Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa
File: Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa (raw, json)
Hash identifier: /ZKZSuexa8O8H8TunUKYFqIZ+SWpHK6UFIFolrBfphM=
Subject key identifier: 31:BD:5B:93:1A:82:53:25:44:1D:4C:A3:35:78:45:14:94:33:2F:EA
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018D88B3696E3DE86E373C3C8818898D04FD
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa
Signing time: Thu 08 Feb 2024 12:31:15 +0000
ROA not before: Thu 08 Feb 2024 12:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204800
IP address blocks: 192.250.228.0/24 maxlen: 24
192.250.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:b3:69:6e:3d:e8:6e:37:3c:3c:88:18:89:8d:04:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Feb 8 12:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31bd5b931a825325441d4ca33578451494332fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:66:1a:cf:aa:65:34:61:95:9c:90:60:7f:
1f:90:78:ea:04:ca:93:74:3a:de:12:dc:8f:ab:55:
0d:8b:bb:62:95:45:5f:0b:9c:ca:dd:a0:88:71:f1:
c4:4b:e1:dd:cc:35:1c:e0:e0:3b:13:df:fd:b8:b7:
68:ce:4d:78:64:4c:0e:e9:e2:cf:92:25:ab:98:7c:
09:4f:f3:79:38:e0:3d:d6:e6:c7:ea:1d:20:cb:61:
65:2f:7a:3c:aa:c1:3c:71:a0:d4:ee:83:0c:50:d1:
08:90:c3:aa:b7:20:24:0e:d3:64:50:cd:7a:1d:6d:
69:0b:0e:b0:21:bf:60:7e:b2:1d:39:0c:2b:c3:d8:
35:bd:1c:01:e9:7a:e2:b7:ea:9a:f7:38:94:f5:54:
08:30:a1:ac:c8:7f:0f:9f:27:fe:97:fd:47:e6:d3:
e5:f4:0f:62:ae:6b:3f:86:55:b0:8b:b3:83:2b:fa:
30:1c:46:f2:c3:fa:30:69:10:56:39:4f:78:83:76:
62:4e:f0:fa:19:4f:c7:19:f3:ec:4e:6e:c3:18:21:
9b:5c:e1:fa:f3:11:8d:c0:0a:20:5a:5d:ce:03:e8:
15:28:46:16:41:17:94:d7:e0:87:c4:7d:56:bc:c2:
65:98:75:5c:96:bf:f6:a3:72:5f:d0:5a:99:a3:20:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:5B:93:1A:82:53:25:44:1D:4C:A3:35:78:45:14:94:33:2F:EA
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.250.228.0/24
192.250.235.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ef:f0:26:c8:db:3a:71:48:74:48:02:29:ee:ad:b4:37:89:
64:21:09:f2:bf:4f:a0:de:68:c5:d6:c0:ed:2f:0c:f8:11:49:
27:d8:4e:93:3a:7d:a6:35:6a:c0:c1:94:2d:ed:0e:35:dd:e2:
71:6f:72:ea:c3:c1:e3:2c:98:95:3d:ee:7e:f7:95:77:87:fe:
2f:6e:2a:90:c2:fb:c2:72:fb:fb:14:85:7d:31:c9:74:23:ab:
dd:60:2b:90:9f:2d:60:8c:4e:ee:7b:59:90:dd:f2:ab:b8:4e:
44:1d:3a:92:d8:d5:58:e5:73:59:48:61:70:0f:8d:45:02:a7:
53:54:8e:a4:de:8d:1d:1d:83:ad:99:4b:f5:e4:00:08:8b:62:
a3:fd:4d:30:58:91:66:bc:2b:69:4f:e7:df:c6:f7:73:4c:6e:
7a:8f:a3:3b:84:86:2e:24:ca:26:dc:87:03:8e:d8:f7:43:49:
12:01:f2:cf:6c:2c:5d:bf:76:69:e4:3e:a1:23:ab:f5:cc:74:
39:da:1c:55:c9:65:8c:66:d4:f4:2a:a2:76:ec:a5:62:f6:f0:
94:88:d5:26:d1:2a:c3:35:15:40:52:3f:54:dc:46:4b:a2:5b:
9d:b0:65:5b:d5:97:aa:39:54:c5:57:1c:c0:47:23:d0:11:c0:
96:9f:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:18:47 2024 by rpki-client on console-ams.rpki-client.org