Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MvMdMTN2IBOJbybqeLRWDPhpaB8.roa
File: MvMdMTN2IBOJbybqeLRWDPhpaB8.roa (raw, json)
Hash identifier: K8SanZHq6nN/KhBOTFDVxgVSd55JD+Pc/Z4HvPQJiUU=
Subject key identifier: 32:F3:1D:31:33:76:20:13:89:6F:26:EA:78:B4:56:0C:F8:69:68:1F
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018DE5DD6521970C191F618043F57FEA51AA
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MvMdMTN2IBOJbybqeLRWDPhpaB8.roa
Signing time: Mon 26 Feb 2024 14:41:48 +0000
ROA not before: Mon 26 Feb 2024 14:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208660
IP address blocks: 185.226.252.0/22 maxlen: 22
185.226.254.0/24 maxlen: 24
185.226.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:dd:65:21:97:0c:19:1f:61:80:43:f5:7f:ea:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Feb 26 14:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f31d3133762013896f26ea78b4560cf869681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:1b:58:f6:9a:2f:11:bc:e5:3c:3c:ef:16:
f4:0e:f0:e8:2d:52:7b:71:b6:c2:de:96:21:ea:55:
e7:ec:8d:22:2c:4d:46:ee:6f:9a:52:d0:8b:2e:eb:
4a:06:42:fd:25:9a:48:fa:af:25:cd:4a:83:f0:47:
2b:5d:bb:dc:aa:f9:eb:b7:85:bd:b8:6c:91:1d:bb:
60:33:11:8b:d3:66:ca:10:9a:f3:2e:55:fe:ed:0a:
29:cd:bd:c4:42:7a:22:c4:cf:40:97:87:08:79:d3:
7e:27:f8:98:d8:f5:f9:6b:4e:9f:44:cd:4a:e3:cb:
53:ba:40:2a:21:f9:39:18:28:b3:f9:d3:17:7d:78:
82:48:fb:24:81:40:72:8e:d0:f7:b2:8e:1a:a1:ab:
7f:3a:a0:f7:87:6e:6c:59:f8:ea:7c:ce:7c:ad:14:
a4:97:e1:25:ef:31:05:bc:50:26:05:9b:9f:4e:b3:
48:45:a2:60:d0:65:0f:63:3b:9e:fa:df:7b:8f:80:
39:35:ab:40:60:49:7c:cb:5a:ce:1c:de:33:38:95:
28:04:ae:4c:5c:61:a4:9b:fd:47:33:1c:90:e6:be:
aa:d9:b0:30:99:ac:0d:7e:fb:d6:41:b3:f8:c4:29:
e0:71:37:28:e7:bd:15:c2:69:8c:6d:6c:e5:40:c9:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:1D:31:33:76:20:13:89:6F:26:EA:78:B4:56:0C:F8:69:68:1F
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MvMdMTN2IBOJbybqeLRWDPhpaB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:0e:91:b5:3c:a0:b3:1d:37:1f:c7:67:d5:6c:2f:3b:ac:14:
ef:cc:4d:79:44:ee:33:d0:2a:67:f8:06:74:19:68:4d:cd:b7:
83:9a:f0:fc:57:5d:84:81:4c:fb:9e:82:e2:6e:66:c1:1b:89:
8d:74:ca:fb:88:6c:17:06:19:a2:05:cf:c8:12:1d:a7:91:cb:
ac:21:19:c7:15:c8:5f:10:b7:00:b4:e8:c9:f4:1d:6c:b8:8d:
43:8f:c7:33:1f:96:74:70:fa:ca:df:10:23:27:eb:0b:12:36:
94:9d:3f:f7:f0:8e:91:cc:6f:45:3d:2f:88:83:9d:09:a7:0a:
23:ef:c7:c7:96:d3:9f:27:f6:3b:f0:b0:84:3b:a2:35:f4:6d:
c8:a0:7a:05:af:07:6c:f5:a5:fb:b9:d7:54:68:d5:26:c4:f1:
32:6d:c9:f5:db:67:2c:ca:41:df:62:1c:af:e6:ce:45:b8:20:
af:38:cb:99:c7:02:eb:60:71:f7:fb:ae:50:05:e5:b4:61:9a:
1c:4b:e4:05:9d:d0:36:d4:b1:78:c4:da:69:5b:15:a1:d6:c4:
16:aa:c6:46:18:b3:07:43:33:22:96:10:4d:06:b4:33:99:fc:
70:14:72:c0:a5:09:64:56:4a:0e:6e:b1:14:91:75:2e:3b:d8:
db:89:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:34:26 2024 by rpki-client on console-fra.rpki-client.org