Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/MuGZ8xUSn7wRFMQ7Gimk6QIB5Zw.roa
File: MuGZ8xUSn7wRFMQ7Gimk6QIB5Zw.roa (raw, json)
Hash identifier: fQMppXQBkxx0yVfl0/g50gLoxw7SWIIZyfUdTddLEN4=
Subject key identifier: 32:E1:99:F3:15:12:9F:BC:11:14:C4:3B:1A:29:A4:E9:02:01:E5:9C
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018CC5011032A36D10A17411C6CC0B2E9A75
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/MuGZ8xUSn7wRFMQ7Gimk6QIB5Zw.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 31.43.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:10:32:a3:6d:10:a1:74:11:c6:cc:0b:2e:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32e199f315129fbc1114c43b1a29a4e90201e59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:79:e0:c9:7a:10:6e:71:e5:38:67:ea:86:
25:6b:f7:ec:1f:0e:bf:42:71:ea:20:69:ca:0e:95:
89:90:2f:79:73:91:27:b4:b5:5e:af:6a:95:ea:6b:
2d:35:27:02:53:3b:d9:1a:dc:35:3f:df:c4:84:96:
90:ee:45:89:e9:a1:53:e4:b6:f6:29:0d:7f:d3:a6:
8f:4f:6b:d2:7d:e7:8d:c7:c6:db:7e:7e:e5:0c:1d:
af:77:49:12:2e:09:3e:d5:05:32:50:72:af:a9:a0:
7a:e7:ef:6d:c7:4d:ff:62:52:22:8a:9d:03:86:b2:
38:90:95:eb:ea:20:25:69:15:c4:a6:82:97:01:fb:
ce:5d:46:1d:43:cf:79:23:70:54:c1:8c:50:ba:12:
ff:6d:f3:29:15:b4:7a:05:12:c6:a7:9e:02:fe:04:
3a:c5:27:14:ae:43:0d:b4:25:7d:cc:c6:11:a3:5c:
ab:e1:ec:d8:f2:db:65:77:ff:12:d6:31:01:19:f4:
e3:6b:3d:ad:ca:0a:c4:f4:74:2d:48:da:4b:e1:29:
8e:98:4a:f1:2e:a4:e3:df:6a:06:e1:70:b3:27:d6:
15:cc:e0:fd:1c:af:0d:0e:61:b7:41:55:73:73:e7:
3e:08:dc:6d:4e:99:28:84:b2:2c:51:a3:5c:1b:fb:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:99:F3:15:12:9F:BC:11:14:C4:3B:1A:29:A4:E9:02:01:E5:9C
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/MuGZ8xUSn7wRFMQ7Gimk6QIB5Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b9:a5:79:76:a9:2d:60:9e:4c:0e:61:32:e6:b8:96:22:a6:
32:d6:9e:64:1c:38:8f:ae:c5:d7:4e:72:82:9b:11:a1:19:6d:
b5:10:3e:61:c1:da:2f:b5:15:0f:6d:bf:c5:10:0b:08:31:c9:
d9:ed:ee:c9:98:fd:46:43:ee:09:34:83:71:df:b2:b5:82:7d:
59:71:ea:07:ec:b1:fc:46:20:6f:c5:51:af:98:dd:4d:9d:29:
9b:10:54:88:c4:2c:b4:24:dc:02:73:34:03:da:39:62:d9:ef:
30:37:e0:0e:06:ae:51:a0:78:93:e0:4b:f4:53:9e:e6:7c:ac:
42:84:73:cf:04:4c:72:73:8e:57:f6:de:2f:5a:25:6f:4c:22:
0f:a5:b7:14:f8:50:9b:c6:fa:f3:fa:82:bc:ef:3d:da:58:95:
ae:68:22:4f:45:a0:bf:12:35:b2:fa:20:ea:37:6b:2f:20:6d:
92:fe:16:23:3b:cb:60:13:45:46:bd:2a:5f:35:f7:f2:af:3f:
b3:89:b3:fc:22:6b:80:b0:b4:36:67:09:d1:71:5e:55:2a:a4:
76:75:88:1e:46:0a:f1:8a:84:9e:78:01:5a:60:d6:b1:3a:b1:
ec:68:88:81:1f:1d:26:09:0e:c9:f6:53:4e:e4:8b:16:1c:84:
fb:bc:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:38:40 2024 by rpki-client on console-ams.rpki-client.org