Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/mdQips-eFeq5ObQ7sJg2_yVld28.roa
File: mdQips-eFeq5ObQ7sJg2_yVld28.roa (raw, json)
Hash identifier: FqBc08l9ffHFv5WXGoAnuz3Qp7ChLKbEwdUFznNGOGs=
Subject key identifier: 99:D4:22:A6:CF:9E:15:EA:B9:39:B4:3B:B0:98:36:FF:25:65:77:6F
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBDB0E86FFDECD93AFCDA6FF5FBA4
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/mdQips-eFeq5ObQ7sJg2_yVld28.roa
Signing time: Tue 02 Jan 2024 10:33:58 +0000
ROA not before: Tue 02 Jan 2024 10:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202997
IP address blocks: 195.235.228.0/24 maxlen: 24
195.235.230.0/24 maxlen: 24
195.235.229.0/24 maxlen: 24
195.235.231.0/24 maxlen: 24
195.235.24.0/24 maxlen: 24
195.235.25.0/24 maxlen: 24
195.235.27.0/24 maxlen: 24
195.235.26.0/24 maxlen: 24
195.235.29.0/24 maxlen: 24
195.235.28.0/24 maxlen: 24
195.235.30.0/24 maxlen: 24
195.235.168.0/24 maxlen: 24
195.235.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bd:b0:e8:6f:fd:ec:d9:3a:fc:da:6f:f5:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99d422a6cf9e15eab939b43bb09836ff2565776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:bd:2c:0d:e6:f7:a8:e9:58:de:d2:df:91:
ac:06:6f:64:ab:57:93:7f:bb:90:8d:67:73:4e:2c:
a5:f1:fc:4b:13:fc:9d:2e:d7:70:56:f8:85:02:7b:
4b:71:0b:a4:4c:79:d5:9e:80:de:af:eb:e3:ac:b0:
45:c1:21:78:50:e4:2c:4b:c2:1c:73:5f:be:b0:63:
cb:65:d3:ee:67:f3:cd:36:e2:07:5d:52:c4:21:34:
ba:54:fb:7c:08:1e:43:12:4f:8f:a9:9b:f5:17:54:
d3:a7:8b:09:db:2a:54:42:46:a3:3d:87:b7:2e:34:
1d:e2:4b:b8:7d:59:09:e4:7e:e3:ed:b5:8b:47:df:
94:ae:60:5e:88:d0:61:a3:c5:4b:48:25:44:75:98:
1b:96:a1:99:e3:c3:58:0b:c6:8e:ce:74:7c:36:d6:
e5:19:f8:9a:cd:96:1d:92:7f:00:fa:5c:a9:f3:80:
0d:e1:77:1d:87:90:2b:09:c0:32:eb:70:c9:e4:04:
8f:16:b0:9c:35:55:b0:77:5f:e9:be:fb:62:23:8a:
be:af:92:35:6e:10:5d:b3:26:47:d3:61:c0:07:b6:
d6:7a:57:36:49:3e:5c:40:9f:62:69:99:18:bf:d7:
18:ef:0e:70:d2:4a:fa:82:b8:ba:09:02:5f:81:5e:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D4:22:A6:CF:9E:15:EA:B9:39:B4:3B:B0:98:36:FF:25:65:77:6F
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/mdQips-eFeq5ObQ7sJg2_yVld28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.235.24.0-195.235.30.255
195.235.168.0/23
195.235.228.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5a:3a:68:9e:af:e1:b4:f0:7e:23:90:1b:3a:57:72:6a:78:
69:5d:3a:a3:75:44:71:51:56:ec:f0:10:ac:22:96:94:d6:ed:
94:c7:36:91:4b:30:cd:18:82:1a:6b:1c:de:fc:6d:5b:56:50:
8f:7c:70:33:19:59:a3:fc:18:c0:93:16:61:20:21:25:8b:9d:
c1:97:b7:73:0a:07:ff:ab:99:63:15:74:eb:e6:c2:b3:f6:19:
36:41:7b:9b:13:0c:d0:40:6f:aa:85:11:45:3e:7d:ba:ec:02:
79:a9:4f:38:45:3d:14:c9:09:4c:e9:1a:8e:61:b1:28:d6:37:
bf:98:07:28:b4:56:2c:c8:2e:63:e5:8f:3c:87:e8:32:7d:3f:
42:32:e0:ef:8a:d3:d3:50:7a:79:ce:1f:be:1c:bd:29:df:cb:
ae:b3:84:fd:33:b6:28:e3:0d:60:e6:c9:a8:11:8b:24:a2:97:
85:3c:96:3c:7e:d5:e4:3c:5b:22:43:77:b4:f0:b8:b9:0e:1d:
bb:80:fd:1a:22:32:d8:6a:90:6d:57:cc:58:de:af:36:da:2a:
74:d2:4b:ef:7d:86:c7:f1:d3:27:c2:5f:61:fa:d1:2d:fc:5c:
80:c3:b2:a8:7c:66:10:fa:d4:2e:d2:31:92:c0:a4:b7:18:08:
05:2d:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:29 2024 by rpki-client on console-fra.rpki-client.org