Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/MRrjmy4ApfsymCRJFb5DaNVQt0I.roa
File: MRrjmy4ApfsymCRJFb5DaNVQt0I.roa (raw, json)
Hash identifier: EOLxIy3o2viDim4zf8METGCB76CvK2TsNQgSEhrJfm0=
Subject key identifier: 31:1A:E3:9B:2E:00:A5:FB:32:98:24:49:15:BE:43:68:D5:50:B7:42
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 018CC86F639A64CB97AB4FD76B17AA0ACED7
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/MRrjmy4ApfsymCRJFb5DaNVQt0I.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39599
IP address blocks: 193.93.104.0/23 maxlen: 23
193.93.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:9a:64:cb:97:ab:4f:d7:6b:17:aa:0a:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=311ae39b2e00a5fb3298244915be4368d550b742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:a6:0f:b0:8e:3b:e1:83:60:b0:bc:a4:9f:
9c:6c:c5:ef:56:99:a5:75:e9:b6:0a:84:a9:e5:87:
8e:0b:1c:4b:d3:5c:22:7d:26:a9:98:59:e5:12:75:
66:42:f4:9f:31:73:de:d7:c1:79:db:eb:56:2c:e0:
bd:e2:40:3b:b4:87:b6:54:d6:83:fb:e2:89:96:6c:
68:9d:de:d9:ec:15:f7:fc:86:f9:17:50:36:70:ae:
6f:52:bc:5b:86:86:4f:93:87:b8:78:29:40:4d:9c:
88:ef:65:15:22:17:2a:f3:0d:62:38:61:81:95:29:
35:3a:4e:23:f4:2d:01:ff:fd:1e:d5:77:78:79:49:
44:c9:b1:c2:a0:9e:62:1c:49:aa:08:a9:64:71:b3:
86:31:9c:37:6c:65:aa:28:39:75:cf:b4:84:05:51:
fc:2b:fa:53:3a:ee:51:b8:0b:50:a7:3a:9f:19:0d:
65:dc:94:c3:96:92:63:4d:ab:7c:16:9a:68:b8:d1:
6a:f4:a1:18:0d:00:4e:ef:e8:f9:31:c0:8f:1c:d5:
af:59:9a:eb:9d:56:45:5a:a2:b2:f6:7a:87:ec:36:
1e:36:be:15:da:7e:c6:46:15:c5:71:83:cf:8f:55:
ea:8d:e0:2e:e6:f6:10:e2:87:85:a5:5e:94:9a:dd:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:E3:9B:2E:00:A5:FB:32:98:24:49:15:BE:43:68:D5:50:B7:42
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/MRrjmy4ApfsymCRJFb5DaNVQt0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.104.0/22
Signature Algorithm: sha256WithRSAEncryption
35:2c:4c:cf:57:52:7f:94:0d:ed:ad:25:10:79:1d:34:c6:93:
31:51:45:a9:50:85:69:87:ba:6f:cb:67:7f:bd:fe:14:64:98:
b9:13:bc:ae:73:af:69:6a:04:4b:04:fe:96:60:18:f1:53:ee:
ff:ca:34:81:ef:92:d5:dd:98:e4:2d:e9:e2:25:06:f3:67:32:
5f:b2:0e:21:66:93:4e:fc:a5:26:3c:55:88:5e:51:26:d0:f5:
59:c5:2e:ca:2d:ad:68:55:50:66:22:f5:e5:32:fb:1b:4a:ea:
56:5c:b3:c4:b4:3b:79:61:dc:3f:a1:0c:71:ca:f1:70:58:de:
99:32:f6:33:6b:4e:91:d1:2a:1b:fe:f3:95:f8:d0:fe:19:00:
3a:14:6c:67:22:90:52:27:a9:1f:f6:e7:dd:c2:58:e3:da:c1:
63:bc:7f:19:6f:4c:59:cf:19:f7:04:09:d0:43:05:aa:fc:3d:
f4:58:4e:5a:d4:f7:24:e8:b0:46:1c:3d:a9:84:30:23:2c:6a:
91:a2:16:5a:5d:5d:2f:95:6b:4d:ee:8f:07:ea:fd:17:ec:12:
51:a2:72:1f:12:30:64:7c:b6:e1:f6:0e:11:1e:ea:71:cb:cd:
d5:4c:c8:5a:66:83:37:e2:d0:54:96:61:c2:46:f7:ea:73:fe:
b0:c1:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:50 2024 by rpki-client on console-fra.rpki-client.org