Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MapnhGnsIFoScHMIbcaf8MiqBNY.roa
File: MapnhGnsIFoScHMIbcaf8MiqBNY.roa (raw, json)
Hash identifier: ZJ5qXQb+310IfjgaSBWHiWrb/X49g8Spcm5NUXzrMcY=
Subject key identifier: 31:AA:67:84:69:EC:20:5A:12:70:73:08:6D:C6:9F:F0:C8:AA:04:D6
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018D26C91FAE80226139D99538F9E81EEF36
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MapnhGnsIFoScHMIbcaf8MiqBNY.roa
Signing time: Sat 20 Jan 2024 12:12:11 +0000
ROA not before: Sat 20 Jan 2024 12:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 79.132.196.0/24 maxlen: 24
202.164.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:c9:1f:ae:80:22:61:39:d9:95:38:f9:e8:1e:ef:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 20 12:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31aa678469ec205a127073086dc69ff0c8aa04d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:fd:a3:e3:e8:56:ec:c7:71:a1:ea:8c:2b:
e3:95:92:fa:74:e7:5d:dd:40:07:d3:d4:9a:ba:8c:
0c:08:67:ff:a2:45:64:7a:50:73:15:4f:49:ca:66:
56:bd:01:84:9e:25:63:1c:67:04:5f:20:94:e1:ea:
0d:e4:ae:4d:1c:af:04:46:94:9c:ed:06:4c:fe:2c:
89:7a:a2:e2:af:d6:b3:56:b8:7e:46:5d:ab:b2:d9:
37:2e:9d:b1:03:4e:5e:5a:10:1b:1c:ad:97:13:16:
e4:88:7e:4c:66:a8:e0:5f:ae:9a:5e:8e:21:e0:45:
4e:87:31:96:0a:c7:d3:08:66:c4:96:43:50:f6:27:
d7:0f:61:90:7f:95:a9:99:c7:fc:b1:f0:be:cb:94:
74:67:c9:ba:ee:16:7a:fc:9d:d6:60:6a:71:be:e5:
61:44:51:a4:88:0c:58:a8:eb:c7:12:bf:8e:74:d4:
5a:25:74:f9:b4:4e:89:25:19:10:52:cf:47:07:fe:
8a:c4:3d:b5:e2:98:fd:46:f9:e9:a3:a8:d5:8a:e2:
9c:4d:3f:91:3b:d1:ce:b0:00:ad:a9:a7:ff:73:f8:
35:56:21:68:4f:c1:72:90:e8:aa:ee:78:11:7c:74:
6c:8e:9e:7f:4b:1b:53:c6:da:a4:bc:23:7e:85:b6:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:67:84:69:EC:20:5A:12:70:73:08:6D:C6:9F:F0:C8:AA:04:D6
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/MapnhGnsIFoScHMIbcaf8MiqBNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.196.0/24
202.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:68:0a:4a:ef:87:34:f1:45:e6:c0:c7:4e:7a:cc:7b:00:3d:
dd:9a:a6:1d:8e:64:fb:33:24:f3:75:75:75:53:89:43:b9:cb:
47:7b:34:ab:38:c7:60:c6:3d:84:44:b4:bd:41:97:9a:11:37:
29:eb:e0:24:9a:3d:6f:0d:17:e6:51:c9:cb:1e:27:82:df:c4:
a4:81:82:0a:c1:01:4d:af:27:03:4f:a4:48:0e:e6:e6:10:32:
a5:6d:65:41:77:f0:78:6b:d3:41:07:63:a6:cc:2e:fb:fe:98:
14:f3:13:b3:04:80:6c:7b:15:8b:b4:26:d1:2f:9f:6b:61:21:
27:aa:59:6f:b6:e3:c1:af:ba:68:3c:27:8d:1d:51:17:ee:7d:
7c:2b:6a:ce:fc:71:a2:0e:3c:4f:a9:f5:11:81:0f:69:da:d0:
cf:ca:7d:59:68:3b:9a:1b:f7:0b:cb:3f:8e:79:b9:70:6e:81:
1f:aa:e1:2b:77:eb:81:73:c4:3f:39:44:b1:f2:94:76:4e:a2:
d0:45:42:48:bc:40:d3:2a:a1:6a:56:db:f2:67:1b:40:c0:ed:
b4:02:46:72:90:e4:f2:0b:c2:ce:ce:57:74:e4:70:cd:64:c8:
5d:eb:00:0d:f1:fb:2b:fe:4d:e2:5f:3c:12:ce:a1:ca:52:d0:
26:66:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:34:52 2024 by rpki-client on console-fra.rpki-client.org