Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/MKpNiy-2ICzqDbfIJy8TbRE0FxY.roa
File: MKpNiy-2ICzqDbfIJy8TbRE0FxY.roa (raw, json)
Hash identifier: Mo/zJygH0sWyXyQlIQ7uRmzabILHCTB1Eup5ieRutO0=
Subject key identifier: 30:AA:4D:8B:2F:B6:20:2C:EA:0D:B7:C8:27:2F:13:6D:11:34:17:16
Certificate issuer: /CN=467860b38613921c0085d47a34f66a1b64bceb0b
Certificate serial: 018F71FE95CC776D6503CA213B2C3C16CE51
Authority key identifier: 46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/MKpNiy-2ICzqDbfIJy8TbRE0FxY.roa
Signing time: Mon 13 May 2024 12:47:40 +0000
ROA not before: Mon 13 May 2024 12:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31229
IP address blocks: 2.57.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:fe:95:cc:77:6d:65:03:ca:21:3b:2c:3c:16:ce:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467860b38613921c0085d47a34f66a1b64bceb0b
Validity
Not Before: May 13 12:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30aa4d8b2fb6202cea0db7c8272f136d11341716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:39:90:ad:1a:bd:1a:6c:5e:bf:bf:f6:87:
6a:d4:16:96:3e:3d:6f:db:b7:63:a3:38:51:8b:b6:
23:5f:9b:56:b4:fd:a3:6d:cb:d2:c7:16:de:07:e2:
a8:60:90:7e:50:9f:94:8a:07:a7:02:25:00:1f:c2:
f4:77:bc:b2:e7:39:eb:06:ea:4b:7c:68:88:b4:62:
32:dd:f5:6e:92:ff:e8:13:bc:ba:41:b4:2f:70:00:
a8:35:80:8e:04:f0:24:a5:af:35:5d:9a:c7:9a:b3:
70:f1:e5:8e:4d:8c:c5:8c:1c:a7:34:60:2d:06:51:
11:79:98:16:9d:bf:4f:67:f6:7f:2f:a8:cc:84:2c:
4c:fc:37:19:fb:d2:8f:79:82:5a:72:d7:05:c2:07:
8d:d0:16:2a:d2:5f:60:7b:eb:63:e1:11:69:d7:e9:
a8:6b:80:1e:d2:31:35:a1:a3:c5:10:80:fd:4a:12:
dd:b2:e9:8b:ba:ef:53:e1:de:70:73:21:8b:c9:e5:
82:fe:61:01:1d:da:55:3c:f4:38:ec:70:b6:29:1f:
4b:c4:f1:ee:54:de:e4:ed:56:b5:a4:dc:6a:65:aa:
13:ae:0d:93:8a:3e:9f:a5:62:77:2c:e5:0f:62:4b:
1a:c3:f9:de:1d:cd:ba:c1:60:1b:95:f3:54:a6:af:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:4D:8B:2F:B6:20:2C:EA:0D:B7:C8:27:2F:13:6D:11:34:17:16
X509v3 Authority Key Identifier:
keyid:46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/MKpNiy-2ICzqDbfIJy8TbRE0FxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:d9:12:ec:b0:69:b8:57:79:b7:64:9e:83:0f:11:14:21:65:
da:f2:28:2c:49:99:32:b5:3f:a4:bb:95:96:b7:dc:d3:42:9f:
66:7c:df:f7:0c:a9:af:22:98:a8:0f:eb:5f:99:cf:6b:22:85:
ed:90:92:f8:23:d5:88:db:93:cf:db:dd:20:40:dc:9c:7f:1a:
c3:ca:d5:53:c4:b9:65:6d:1a:1e:93:b8:20:e4:dd:d5:db:8f:
e3:21:79:0f:af:03:a3:e3:e3:bf:4f:b5:fb:f0:e5:f7:6f:9c:
c0:03:cc:c8:c6:2f:c6:e7:56:7c:de:d1:46:1e:9a:35:01:cb:
f6:c9:7a:8d:8f:52:2c:d0:db:c8:7a:e4:d5:ae:f3:e6:59:3b:
b1:42:a1:8d:8d:f8:d0:e5:5b:97:5b:37:79:0a:0f:26:58:e7:
2b:31:3a:77:de:5f:22:94:97:fb:32:0d:ee:8f:6a:16:37:0c:
15:6c:c6:42:8d:93:ad:80:a5:07:2e:87:ce:6c:0d:1b:60:3f:
d7:e9:aa:ee:a7:b2:09:e6:92:e1:65:01:25:e6:30:ff:fe:69:
1a:e3:f4:18:b9:70:6f:f7:c4:85:6b:fd:ba:52:f6:53:c8:f8:
32:1a:25:4e:30:c1:38:e3:a1:19:70:15:0f:a9:73:86:b3:db:
b5:dc:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:11 2024 by rpki-client on console-ams.rpki-client.org