Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/MDP3P-qpr6htShL6pdhFa_KXFx8.roa
File: MDP3P-qpr6htShL6pdhFa_KXFx8.roa (raw, json)
Hash identifier: lL2naxrD84ilvNUv1RDlU3PzNuLM4TIrZo3ABMQZAnI=
Subject key identifier: 30:33:F7:3F:EA:A9:AF:A8:6D:4A:12:FA:A5:D8:45:6B:F2:97:17:1F
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018CC56EF52D36BFC9503E78E0F6885012EA
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/MDP3P-qpr6htShL6pdhFa_KXFx8.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 192.89.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f5:2d:36:bf:c9:50:3e:78:e0:f6:88:50:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3033f73feaa9afa86d4a12faa5d8456bf297171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:0b:34:23:6b:1f:b8:b1:2f:44:c1:d7:41:
1a:c3:3a:14:12:1b:01:42:32:9d:c4:62:71:ed:52:
29:f0:eb:d9:61:a8:16:1e:f6:95:82:38:b7:16:06:
aa:8a:51:ac:dd:8e:c2:d7:b5:db:74:4f:6b:24:59:
1e:ea:83:c2:35:6c:90:b5:34:61:a5:d7:7e:ff:e9:
d6:b1:f3:9b:b1:e6:5d:d4:56:90:8e:dc:b8:20:13:
8f:32:e7:10:25:89:ee:ea:a8:5b:8f:63:05:2b:dd:
64:fe:0d:01:3d:2e:94:db:fb:0f:e5:28:71:a9:46:
e6:ef:94:35:b0:16:a3:2f:0f:de:02:c0:e4:3b:bb:
a6:84:9a:5b:25:6c:62:f5:4d:b2:7c:7b:9d:81:8a:
29:42:8c:95:46:be:49:3a:93:88:50:3c:8e:5e:bc:
de:7d:e1:35:f8:8b:7d:eb:80:f3:34:cf:10:35:6b:
e1:d5:b2:7b:39:a4:b4:a4:4f:20:bc:28:1e:2a:5d:
8c:48:1b:17:32:f9:df:d6:bd:8b:6e:75:e4:cf:35:
b2:40:7b:46:49:3f:c6:7e:1f:73:64:8c:87:8f:f6:
bb:2f:6b:c8:15:1e:1b:ea:88:a1:21:db:fe:a0:23:
0c:d6:63:81:3d:ba:55:8e:08:bb:97:d3:ec:2a:ea:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:F7:3F:EA:A9:AF:A8:6D:4A:12:FA:A5:D8:45:6B:F2:97:17:1F
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/MDP3P-qpr6htShL6pdhFa_KXFx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.89.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:03:48:86:d6:da:e2:6f:eb:8e:8b:2e:9f:be:f1:dd:e3:73:
3b:c6:a3:51:62:3f:81:34:8b:6d:e1:d6:4a:3b:96:f8:9f:49:
7e:b2:1c:81:aa:d4:f2:d9:c9:d8:f5:1c:67:83:45:7d:42:36:
bf:08:b6:d2:17:00:14:fd:c0:91:aa:f7:c5:da:64:ab:f9:c9:
c0:ba:20:41:b4:3d:c2:bd:97:2e:29:b0:44:08:87:3e:9d:a4:
93:0a:fd:80:22:1a:3f:a8:cc:4b:bc:7f:e1:bf:90:fb:aa:48:
5a:88:13:9d:b6:06:06:67:63:4c:66:c9:b1:21:3f:6e:22:ac:
3d:ce:25:d6:79:8f:40:5b:ae:24:60:40:82:5d:85:1c:56:23:
22:2f:57:d7:4f:e6:5d:68:1c:fe:ec:0e:60:bb:a3:81:3a:e4:
3c:67:0d:80:d0:41:01:4c:34:9a:13:87:3f:a0:4d:78:9b:62:
e6:80:f0:28:a2:01:f7:48:50:e0:b4:65:05:01:b1:04:04:c2:
30:89:33:2f:a4:9a:b9:e9:9a:03:88:fa:bf:13:d7:b0:18:b4:
e9:eb:65:d2:31:a9:fb:12:5f:92:d4:1b:7f:9b:43:c9:cc:8e:
81:3a:6a:b8:00:fa:c2:e5:f3:f6:86:c6:2a:19:8d:f1:bf:0b:
72:19:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:37:26 2024 by rpki-client on console-ams.rpki-client.org