Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/Mwwb0o-g0qDqrmmyoo_UTAZwdME.roa
File: Mwwb0o-g0qDqrmmyoo_UTAZwdME.roa (raw, json)
Hash identifier: qTpHVQj1ILA5C8Du3VhGdFYNN1SRrUv3W8QHa9YrB2I=
Subject key identifier: 33:0C:1B:D2:8F:A0:D2:A0:EA:AE:69:B2:A2:8F:D4:4C:06:70:74:C1
Certificate issuer: /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial: 018CC7932EEB7784C1B5DEF47A833A8EBDFE
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/Mwwb0o-g0qDqrmmyoo_UTAZwdME.roa
Signing time: Tue 02 Jan 2024 00:29:20 +0000
ROA not before: Tue 02 Jan 2024 00:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 193.110.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2e:eb:77:84:c1:b5:de:f4:7a:83:3a:8e:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Validity
Not Before: Jan 2 00:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=330c1bd28fa0d2a0eaae69b2a28fd44c067074c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:52:2e:4b:5a:16:b0:c4:55:98:2b:a5:01:f6:
2f:af:4b:01:bd:da:e4:94:a9:6a:8e:86:47:97:4b:
76:58:69:70:1a:4a:c7:e9:98:d4:68:b9:82:47:c8:
35:67:89:b8:df:1f:c0:8c:70:01:0c:74:b3:1b:0d:
c1:53:3e:ad:df:76:c4:9b:a0:86:f5:89:72:af:23:
f6:e7:5a:22:b5:d9:72:0f:fd:80:04:55:8b:47:45:
d4:0d:a0:38:96:13:99:24:bf:5d:22:af:50:f9:31:
68:64:79:f3:a0:92:fe:fc:c6:e0:7a:c8:38:ef:31:
58:3c:85:a8:56:e1:c4:53:c1:fc:ab:76:8f:20:92:
e3:e5:44:17:95:3c:d3:d5:05:dc:b7:4d:53:05:9e:
5c:86:c7:78:bc:d8:73:36:69:5a:db:07:78:46:86:
07:48:95:27:ac:e6:7a:2c:f0:a9:4c:20:69:38:d6:
c5:96:61:bc:30:1f:09:2e:89:63:d3:a6:93:e5:7c:
6e:33:6e:0b:20:bb:0a:04:2b:b2:e7:49:bd:8c:4d:
0b:88:7f:a7:8b:44:a6:29:8e:b4:df:9c:d8:ba:af:
ab:8b:8e:de:b1:af:54:01:c2:21:35:17:8a:03:a4:
39:23:ca:2f:41:0e:83:44:39:c0:90:45:ad:61:a2:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:1B:D2:8F:A0:D2:A0:EA:AE:69:B2:A2:8F:D4:4C:06:70:74:C1
X509v3 Authority Key Identifier:
keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/Mwwb0o-g0qDqrmmyoo_UTAZwdME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.6.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4a:ea:a8:c9:17:9c:88:f1:a0:cd:d8:dc:60:30:73:ee:66:
e3:28:dd:06:10:e5:1b:da:cf:31:13:59:82:e4:f8:31:97:d1:
3a:8b:8b:2d:4f:d4:88:c7:37:98:ff:10:e0:3b:cd:2e:f2:25:
14:74:94:ee:9c:fa:bb:e5:0c:e5:cb:38:b4:8a:8d:fe:06:86:
aa:89:db:32:2e:80:30:32:00:a4:9d:2e:fe:41:23:8e:b3:ab:
df:24:78:d8:5c:5f:56:d0:ef:49:fa:a7:08:69:27:c1:36:03:
9c:73:40:9f:c1:6b:3b:00:f3:8f:a6:f5:74:ff:22:f4:0a:01:
bc:67:f8:cc:d5:ba:d1:92:11:bf:30:73:d5:b7:3f:c6:ba:56:
7c:ba:9c:f1:a1:e6:b8:d8:f3:dd:f4:3f:fb:65:05:b8:8a:16:
74:b8:e0:ae:e5:0a:b7:93:2c:6e:23:45:23:22:89:a9:79:1f:
4b:6e:6a:08:2c:7a:39:f1:e5:ba:8a:65:71:a4:5b:f3:75:0e:
f2:38:a7:b4:64:f2:d6:f4:81:81:3a:d8:f1:2c:ca:f1:10:c9:
cd:51:9a:c1:f6:84:26:aa:83:b0:cf:8d:f4:6b:dd:fd:e9:59:
7c:48:86:14:a8:53:2a:65:51:c1:c6:e3:87:d0:2f:a7:19:e0:
97:e1:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:40:39 2024 by rpki-client on console-fra.rpki-client.org