Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/MijA26x46sfg5W3B-_BEVsvsnOE.roa
File: MijA26x46sfg5W3B-_BEVsvsnOE.roa (raw, json)
Hash identifier: hB+1fbY/Bdqx8zf12roJF6i4hrqgYjjSjmSWFF27zeA=
Subject key identifier: 32:28:C0:DB:AC:78:EA:C7:E0:E5:6D:C1:FB:F0:44:56:CB:EC:9C:E1
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 018CC4252FE63EAA204EA475DDB09ACA4BFF
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/MijA26x46sfg5W3B-_BEVsvsnOE.roa
Signing time: Mon 01 Jan 2024 08:30:20 +0000
ROA not before: Mon 01 Jan 2024 08:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
2a11:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2f:e6:3e:aa:20:4e:a4:75:dd:b0:9a:ca:4b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Jan 1 08:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3228c0dbac78eac7e0e56dc1fbf04456cbec9ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:ec:c5:f3:d2:1f:ee:9b:86:5e:6b:54:92:
ce:c5:c8:05:23:f7:5d:cf:ae:fb:79:9a:16:c2:6f:
e0:e6:d8:43:99:98:6d:cd:77:e8:fd:17:00:ed:5a:
96:64:d0:dc:fe:31:ee:1e:db:47:44:36:33:05:0e:
d0:5d:10:30:8b:49:37:fe:8e:9b:73:5a:fc:c7:01:
48:ca:30:a9:b1:4f:92:53:fd:35:26:a7:ba:3a:be:
79:aa:c0:8d:e7:d3:62:5e:4b:1d:03:fa:27:e4:87:
98:d3:49:a8:de:44:0f:c2:b8:2a:dd:c1:1b:17:14:
19:93:27:db:c7:d4:c6:f6:6c:94:ea:7a:bb:0d:d1:
9f:1d:3b:29:36:54:3a:f9:b5:34:79:e9:1f:45:97:
9c:cc:bb:27:32:3a:0f:38:7a:5b:1d:6e:91:ff:f3:
5d:e2:0e:33:35:2f:be:22:dc:aa:79:90:98:5c:18:
d8:62:89:55:87:5a:96:2c:62:3c:c8:36:ed:df:da:
c8:35:fb:22:74:23:e6:68:4e:f4:b6:58:c6:01:38:
08:a1:f7:cf:83:21:0d:ef:a7:f2:3a:f8:cb:ab:62:
25:8c:5c:4b:68:25:fd:84:8a:63:fe:f5:1f:a2:b6:
54:3d:ac:a5:c6:7f:1a:3d:6d:d2:27:d0:3e:f6:ed:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:C0:DB:AC:78:EA:C7:E0:E5:6D:C1:FB:F0:44:56:CB:EC:9C:E1
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/MijA26x46sfg5W3B-_BEVsvsnOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
IPv6:
2a11:1680::/48
Signature Algorithm: sha256WithRSAEncryption
6a:7c:ba:0d:9c:9f:18:21:1c:1a:1a:9c:26:34:76:76:33:1e:
65:84:df:1f:01:47:32:60:0d:33:df:c9:37:bc:fc:40:02:74:
b8:cb:af:3c:9a:b0:f1:ea:46:e8:36:fa:87:23:8c:cf:bd:6a:
e5:15:9d:5d:6c:6f:74:48:72:6a:c8:60:c0:7c:a2:7e:14:be:
5e:a9:1a:9b:4e:29:d4:d8:c0:1b:55:10:1f:b8:a0:83:77:c4:
2c:9f:1e:65:f4:ba:15:c7:15:7e:34:18:d7:1a:69:d5:75:80:
af:6c:90:50:9f:99:f5:5b:72:fc:f5:47:bd:e3:75:1e:b4:7c:
8f:9c:4a:18:b3:5e:a4:d4:4f:8d:1c:8c:02:9b:15:bc:77:a0:
09:1b:46:6f:6d:a8:76:0f:b0:ad:39:66:2e:ec:93:91:a9:54:
9d:25:9f:93:06:4b:c2:75:10:cb:fe:9d:d9:54:b1:9d:12:1f:
cc:b3:ee:01:f0:64:74:74:02:da:71:47:d1:b4:5a:1a:28:50:
cd:eb:71:c3:1e:dc:b5:c4:84:b5:81:19:f5:d0:cc:43:fc:83:
1c:4d:6b:b7:e6:7d:28:02:09:d8:7b:dc:62:07:5c:56:f9:09:
92:67:d7:04:43:1e:1f:30:04:38:cd:c9:58:60:4c:2d:ec:c6:
49:e2:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:53:29 2024 by rpki-client on console-ams.rpki-client.org