Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/MGFHhAlbBZjtxgEqOVS-x23yPNY.roa
File: MGFHhAlbBZjtxgEqOVS-x23yPNY.roa (raw, json)
Hash identifier: J9QB5ZjhT9XXwhx/EOES2P6JU4Nh4RP6Rmn8RfkEwNs=
Subject key identifier: 30:61:47:84:09:5B:05:98:ED:C6:01:2A:39:54:BE:C7:6D:F2:3C:D6
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924B104133E50B19FB2782D06CA738
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/MGFHhAlbBZjtxgEqOVS-x23yPNY.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25206
IP address blocks: 46.35.170.0/23 maxlen: 24
95.158.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4b:10:41:33:e5:0b:19:fb:27:82:d0:6c:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30614784095b0598edc6012a3954bec76df23cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:09:aa:78:08:37:7a:a4:4f:93:98:97:ac:
2f:e7:06:4d:a1:88:72:7e:f0:cc:42:9b:ea:93:2f:
e2:a3:90:90:d0:cf:0b:b3:c3:30:5a:a9:a2:aa:22:
12:67:f8:3b:5e:a2:79:aa:6b:97:46:79:03:fb:74:
c5:c8:a1:de:7a:be:05:cc:d9:e9:1c:60:2d:a6:c3:
c0:94:22:a0:d1:4d:af:31:4c:57:59:53:79:8c:99:
78:d7:bf:25:fb:24:1c:95:97:62:05:70:7e:b5:8a:
e9:1b:66:eb:0a:77:26:42:fd:af:74:00:8b:2f:41:
e9:9a:c4:7c:d9:58:8f:c6:16:49:74:c5:87:3c:31:
c8:19:60:bd:64:12:78:2c:b5:ea:61:ff:b4:f4:04:
8a:ba:27:75:a2:20:b6:bd:ac:71:5f:bc:ae:e5:bc:
1a:72:4e:7d:71:a2:36:4c:9a:09:c1:f5:2f:e8:17:
1e:3d:b0:c0:45:86:5f:40:9c:3f:66:3a:ab:9a:64:
e6:9f:ca:ea:ee:18:38:aa:27:ff:41:a9:6f:c3:2d:
2a:08:93:eb:8b:cf:d5:31:0f:03:30:45:6c:82:7f:
a0:57:25:1e:5d:6d:de:fc:0a:73:7b:33:5f:3d:e5:
bc:b9:97:3e:ad:cc:06:9d:42:11:df:8c:c7:77:af:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:47:84:09:5B:05:98:ED:C6:01:2A:39:54:BE:C7:6D:F2:3C:D6
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/MGFHhAlbBZjtxgEqOVS-x23yPNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.170.0/23
95.158.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3e:f6:5f:cd:85:96:51:b7:15:20:4a:26:15:20:b0:57:98:
30:d2:81:52:a5:ec:fc:5c:68:ea:fa:9b:eb:88:e1:d1:d7:7b:
37:7d:2c:9c:23:08:df:e3:2a:b1:7a:9a:c3:39:b9:81:9e:2b:
e2:cf:c3:73:9e:a6:df:b0:75:50:8f:9a:56:39:3c:1f:fe:07:
b8:6c:4d:fd:b1:35:ec:72:9a:90:e4:0b:c3:08:db:52:40:f2:
bf:d8:42:1c:2f:89:9f:47:fc:69:18:85:36:b0:55:b8:64:07:
59:02:b7:c6:b8:29:2a:1b:40:0c:7d:08:61:43:c9:9c:5b:fb:
dd:f7:26:3c:b7:de:9c:0c:97:80:26:85:76:2d:db:7c:9b:28:
4a:83:1b:4d:fb:2d:d9:b7:d0:1c:3a:9a:f3:27:db:a3:c9:07:
5f:0c:41:e1:02:e5:5b:ca:ae:25:4b:c8:31:8b:1f:dc:a9:86:
d7:8e:24:4a:88:cc:e3:a9:55:92:6a:ee:a5:24:5e:35:40:5a:
49:f1:45:ab:07:0f:8b:9e:de:a8:4a:4a:c1:1f:60:df:92:72:
d0:1e:7b:bf:4f:f6:1f:fb:4e:48:dc:6d:89:83:41:55:e8:68:
e4:15:8c:14:db:8e:70:98:3c:10:6c:6a:b6:f5:30:09:34:ba:
f3:e7:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:41:06 2024 by rpki-client on console-fra.rpki-client.org