8MGxGzHz6CinAh02_ZqJb98AzDk.roa
Signing time: Mon 18 Nov 2024 10:33:10 +0000
ROA not before: Mon 18 Nov 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47147
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.128.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d5:5c:a2:1b:a1:91:05:64:1a:3a:c8:8b:a8:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Nov 18 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0c1b11b31f3e828a7021d36fd9a896fdf00cc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:c6:59:f3:ed:95:7c:70:c7:aa:7f:13:8a:
d8:06:e2:6f:4b:e1:ed:bc:80:b2:ec:a5:df:8a:dd:
6d:eb:77:80:f4:eb:43:65:47:86:30:47:e2:49:b7:
7d:05:9f:31:76:6b:d3:b2:1e:65:2b:4a:a5:d7:8e:
72:67:dc:dd:e0:54:cb:8e:4d:79:93:7a:ee:cf:ed:
e0:c4:74:c5:9b:c2:b9:9c:71:e7:c3:00:95:0d:2f:
49:14:9f:c9:bd:a4:d3:4a:6a:5e:0f:01:f5:73:f7:
1c:21:78:b5:eb:93:92:1b:1f:5b:fb:e0:ca:5b:07:
71:cc:8c:2d:6f:50:34:16:53:73:8f:44:be:e5:b5:
af:60:8b:ac:1f:2f:9c:72:67:2c:c5:a0:f6:a0:44:
cb:3a:1a:18:c1:9e:fc:4f:71:de:4b:f3:a9:6f:54:
11:c6:29:6d:a3:b5:f8:ae:4f:6c:e3:12:36:ce:18:
16:e3:2c:92:e2:04:0f:62:45:ca:8c:27:56:1c:21:
44:79:f2:87:8c:6a:48:5b:37:d3:59:a6:f2:7c:cc:
d4:4f:3f:d6:4c:49:61:86:a1:39:42:f5:eb:0e:2d:
87:81:c8:18:ca:99:d0:dc:b8:2f:da:c9:aa:01:08:
28:d0:0a:33:66:97:42:8e:e6:3a:b8:aa:c3:c1:7f:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:B1:1B:31:F3:E8:28:A7:02:1D:36:FD:9A:89:6F:DF:00:CC:39
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/8MGxGzHz6CinAh02_ZqJb98AzDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:b9:75:9a:37:52:5d:07:f6:60:f3:01:e3:28:67:c9:10:16:
fc:0b:1e:89:16:64:c4:e4:98:df:05:33:fb:5d:d2:80:16:78:
af:74:22:e1:1f:17:f7:b1:f0:2e:5d:1d:c2:de:4c:3a:78:3e:
b3:8f:1c:f4:cf:70:47:27:4e:09:0f:7b:9e:39:3e:07:23:86:
86:f2:ed:c1:a2:0d:82:a5:87:44:f0:ca:5d:5b:aa:02:64:23:
73:30:51:66:5b:24:61:10:e4:0d:24:34:f9:af:7f:50:33:24:
5a:37:2d:0e:0e:2f:46:57:da:fc:50:ca:ac:a3:41:d6:e7:8a:
56:c4:7a:30:f0:4e:52:a8:8d:03:b0:4d:fe:b2:8b:3b:34:4d:
c4:2d:cc:61:c1:d5:13:42:90:69:fb:f5:e4:a1:ae:31:67:e6:
7b:66:ba:09:0b:6c:8f:ce:07:8f:8b:e6:da:f1:18:d8:16:f3:
8d:30:92:ac:33:97:2d:a2:cf:df:6b:c4:9c:08:28:79:62:f0:
aa:92:a0:4e:75:bb:37:d8:b0:7f:25:f1:36:5f:7b:61:7c:65:
39:3d:65:28:d6:0b:dd:b1:b5:6a:e7:b5:4c:51:8a:3b:ce:cb:
85:70:0c:15:85:be:ca:22:ce:3a:62:7b:9f:59:b3:30:a7:f8:
43:c0:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:49:34 2024 by rpki-client on console-ams.rpki-client.org