Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/MZE5UeY91iaWoXZ3Yd78efYzS3g.roa
File: MZE5UeY91iaWoXZ3Yd78efYzS3g.roa (raw, json)
Hash identifier: bYdYVus1k0O/0KYG6BEKo+R1P88RMxLzgnfhEXD2hK8=
Subject key identifier: 31:91:39:51:E6:3D:D6:26:96:A1:76:77:61:DE:FC:79:F6:33:4B:78
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 0191C1DEFF3DBF485AE5E4533D4CFC18DDF1
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/MZE5UeY91iaWoXZ3Yd78efYzS3g.roa
Signing time: Thu 05 Sep 2024 11:08:22 +0000
ROA not before: Thu 05 Sep 2024 11:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209974
IP address blocks: 46.243.185.0/24 maxlen: 24
77.105.148.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.154.0/23 maxlen: 23
93.183.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:de:ff:3d:bf:48:5a:e5:e4:53:3d:4c:fc:18:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Sep 5 11:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31913951e63dd62696a1767761defc79f6334b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:e5:72:85:6f:9d:a0:ac:ab:69:e1:a7:9d:
e9:08:51:1b:e2:46:3f:0f:ec:a2:94:f3:58:05:63:
71:fd:16:db:f7:f8:65:89:c8:0e:7f:94:af:4e:59:
98:a9:9e:17:90:a3:cc:6c:00:ab:5a:b9:dd:4e:b2:
d5:4f:35:a1:de:cd:a0:e4:3b:ea:8b:74:02:07:95:
16:80:16:0c:ac:2f:36:e6:8d:22:70:c1:ae:0a:68:
44:63:2e:ed:41:67:05:2e:23:0e:8c:30:ac:02:c3:
3a:a3:b8:36:ad:6b:77:2d:52:8d:2e:01:a4:f6:2a:
12:b5:27:ac:76:18:69:e1:f1:20:28:9c:6e:ff:c0:
74:a0:7a:d8:5e:cd:26:62:3d:38:a6:02:84:3d:1c:
1d:73:43:38:8a:12:d6:35:82:66:1e:5a:34:13:f3:
fa:c0:7f:28:87:8a:db:3b:e6:24:3b:fd:85:86:90:
4d:6a:e1:2a:9a:2e:2a:9f:4b:1a:17:6a:58:d3:b4:
8d:6e:cc:ab:42:f1:e9:1c:54:7c:9c:49:b9:ae:c4:
b6:03:dd:23:45:74:76:6c:8c:37:06:60:5a:b1:4c:
a9:94:19:ba:25:9e:13:26:58:32:da:8e:c4:e5:20:
95:29:95:7f:e6:ba:8b:d3:0c:d5:e6:ed:44:b4:ff:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:39:51:E6:3D:D6:26:96:A1:76:77:61:DE:FC:79:F6:33:4B:78
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/MZE5UeY91iaWoXZ3Yd78efYzS3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.185.0/24
77.105.148.0/24
77.105.152.0/22
93.183.78.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d6:ec:65:39:e8:5a:1c:4f:8d:67:2b:21:26:fd:e2:34:31:
cd:bf:c9:68:68:11:5c:95:fd:ab:fc:4e:e8:ec:8d:2d:ce:eb:
36:fa:1f:c8:00:56:ca:a0:55:eb:5d:0f:76:2d:fb:93:2d:34:
fa:9f:5a:18:1c:36:be:6f:96:99:04:dc:bc:0b:6c:8d:29:89:
dc:3a:aa:64:f6:36:c8:60:81:46:94:09:c5:05:43:0e:4f:db:
cf:e2:67:cd:47:a7:aa:4b:9b:88:65:1d:bb:f7:0e:96:bd:bc:
2d:80:47:b1:c6:ac:81:f2:53:04:dc:b0:1b:5c:75:72:65:9e:
e8:af:80:fa:fb:06:12:94:1f:c0:a0:ae:aa:9c:02:8f:41:26:
df:40:c1:e6:7b:37:2e:a9:13:72:ab:25:95:65:d6:d3:a9:e6:
d0:9e:66:d9:6e:83:ba:cf:20:44:dd:6d:2d:09:ad:60:e0:b3:
98:9c:ac:d5:d4:9f:72:0d:df:e2:b8:36:1f:29:e1:b4:80:40:
f7:3d:76:4d:75:53:0f:79:fa:f4:b5:97:10:9c:de:4e:70:f9:
5f:51:09:01:37:fc:48:35:81:c4:c0:b2:16:7d:3e:74:40:40:
33:5e:d8:0b:92:13:21:bb:de:f4:9c:d4:8a:6c:70:c1:83:b8:
e1:fe:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:59 2024 by rpki-client on console-ams.rpki-client.org