Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/mbpxne21l7SnNHE7K5c22Yx8Nwo.roa
File: mbpxne21l7SnNHE7K5c22Yx8Nwo.roa (raw, json)
Hash identifier: jSYSRPRZLk2PbiyA56sGNfbHlydRnrCA9ZYKNkFGAyw=
Subject key identifier: 99:BA:71:9D:ED:B5:97:B4:A7:34:71:3B:2B:97:36:D9:8C:7C:37:0A
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B5C94094264752FADC3F5146BBF05
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/mbpxne21l7SnNHE7K5c22Yx8Nwo.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54588
IP address blocks: 176.121.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5c:94:09:42:64:75:2f:ad:c3:f5:14:6b:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ba719dedb597b4a734713b2b9736d98c7c370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:b4:d9:8e:53:66:5a:55:42:91:f2:81:97:
66:75:70:2a:6b:93:a5:00:e7:19:73:81:f4:bf:f8:
74:50:46:c6:45:24:73:65:ed:97:ec:d2:06:77:f3:
82:90:6e:14:3d:e8:94:fd:1e:59:04:94:1a:2f:94:
1e:31:78:49:2c:c1:bc:9a:57:db:cb:93:a3:b5:e2:
12:6d:a2:ae:be:ab:a2:53:f1:98:51:d5:69:0e:e1:
84:11:20:ff:f2:4f:9d:bc:2d:78:1d:d1:ce:73:70:
75:5e:9e:23:73:ca:62:0e:84:56:1c:4a:1d:ac:6e:
ec:6d:3f:b1:72:09:dd:a5:20:c1:fd:46:f0:16:64:
e8:bb:58:42:46:0d:36:ff:31:ac:94:0a:44:f3:b2:
88:d2:06:df:7b:e2:2d:e6:fd:0d:52:28:46:ec:f9:
9b:5a:ae:2a:fc:1d:66:71:0a:b4:c8:c0:20:14:3d:
40:25:01:e8:f3:e3:f1:38:bb:42:fd:75:48:82:63:
cc:96:28:cf:49:fe:81:f5:83:ad:e7:61:dc:76:a1:
f8:04:a5:9c:39:32:26:f4:c5:3e:c2:b3:af:60:35:
54:ed:11:55:72:85:a6:ba:84:ed:41:63:40:2b:3e:
4d:c5:6a:93:95:c0:43:8f:61:0e:bb:93:55:f5:55:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:71:9D:ED:B5:97:B4:A7:34:71:3B:2B:97:36:D9:8C:7C:37:0A
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/mbpxne21l7SnNHE7K5c22Yx8Nwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.89.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bc:cd:79:5c:ec:94:fa:8b:ed:ac:e0:80:7c:0f:5b:87:58:
96:cd:01:c2:78:0c:12:03:ac:50:ea:ed:a7:ae:4b:6a:b2:d8:
b7:95:1b:48:46:23:54:ab:de:4d:dc:a6:59:7d:93:2f:9f:ba:
e5:a1:2c:e3:8f:a5:73:28:11:82:f2:5f:bc:db:38:19:e5:c6:
48:96:e2:dd:75:3a:fa:da:aa:6d:d4:0f:94:00:7c:35:ea:66:
81:2c:34:e0:1f:69:e9:a0:42:10:72:b0:73:91:0e:1e:04:aa:
b9:b8:3b:d7:22:dd:4d:83:ec:ca:58:8c:25:43:82:71:8c:f8:
da:f2:a6:ca:68:df:c9:66:d6:a0:c4:59:24:e2:10:00:ba:6a:
de:ff:f1:67:50:c9:3e:43:a3:4d:0f:3f:9c:ed:2d:43:04:de:
6e:3a:69:bd:38:9c:8b:d1:1b:3c:9a:93:ed:32:f5:04:2b:91:
a4:52:eb:b0:cf:a8:ba:dd:21:e3:d0:b6:4a:12:40:8e:d1:e1:
c5:bd:33:65:93:d5:86:b4:1f:ec:8f:ab:08:75:60:d1:9a:85:
0b:f6:a6:19:db:fb:54:52:1b:29:ab:f4:a7:55:99:82:c0:b7:
24:2e:20:01:90:3e:35:59:d0:43:1e:90:c0:28:62:61:b1:2e:
d9:ac:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:03:35 2024 by rpki-client on console-ams.rpki-client.org