Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MJzeiOPgJVqrAeT-D1y760NP77w.roa
File: MJzeiOPgJVqrAeT-D1y760NP77w.roa (raw, json)
Hash identifier: xVATwNLkMDnLD8X1VU3mEXBAH+d6K02XA1q09b1x3fE=
Subject key identifier: 30:9C:DE:88:E3:E0:25:5A:AB:01:E4:FE:0F:5C:BB:EB:43:4F:EF:BC
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC727640E22F90BC0CB12AF5EA1CFB7F9
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MJzeiOPgJVqrAeT-D1y760NP77w.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35199
IP address blocks: 217.153.228.0/23 maxlen: 23
89.174.170.0/24 maxlen: 24
85.219.196.0/24 maxlen: 24
89.174.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:64:0e:22:f9:0b:c0:cb:12:af:5e:a1:cf:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=309cde88e3e0255aab01e4fe0f5cbbeb434fefbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:c0:94:b9:bd:14:8e:38:f4:c7:f1:dc:64:
69:10:be:09:b4:6d:ed:90:8c:30:2e:05:0c:1b:a9:
44:7d:4e:e2:00:ed:93:5b:a8:34:0c:6f:14:2d:46:
a0:1a:70:1b:9a:f4:8d:93:30:9f:5c:2d:e9:7c:0b:
83:57:63:e3:99:d2:a8:0a:2d:98:4d:25:ec:74:73:
33:db:6b:52:7e:9f:14:26:f5:b3:3a:3e:32:0d:96:
2a:79:24:be:ca:d0:c4:f6:16:d2:46:38:80:78:a3:
a8:fe:81:5b:32:e0:35:a2:7f:0e:de:7b:f3:1c:25:
d8:00:91:05:63:4d:b2:06:6d:98:49:1f:27:cd:ec:
42:7a:f9:54:04:35:96:17:71:26:93:e2:23:21:dc:
4d:53:5e:28:8a:f5:68:0c:d2:63:92:d5:4d:11:db:
c8:7e:dc:de:9c:02:e8:60:bb:65:4d:df:0e:98:d2:
4f:d4:e3:57:5b:ee:0e:a4:66:ff:e5:76:75:b3:b5:
51:3d:67:34:4f:39:f8:79:73:83:5f:93:a5:f0:89:
50:fa:79:2c:97:0c:bf:71:88:67:8f:02:5e:49:0c:
da:4c:91:c0:1c:2b:de:2e:7c:93:ea:21:9b:66:ad:
f9:12:6d:44:48:36:d6:a1:73:42:f8:cb:6b:7d:10:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:DE:88:E3:E0:25:5A:AB:01:E4:FE:0F:5C:BB:EB:43:4F:EF:BC
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/MJzeiOPgJVqrAeT-D1y760NP77w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.196.0/24
89.174.22.0/24
89.174.170.0/24
217.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
37:93:97:c8:1f:cc:81:be:e7:ac:99:48:d9:fb:3a:ae:13:b1:
a7:a2:73:e0:3d:5a:c4:c8:98:bd:53:50:16:b1:49:07:0d:b9:
7a:82:d9:91:75:a4:8b:87:b6:8a:0a:d7:5a:a1:1c:7c:49:ac:
39:09:52:37:84:38:43:80:b6:5a:3b:50:b4:fa:e5:80:1f:be:
00:be:21:fd:34:cc:01:38:07:90:29:d6:f1:5e:00:44:4c:a7:
94:04:30:a7:c8:ab:28:a1:2b:7f:ea:76:a4:5b:86:e7:ac:e7:
27:aa:43:4a:60:63:c9:ce:f8:e2:92:f1:0a:3c:c0:72:17:99:
76:b6:60:e5:a6:cc:d6:a6:aa:b7:3f:7a:51:56:ee:dd:37:c0:
e1:b4:88:02:bc:20:d2:98:47:cf:76:87:35:dd:d9:f5:df:bb:
2e:ea:2a:af:ab:9d:6e:4c:0a:6f:60:37:cb:1b:d1:54:f0:fe:
60:cd:a9:78:9b:57:36:e1:9d:65:d1:95:3f:bb:27:bc:bc:fd:
0b:22:17:9e:4a:be:16:0a:e9:dc:d9:be:a2:e3:e5:4a:c8:be:
0e:21:93:47:ca:36:8e:0f:83:2e:bd:a2:2f:4f:73:4c:1d:c8:
7e:ed:d4:50:d1:7b:99:c1:15:e8:f6:3d:e3:b4:06:4f:2b:40:
8b:09:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:49:26 2024 by rpki-client on console-ams.rpki-client.org