Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mii_pN9W3jMQ-W41Udx8jUCzmFk.roa
File: mii_pN9W3jMQ-W41Udx8jUCzmFk.roa (raw, json)
Hash identifier: IAVwWgyONBjgPQMm6FwM6e3PHIDoFeOc2qgzbiUnGr4=
Subject key identifier: 9A:28:BF:A4:DF:56:DE:33:10:F9:6E:35:51:DC:7C:8D:40:B3:98:59
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7DFFAB8A0FD698CC786832932A8C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mii_pN9W3jMQ-W41Udx8jUCzmFk.roa
Signing time: Tue 02 Jan 2024 12:34:57 +0000
ROA not before: Tue 02 Jan 2024 12:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29577
IP address blocks: 194.225.125.0/24 maxlen: 24
194.225.126.0/24 maxlen: 24
2001:14e8:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7d:ff:ab:8a:0f:d6:98:cc:78:68:32:93:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a28bfa4df56de3310f96e3551dc7c8d40b39859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:0d:31:3c:9a:45:84:1c:50:65:ba:5e:72:
cc:74:94:ac:91:f2:a6:12:2c:4a:fc:69:63:44:c9:
e9:ba:8e:b0:45:f8:ba:34:d1:c7:fd:a2:41:05:df:
b0:83:47:b2:bb:54:63:59:15:81:66:ea:74:c7:8a:
3f:b8:b0:ae:f8:5c:ed:d1:30:3c:52:81:05:00:79:
0b:d5:eb:91:31:9c:00:79:b4:1a:63:ce:83:e4:58:
6a:69:87:ff:e8:00:28:68:41:22:62:dd:87:23:07:
08:d2:6f:41:e7:04:1f:9a:bf:b8:72:ee:38:d4:44:
ee:93:82:01:13:c2:04:a5:b0:66:e8:db:81:69:22:
ea:7b:bc:4f:70:76:98:94:f8:b5:6d:24:f2:5c:e8:
51:9d:69:ae:21:36:be:db:97:2f:78:cf:aa:53:b8:
48:f0:7f:52:67:20:19:a5:88:93:94:b3:17:c0:fd:
c8:14:ea:e0:e0:18:60:92:7d:cd:e9:8e:ad:81:8d:
66:a0:25:a3:fc:0c:9e:64:40:b9:8b:46:48:28:97:
8a:d1:2c:47:aa:99:f6:77:8f:ca:e4:b3:c8:21:8b:
dc:07:86:13:72:47:cc:0e:62:c8:82:2c:42:4e:1a:
eb:47:f4:87:82:1a:22:9c:3d:a3:65:55:90:79:32:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:BF:A4:DF:56:DE:33:10:F9:6E:35:51:DC:7C:8D:40:B3:98:59
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mii_pN9W3jMQ-W41Udx8jUCzmFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.125.0-194.225.126.255
IPv6:
2001:14e8:8::/48
Signature Algorithm: sha256WithRSAEncryption
9e:60:7a:41:86:7c:2d:04:83:3f:b9:36:18:bc:a4:5d:ca:61:
4e:be:19:1b:8e:b0:d8:95:60:4d:68:8d:19:a6:a0:31:22:9d:
a9:42:30:a1:0e:45:0e:89:e3:aa:cc:ae:e7:40:b1:73:98:99:
4c:67:76:c2:71:af:46:9a:62:e9:a5:08:17:08:a9:06:2c:0d:
22:35:4f:13:35:87:0e:34:58:70:03:cf:21:16:21:76:bf:95:
2c:3b:04:82:92:e3:41:86:b0:e2:a9:7c:ed:fa:99:eb:ca:3d:
56:d3:39:51:4c:0a:57:4c:ce:4c:29:99:fd:4f:2a:7b:3f:7b:
be:82:39:a2:fd:ca:f8:d8:a7:ed:49:f2:3f:a5:75:b5:85:5b:
bb:b3:9c:45:c4:e7:b2:9c:74:c8:97:17:20:7f:b6:8b:03:91:
60:29:9f:23:fb:31:58:37:f1:cd:28:60:36:96:28:6b:16:54:
6e:43:bb:81:80:62:fe:aa:c2:79:14:37:43:41:0c:07:46:2c:
cb:82:c0:8a:11:90:c2:d2:3c:b1:4e:a6:43:0e:58:00:1c:cc:
aa:19:01:d7:b0:a9:80:83:83:a2:c0:35:ea:bc:3c:e7:bb:a1:
e7:b0:54:84:6c:72:2e:1a:0d:5d:f6:37:a6:5b:2c:2a:2d:b0:
2a:c0:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 10:54:31 2024 by rpki-client on console-ams.rpki-client.org