Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/m2BuVig8YErAqgiQAMfe8GMuqZI.roa
File: m2BuVig8YErAqgiQAMfe8GMuqZI.roa (raw, json)
Hash identifier: xO6BT9PF2WDS0PfgRPTTstrY5haaaxQ5babve0ASmPk=
Subject key identifier: 9B:60:6E:56:28:3C:60:4A:C0:AA:08:90:00:C7:DE:F0:63:2E:A9:92
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A76CAB786BA0EBE1489402D302155
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/m2BuVig8YErAqgiQAMfe8GMuqZI.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34950
IP address blocks: 193.44.172.0/22 maxlen: 24
193.44.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:76:ca:b7:86:ba:0e:be:14:89:40:2d:30:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b606e56283c604ac0aa089000c7def0632ea992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:56:d7:40:3b:51:84:bc:43:91:6c:50:f3:
2e:73:93:10:65:b1:fd:29:7a:9e:a5:c5:77:dd:0d:
34:53:fe:75:2c:1a:1f:02:a5:e6:a8:55:b8:81:08:
24:0d:c1:46:36:02:5f:df:00:90:1d:3b:ce:1d:a5:
97:9f:88:02:6d:d2:28:89:1e:24:9c:91:92:3c:83:
1e:39:3c:ba:d3:57:60:41:9e:56:bb:9f:e9:3c:14:
7a:3f:56:55:2f:e5:c9:47:e5:ba:54:a6:01:5a:dd:
20:3d:e8:c7:ae:08:b1:2d:c5:0b:02:c1:93:0d:97:
c9:ac:aa:00:68:9d:e2:cd:2f:90:be:22:16:54:2d:
f8:d9:71:8c:0d:1d:1c:55:3b:0b:50:f1:a1:97:56:
03:03:e6:05:c2:86:ad:a5:76:93:4c:59:3b:60:51:
a0:a0:54:70:32:fe:29:b4:ab:0b:7c:4e:a5:2e:38:
e2:7d:8d:ad:b6:b0:98:80:27:d6:3b:6f:60:bb:66:
e3:f6:a4:62:13:ac:4d:3c:04:22:e9:ad:42:e3:ab:
ea:6a:26:9d:15:af:6a:13:a4:6b:7f:9a:94:47:8e:
5d:cf:fb:72:ee:7d:c2:29:0f:3b:92:db:bd:d8:4f:
7f:76:22:db:5b:18:6d:90:9f:b0:4d:27:fe:11:b1:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:6E:56:28:3C:60:4A:C0:AA:08:90:00:C7:DE:F0:63:2E:A9:92
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/m2BuVig8YErAqgiQAMfe8GMuqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b9:01:0c:3b:6d:4d:f6:31:ab:bf:18:a1:ca:f3:63:36:77:
c0:75:fb:f2:d8:40:10:ea:ce:a5:3a:3b:c8:24:75:82:e9:18:
40:84:26:71:79:8a:8c:89:d3:05:bc:e8:a9:86:15:a3:f0:99:
ad:e8:2e:92:e0:24:29:2a:14:f9:6b:8f:76:dc:93:0a:f6:62:
be:8c:99:32:f7:cd:74:da:1e:12:00:06:82:43:38:e7:71:27:
36:92:93:e2:01:f0:55:d0:d9:8b:d7:a1:60:81:50:57:62:b2:
4c:dc:fa:c2:f3:a0:cc:b5:64:7c:47:9c:1e:44:df:1b:b5:fb:
88:82:18:ac:87:0c:bd:92:de:62:b9:00:34:9e:25:f0:ac:68:
d7:92:fe:0e:ad:dd:d2:53:eb:f3:6d:42:19:32:c5:a5:50:68:
cc:61:01:87:9f:63:8f:9f:7e:0d:71:2d:e4:0d:b2:63:2d:2e:
2d:f4:75:20:b7:8b:5d:45:e4:c5:ed:49:57:f6:ec:08:74:fb:
3c:02:05:f6:f0:f7:0b:35:5c:1f:4e:cd:8e:d6:fc:40:72:2c:
44:04:cd:78:76:5f:9c:fb:c5:5e:73:1c:1c:85:33:cb:46:5e:
21:8c:cc:76:f2:7f:68:38:f4:73:d3:60:17:7e:f3:f7:57:d3:
a8:bb:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:33:56 2024 by rpki-client on console-ams.rpki-client.org