Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/MrMrnmFfd6AYjieruSsSVwZ1gsU.roa
File: MrMrnmFfd6AYjieruSsSVwZ1gsU.roa (raw, json)
Hash identifier: JVL/pAyF32oJdvawFzIH9Wm22jiYzpU2AXoggB3rOnU=
Subject key identifier: 32:B3:2B:9E:61:5F:77:A0:18:8E:27:AB:B9:2B:12:57:06:75:82:C5
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 018E6ADEB9D901A22EABE4ACF69D75625100
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/MrMrnmFfd6AYjieruSsSVwZ1gsU.roa
Signing time: Sat 23 Mar 2024 10:32:45 +0000
ROA not before: Sat 23 Mar 2024 10:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47214
IP address blocks: 193.34.197.128/25 maxlen: 25
193.43.0.0/26 maxlen: 26
2001:7f8:6d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6a:de:b9:d9:01:a2:2e:ab:e4:ac:f6:9d:75:62:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Mar 23 10:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32b32b9e615f77a0188e27abb92b1257067582c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:36:6f:72:72:fc:c8:ef:10:fb:f0:80:a7:
18:40:79:7a:ea:6e:bb:bc:b9:86:e9:e0:c9:49:a9:
d7:69:c0:70:32:03:d9:7f:14:07:99:a5:68:fb:e6:
50:ad:93:a5:38:b1:32:11:79:47:17:27:16:98:61:
c7:06:dd:37:7b:df:05:02:03:79:e4:0f:41:62:65:
dc:b6:87:c2:84:cb:20:94:65:f3:0e:92:87:ce:6f:
13:28:f0:0f:01:1f:d0:66:47:52:14:6a:6f:ae:c6:
2c:3c:fc:aa:5f:02:97:2e:d3:18:ad:e2:08:76:a0:
e6:16:5e:e7:d4:5d:f0:41:e1:72:57:43:9e:1d:f3:
10:bf:6e:c0:36:c3:47:36:e5:58:8a:25:71:cb:1d:
78:4c:53:18:cd:d3:e4:40:a0:23:e6:ed:e6:26:0a:
70:8a:a1:5d:62:28:ab:84:8c:c2:30:d8:b4:39:4f:
f5:4a:1f:7a:a0:34:a1:4f:f4:03:6c:b0:2d:55:1d:
61:8b:62:f6:0c:37:0a:6b:71:97:59:96:b6:4a:cd:
cb:fd:44:a9:17:b6:99:5d:ea:35:26:96:21:1b:57:
4b:cb:9b:4b:44:3d:d1:68:41:60:b5:28:1c:b0:33:
82:40:30:31:e7:ff:7b:e1:56:33:ef:2b:b1:4b:5c:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:2B:9E:61:5F:77:A0:18:8E:27:AB:B9:2B:12:57:06:75:82:C5
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/MrMrnmFfd6AYjieruSsSVwZ1gsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.197.128/25
193.43.0.0/26
IPv6:
2001:7f8:6d::/48
Signature Algorithm: sha256WithRSAEncryption
08:62:85:e8:5f:cc:f1:14:c8:ce:05:bd:17:43:91:52:30:bc:
11:6c:6d:cb:d7:ad:80:fa:80:79:c5:0d:b6:99:a4:6e:ea:81:
04:c4:ea:92:d2:c2:a7:31:31:86:f4:26:d3:88:c8:95:2d:69:
47:da:da:c7:fe:49:5d:4a:e3:cc:21:b1:4e:be:90:22:60:54:
fc:d4:47:1e:f6:8e:ea:ec:ca:d8:2a:b9:08:fc:af:e8:a6:2a:
1b:88:90:0f:85:ca:bd:41:27:f5:1f:ca:3f:8d:71:5a:7f:57:
2a:9e:4e:16:e7:e7:d2:e7:14:96:20:12:37:41:ea:ab:37:88:
1f:62:01:7a:eb:97:7a:f2:ea:21:f6:d4:fa:c0:cb:f5:35:3b:
c0:cc:80:53:55:e1:14:eb:05:c2:c1:22:0d:ed:50:81:3b:60:
b2:07:a7:9b:76:7d:c9:79:5a:96:0f:02:c1:7c:11:c5:83:f6:
15:d5:50:f8:6b:4e:37:3a:ae:33:8f:38:5f:3d:36:b5:c2:00:
03:11:e8:4e:ca:f5:58:ac:0d:77:8f:8e:de:41:3c:90:70:de:
8b:d9:60:5f:ac:0f:fd:ae:fb:05:bc:64:2c:56:2e:40:0c:d0:
f7:6d:a4:90:eb:7c:19:0b:14:82:8b:4e:98:01:d9:07:c8:50:
a8:dd:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 08:32:32 2024 by rpki-client on console-ams.rpki-client.org