Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Mh_GNcUVa16oNJqbCfhW0lARbN0.roa
File: Mh_GNcUVa16oNJqbCfhW0lARbN0.roa (raw, json)
Hash identifier: FhhVHvEE/akBu8v4hdr0V5LN8DiDXi08oVRjC0Bfwl4=
Subject key identifier: 32:1F:C6:35:C5:15:6B:5E:A8:34:9A:9B:09:F8:56:D2:50:11:6C:DD
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 018CC348E31FE73C22159C387146A5C6DCE7
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Mh_GNcUVa16oNJqbCfhW0lARbN0.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 92.240.201.0/24 maxlen: 24
92.240.205.0/24 maxlen: 24
92.240.216.0/24 maxlen: 24
92.240.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e3:1f:e7:3c:22:15:9c:38:71:46:a5:c6:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321fc635c5156b5ea8349a9b09f856d250116cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:84:ed:1b:2b:c2:ef:95:76:ee:dd:74:81:
1a:e5:3b:21:28:77:3b:0a:6b:67:85:71:a8:da:c0:
be:ff:7a:4f:6f:66:f4:06:62:dc:5d:42:57:9f:34:
78:05:11:cd:cc:80:e5:35:91:54:8d:c2:ee:97:b4:
9b:41:9e:27:13:ce:7f:ed:19:10:fa:cf:90:82:48:
fd:68:e5:11:17:39:20:3b:cc:1b:8a:2f:c8:f7:c5:
67:d3:51:81:fd:32:ad:19:25:b3:23:7c:55:3b:58:
ed:b2:e4:3d:8f:20:fc:18:71:f1:fa:ad:b5:8a:36:
5e:10:ea:59:f8:37:09:6e:23:ea:f6:23:30:a1:44:
90:67:e1:81:6e:92:aa:ab:20:40:e1:4e:cb:bf:26:
e7:df:e8:42:e4:98:94:94:b7:d6:30:21:1a:d0:3c:
26:2b:dc:b7:a5:c5:2b:c3:36:8a:35:78:b7:e0:b3:
e7:32:df:a6:15:cc:08:b1:22:8d:50:82:9a:f0:dc:
ca:b1:7e:39:9b:05:cf:ed:86:cd:2d:e0:f1:fb:b4:
94:4f:f9:53:5c:bd:7f:58:0d:c2:45:b6:dd:bd:b2:
50:1b:46:e1:71:3a:fa:2c:60:53:28:1f:88:9b:b0:
ac:59:d7:6d:46:30:87:65:71:68:0f:ef:34:ae:a4:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:C6:35:C5:15:6B:5E:A8:34:9A:9B:09:F8:56:D2:50:11:6C:DD
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Mh_GNcUVa16oNJqbCfhW0lARbN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.201.0/24
92.240.205.0/24
92.240.214.0/24
92.240.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:21:50:36:7d:db:e0:fb:dc:19:bc:70:09:9c:77:02:4f:2f:
39:de:7c:d5:b9:9e:51:a8:39:4d:1e:02:62:9d:3a:a1:34:be:
f9:4b:23:d7:ba:1d:16:5a:a1:0e:46:e5:de:91:a1:9a:b8:81:
93:20:87:d7:72:3f:9d:a5:15:2d:ed:6f:eb:ad:a1:7d:39:b4:
83:e3:22:eb:c6:72:85:49:d2:30:b6:69:49:cd:b9:12:d5:34:
e1:66:4c:20:b3:07:95:b7:bd:db:67:8a:29:11:14:23:e3:37:
b3:65:a2:e2:0c:a0:28:f2:25:21:0e:8c:33:48:1d:17:79:4e:
a7:7c:0f:be:39:63:c6:1d:95:b8:3c:6e:d3:cf:e3:70:d4:d1:
3d:14:4c:80:12:be:95:07:4d:b0:2c:6b:bc:ea:11:41:c7:89:
1b:74:1c:f9:59:f7:91:c0:80:e5:38:0d:8e:f7:6e:dd:f5:3f:
56:11:8e:9b:d9:04:db:c2:62:c9:b2:a4:28:ca:77:a7:46:35:
43:75:c5:69:4b:e8:66:31:31:44:33:c8:3b:f0:e5:2f:74:83:
a7:83:0a:0c:8e:33:39:1b:20:60:33:41:5c:ca:2a:b3:d6:e7:
46:67:7d:dd:bf:d0:f4:e2:37:aa:92:b3:d6:f4:2c:bb:f5:2e:
f5:91:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:43:43 2024 by rpki-client on console-fra.rpki-client.org