Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MhDIlS68_IO2ReoJ8LFnZkBlnqk.roa
File: MhDIlS68_IO2ReoJ8LFnZkBlnqk.roa (raw, json)
Hash identifier: ToluwbuoAtzynsfdGwM5gnFtSRapNxrQEHNk5ixNkSs=
Subject key identifier: 32:10:C8:95:2E:BC:FC:83:B6:45:EA:09:F0:B1:67:66:40:65:9E:A9
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5CA56784A51D77F350F1CF8A6BC2
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MhDIlS68_IO2ReoJ8LFnZkBlnqk.roa
Signing time: Tue 02 Jan 2024 12:33:43 +0000
ROA not before: Tue 02 Jan 2024 12:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212123
IP address blocks: 185.133.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5c:a5:67:84:a5:1d:77:f3:50:f1:cf:8a:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3210c8952ebcfc83b645ea09f0b1676640659ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:da:ad:13:9c:26:7c:87:3e:ec:aa:a4:ad:
b4:37:f4:e0:3f:fd:4c:23:b9:5e:62:86:e1:6b:ca:
7c:42:0a:fc:36:75:62:dc:cb:ca:15:b1:60:d2:7f:
ac:23:98:80:98:1b:db:30:61:a7:5a:a3:6b:99:3d:
37:9b:f3:66:d1:e7:c3:97:7e:8f:e7:d7:8c:8f:b3:
84:ca:df:c0:54:c4:95:15:ce:d5:d2:df:4b:76:6f:
ee:9c:99:43:f7:f6:a6:b8:76:29:ab:6b:1a:90:31:
e1:a6:57:4a:18:81:c4:31:01:af:d7:21:33:82:e8:
99:14:19:65:9d:0c:cd:1e:36:d4:74:2d:4d:ad:67:
62:92:df:e0:10:0c:48:74:27:18:6d:2b:f6:7b:9f:
ff:93:f3:f1:9f:8a:70:12:63:9c:80:ac:47:42:a3:
c2:02:6a:52:9f:a0:d7:48:85:7c:ca:53:4d:cd:a1:
60:04:32:e2:a5:56:92:ca:80:ab:e9:91:8a:37:21:
77:b5:6b:1e:fe:57:c2:46:89:12:a5:fb:9f:4f:0a:
47:11:b1:e4:c3:4e:5f:24:f5:58:72:95:42:04:f2:
60:8d:9f:f0:77:38:7a:8e:9e:f6:a0:aa:c3:3d:69:
57:b1:50:72:b3:6b:79:3d:ad:c3:06:29:72:92:a8:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:C8:95:2E:BC:FC:83:B6:45:EA:09:F0:B1:67:66:40:65:9E:A9
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MhDIlS68_IO2ReoJ8LFnZkBlnqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:82:9f:57:56:b8:d5:d8:ab:3c:8d:78:5a:30:a4:12:db:1f:
8f:d8:0e:79:ff:38:ba:3d:0a:66:ef:09:b3:84:09:e5:5a:8e:
6d:5f:61:f9:3f:27:f9:a4:c1:8e:fd:9a:b8:4c:44:75:7c:a0:
77:3a:b2:6c:05:13:b9:ef:5e:65:2e:b1:c0:08:6f:c7:71:29:
b7:8b:31:39:4d:44:bc:f0:6f:16:b1:76:f0:ee:54:bb:ac:49:
ff:01:d1:6f:d0:04:bd:90:85:be:3e:bb:ff:38:9f:f4:8e:8c:
ac:41:0e:0d:11:41:94:99:92:e1:f5:33:56:bc:1e:a1:6a:bc:
a5:f2:84:80:34:22:5a:e5:c5:69:a3:6b:89:80:c1:28:42:79:
56:49:0f:50:5b:62:ad:ac:7b:c9:b6:af:a5:aa:ba:ec:42:35:
dc:7f:a8:bf:b2:b8:26:72:66:91:9c:f3:62:e1:b6:69:96:cf:
5b:32:c1:e7:61:90:80:bc:d5:0b:aa:5d:b6:2f:fd:d2:41:5f:
14:01:c1:3c:ce:96:89:48:99:67:ef:83:36:39:cb:c6:2a:49:
d5:96:0e:7e:2e:0c:e7:5c:a9:8a:e6:24:72:02:f0:51:da:41:
62:88:79:b4:d4:cd:30:02:cf:a8:23:3c:3c:fc:9d:43:5e:f5:
c0:56:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:59:26 2024 by rpki-client on console-fra.rpki-client.org