Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/MZlZKyECGY5z3xPOFQOq4x1GbdM.roa
File: MZlZKyECGY5z3xPOFQOq4x1GbdM.roa (raw, json)
Hash identifier: Pzkv2dIGqmufdZbwaaqCYoLqLqCyoKpkRh6faM0+6jc=
Subject key identifier: 31:99:59:2B:21:02:19:8E:73:DF:13:CE:15:03:AA:E3:1D:46:6D:D3
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 018CC3B66D169689BA349280D4F5D9199613
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/MZlZKyECGY5z3xPOFQOq4x1GbdM.roa
Signing time: Mon 01 Jan 2024 06:29:21 +0000
ROA not before: Mon 01 Jan 2024 06:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 193.104.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6d:16:96:89:ba:34:92:80:d4:f5:d9:19:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3199592b2102198e73df13ce1503aae31d466dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:6d:6b:c4:89:b7:24:88:b4:b3:b8:18:62:
a5:ce:ff:7c:88:16:ad:45:51:03:17:db:e0:a0:1a:
dc:32:85:32:9a:5d:4d:ed:14:e9:2c:ef:cc:e4:a3:
5a:cb:cb:e2:31:57:58:39:81:9d:e8:6c:6e:da:d3:
02:67:5d:6c:94:88:de:fe:54:26:ac:1f:9f:61:69:
81:83:84:05:c6:6f:1e:bf:de:89:9b:e5:ba:1b:f4:
09:86:c9:3c:91:8b:a6:87:25:49:43:95:36:09:0d:
e2:a0:ea:5c:78:a2:83:fc:6b:5e:88:16:7a:3d:aa:
67:9d:6e:a9:dd:39:4b:6a:d6:00:8f:14:fd:d9:7e:
6e:3c:24:88:4e:53:92:e6:db:4a:23:65:c5:d9:4a:
36:00:c8:2a:7c:d3:82:39:01:14:d8:ca:2f:64:48:
ff:7f:f6:42:cd:42:63:be:bb:78:6e:fc:91:8f:bf:
35:88:85:5d:5c:ed:ce:0e:4f:25:66:f7:ce:90:38:
76:d9:c3:33:10:37:18:f1:a9:ad:cf:b8:80:7f:71:
e8:44:e2:b8:d3:33:b0:f1:b5:7b:de:81:cc:41:36:
6c:7a:5f:85:c4:11:33:6d:f9:0c:28:6a:2d:1b:81:
10:79:e3:e4:5f:52:44:93:90:89:23:89:a1:1f:75:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:59:2B:21:02:19:8E:73:DF:13:CE:15:03:AA:E3:1D:46:6D:D3
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/MZlZKyECGY5z3xPOFQOq4x1GbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6e:a7:86:b8:c2:c5:b3:75:2b:ff:f1:b2:27:99:98:fe:73:
b1:17:e7:d0:51:81:b6:a2:35:11:8f:d1:59:ed:b1:83:f5:0a:
0f:19:2a:ab:5d:83:09:a4:70:b8:3e:32:1b:ea:d8:a1:b0:79:
af:00:d8:13:67:16:a5:52:7b:d0:b1:1d:32:85:bd:3a:e5:32:
75:fc:21:20:61:78:0f:93:d0:73:fe:1c:f6:fb:89:ae:01:d7:
73:c7:c7:b0:69:9a:98:4a:5d:a5:7b:91:42:fc:74:d4:11:1b:
ff:fd:b4:94:d0:20:d8:b8:2a:a7:a7:e2:d0:64:5f:ca:07:1f:
d0:15:11:0f:2a:3e:d2:29:da:b9:9d:b5:57:ff:6c:47:05:ee:
ed:32:c8:da:1d:4d:10:2f:c8:16:d0:6e:cf:ea:97:de:e2:5f:
70:1f:cb:00:c7:8d:71:1e:a7:5f:18:bc:ed:43:d4:67:fa:1f:
3b:03:0e:66:db:d5:56:98:d6:69:2a:68:cb:58:c5:0e:d7:18:
d1:2b:84:45:db:99:d4:25:80:13:68:2f:1b:ad:5c:82:18:8f:
85:c5:a5:e3:c8:90:60:12:1d:cc:d1:00:05:e9:b0:e1:20:01:
c1:07:2a:ee:46:fa:98:07:a8:cb:6b:0c:d8:d9:0a:54:2b:f1:
b2:55:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:44:50 2024 by rpki-client on console-fra.rpki-client.org