Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/mw1Us-tykZ27vYTMAQNKqofPEH0.roa
File: mw1Us-tykZ27vYTMAQNKqofPEH0.roa (raw, json)
Hash identifier: DpqJZu/r7pGC1sawcIF7y9frIsRLAVBmOl4ArgWnue8=
Subject key identifier: 9B:0D:54:B3:EB:72:91:9D:BB:BD:84:CC:01:03:4A:AA:87:CF:10:7D
Certificate issuer: /CN=3d563e205ad217433709b200a0dcd30c70961c96
Certificate serial: 018CC86EF66DB8B4CB1F288596C096A8EEB3
Authority key identifier: 3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/mw1Us-tykZ27vYTMAQNKqofPEH0.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34612
IP address blocks: 185.50.208.0/22 maxlen: 22
141.138.216.0/21 maxlen: 21
178.20.56.0/21 maxlen: 21
91.215.148.0/22 maxlen: 22
2a03:5380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f6:6d:b8:b4:cb:1f:28:85:96:c0:96:a8:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d563e205ad217433709b200a0dcd30c70961c96
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b0d54b3eb72919dbbbd84cc01034aaa87cf107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:e8:fd:e1:01:77:85:71:20:b9:2e:e3:de:
ab:b6:e4:72:49:b7:a4:4d:7f:4e:c7:8b:c6:fd:65:
21:59:14:4a:d0:fa:c5:10:b2:57:2f:48:a8:bc:8b:
7c:bc:48:e6:06:db:cb:28:d3:a6:70:58:f3:51:cf:
dc:69:7a:63:97:af:cd:c2:5d:c1:45:06:7c:3a:1a:
f9:bf:f2:fa:07:c9:09:ad:2e:63:b1:9a:fc:2c:be:
9e:d0:99:f5:e0:8e:2e:a0:92:73:46:72:d7:41:cc:
2c:17:ca:fb:4d:25:f6:e7:52:1b:83:db:1a:bf:b1:
e0:1d:ff:c9:6d:2f:6e:ee:39:4b:80:cb:55:28:5e:
ac:de:ed:ac:1f:67:d1:c3:92:5b:04:1e:67:e4:f8:
f8:78:10:fa:03:15:cb:83:2f:f6:18:3f:da:aa:74:
51:3e:bb:bf:6c:4f:0f:84:27:9a:7a:3d:6e:05:79:
5a:fe:0d:8b:00:09:93:f0:2c:21:1e:68:2c:64:a9:
2d:8c:91:2a:93:b4:80:d6:9e:28:85:ac:0c:a1:d2:
0d:07:e9:23:fd:73:f1:fd:f4:40:3a:47:fc:f1:34:
67:04:f5:db:54:c8:21:1e:04:4a:f0:8a:06:a7:6e:
06:42:4b:02:b0:b2:4f:1e:21:cc:68:0d:ed:b2:1e:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:54:B3:EB:72:91:9D:BB:BD:84:CC:01:03:4A:AA:87:CF:10:7D
X509v3 Authority Key Identifier:
keyid:3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/mw1Us-tykZ27vYTMAQNKqofPEH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.148.0/22
141.138.216.0/21
178.20.56.0/21
185.50.208.0/22
IPv6:
2a03:5380::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ca:7e:c2:8c:23:1a:5f:25:00:78:45:6a:b8:af:6a:fa:44:
ac:e3:6f:08:4d:32:ad:28:04:b0:bc:b5:a4:8b:f5:fe:cc:fd:
1e:da:83:1d:2f:b1:cd:de:51:2c:cd:cf:fb:df:20:cd:25:1d:
4b:01:e2:18:73:f1:b2:98:22:50:7b:e3:c7:bb:d1:67:58:57:
0f:8c:cb:09:af:b6:fc:40:90:a3:dd:62:13:e1:c2:ba:b9:8c:
f6:ce:4b:a7:ea:47:a3:99:d4:ad:c7:5a:af:10:af:d3:eb:0d:
5f:d7:34:86:19:8d:e5:64:a5:92:24:1c:bf:0c:85:90:e7:14:
1f:b2:04:e0:68:44:fd:32:df:ec:ef:fe:a8:26:0f:b5:6d:0a:
de:81:03:04:8b:e9:75:1a:42:5f:65:4a:00:1d:0a:1a:40:0f:
51:c7:8e:28:7b:7c:49:87:6f:24:cd:d9:c4:87:52:f9:34:54:
9a:73:b7:2b:1e:00:07:d0:5c:0a:eb:95:41:51:24:2d:1f:09:
a3:10:eb:c1:b4:a9:e4:68:6b:4b:7d:f7:65:0e:37:ee:bd:e1:
cc:02:2c:8e:59:b3:09:e0:40:3f:67:1e:15:cb:13:74:4c:fb:
be:cc:29:ec:6e:d6:d6:1c:bd:6a:12:83:8a:3d:8c:99:bd:2a:
eb:4b:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:18:33 2024 by rpki-client on console-ams.rpki-client.org