Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/M2pucQblYYW9Ed5SEiQtHoACy2U.roa
File: M2pucQblYYW9Ed5SEiQtHoACy2U.roa (raw, json)
Hash identifier: DODZnFtncWTHKJyGcnZyitqgS3XB5iWWj/4xm4bmBmo=
Subject key identifier: 33:6A:6E:71:06:E5:61:85:BD:11:DE:52:12:24:2D:1E:80:02:CB:65
Certificate issuer: /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial: 0194274831C168D2BE503D9AEDEF53BC47E1
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/M2pucQblYYW9Ed5SEiQtHoACy2U.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200446
IP address blocks: 193.42.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:c1:68:d2:be:50:3d:9a:ed:ef:53:bc:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336a6e7106e56185bd11de5212242d1e8002cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:6d:86:a9:f7:6f:5b:93:2d:7b:6c:f2:88:
28:2c:5b:3c:1f:1a:f4:0e:13:a1:c7:58:ff:30:00:
ab:11:91:eb:fb:ec:e0:bf:23:27:40:f0:f7:10:49:
28:8a:dd:4f:5d:30:1b:d9:bb:44:7c:bc:fc:a6:25:
af:35:9e:5e:65:1a:d8:eb:15:ac:9e:e3:84:fa:fe:
1e:74:0a:d6:36:09:c7:53:38:10:a7:0e:f9:72:10:
c2:3b:39:9b:5e:86:d4:38:b8:24:c7:a9:6c:c3:8b:
43:28:63:b0:df:92:d2:66:ec:19:b6:98:29:9d:c0:
6b:f7:b6:0c:13:91:52:35:08:78:7a:c1:22:82:e0:
09:2c:13:43:c9:46:99:76:3b:7e:6a:3d:9e:58:8e:
e7:44:df:83:1a:78:46:5f:46:e5:b8:58:a1:4d:87:
c2:17:c7:ce:c8:5d:7d:3a:29:2d:24:b5:61:47:f7:
21:33:f9:d2:8e:61:ec:a2:ac:d6:02:c9:54:a5:5a:
58:45:e6:d9:0f:49:33:24:5a:2b:dd:3f:c7:4a:2b:
2a:4a:4c:80:c8:ef:0f:71:c2:72:1f:0f:6d:bc:53:
96:6b:c8:a4:51:b3:fa:c6:24:04:e6:d9:02:93:d7:
b4:00:ae:a5:09:46:a3:87:6f:dc:74:28:ce:cf:65:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:6E:71:06:E5:61:85:BD:11:DE:52:12:24:2D:1E:80:02:CB:65
X509v3 Authority Key Identifier:
keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/M2pucQblYYW9Ed5SEiQtHoACy2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.156.0/24
Signature Algorithm: sha256WithRSAEncryption
60:04:af:37:3e:2d:ac:71:b6:9d:14:0b:e4:6b:f7:a7:c6:8e:
d2:46:c9:4a:0d:0e:88:30:78:46:94:42:c5:7b:29:fc:0d:f2:
f8:b4:02:e7:53:e3:09:60:78:dc:6b:c2:26:09:61:73:f4:a4:
d7:86:34:3b:0e:7d:9b:59:33:b7:a9:d0:5b:23:f7:e3:ad:5a:
ad:df:75:0a:60:a6:52:60:ec:48:92:7d:67:b8:2f:d3:70:86:
1a:bd:ee:a3:06:c9:0c:72:8f:09:7c:41:c4:32:7a:b4:1f:20:
41:63:86:e7:ae:3c:c0:e0:3a:ef:46:9d:d8:f2:97:f1:15:23:
03:a7:d7:75:d1:a1:1f:f3:eb:11:3e:77:89:48:77:e0:9d:f3:
ec:8d:8a:ba:d5:ca:b0:bd:a4:ba:a2:dc:01:2c:d3:0a:9b:98:
1d:5f:e8:1f:6b:ce:0f:b7:b7:a4:f0:bc:67:1a:c8:13:2f:ec:
be:ff:d8:a0:39:eb:35:24:9d:71:b2:c2:3d:58:f3:9b:f9:e8:
e7:39:71:fb:d8:a0:a2:8d:3e:a5:64:1c:d7:01:c5:c8:9f:22:
70:5c:37:8d:74:35:7a:9c:f3:27:31:38:53:92:14:42:8f:ee:
ed:b3:71:97:be:92:a1:ba:e8:4c:d2:05:a7:7d:b4:d3:a0:05:
9b:00:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:15 2025 by rpki-client