Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Mvqgc9lt5XA_NgEFsqpa7QGFGfo.roa
File: Mvqgc9lt5XA_NgEFsqpa7QGFGfo.roa (raw, json)
Hash identifier: 0HWkiAPAcrsRN21RGGj5tKvpRLftONc3Cd06VTGZiq0=
Subject key identifier: 32:FA:A0:73:D9:6D:E5:70:3F:36:01:05:B2:AA:5A:ED:01:85:19:FA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F4A2A99273C87D883D80EBF25C399F5E8
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Mvqgc9lt5XA_NgEFsqpa7QGFGfo.roa
Signing time: Sun 05 May 2024 19:10:56 +0000
ROA not before: Sun 05 May 2024 19:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215181
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:2a:99:27:3c:87:d8:83:d8:0e:bf:25:c3:99:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 5 19:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32faa073d96de5703f360105b2aa5aed018519fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:72:3e:92:e2:a3:fd:30:42:ad:26:86:03:
a3:56:41:bf:3b:bd:78:68:8c:eb:2e:a8:4c:78:c5:
f1:e6:42:41:cd:d5:11:84:6f:01:0a:47:d2:85:10:
7b:b4:5c:19:1c:fb:30:0c:db:dd:9d:9d:3e:e1:37:
cb:d6:96:0a:e6:df:3e:72:c0:cb:22:a1:f0:50:14:
29:a9:1e:23:71:de:b9:3e:32:68:4c:62:e1:8a:94:
90:18:b1:69:f9:e9:f3:29:36:73:ef:e8:ea:9a:ec:
5f:a0:c4:52:d3:a5:54:a3:6e:f8:9f:78:32:60:8c:
c9:2e:e4:82:fb:97:6b:b0:4e:6c:27:00:96:bf:7a:
f6:c0:64:b5:86:59:f8:22:43:5a:03:6c:51:74:ae:
56:cc:9d:d5:4b:c1:80:e3:06:12:c5:bb:24:c5:35:
99:ff:ff:01:88:d1:9f:3f:0b:74:9c:ba:26:fa:4a:
6c:42:15:09:39:3e:5b:44:8a:df:a3:8a:dd:1f:a9:
02:77:db:7e:35:9d:33:e7:b7:a3:ff:c8:c4:89:30:
9c:57:c7:58:c2:be:5d:80:cb:dd:6f:90:9a:85:c4:
0c:21:13:fb:af:49:03:23:3f:49:48:d4:f1:c6:02:
6c:07:2f:25:7f:cb:21:88:e1:0d:ec:06:95:d3:52:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:A0:73:D9:6D:E5:70:3F:36:01:05:B2:AA:5A:ED:01:85:19:FA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Mvqgc9lt5XA_NgEFsqpa7QGFGfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a6:f2:a1:71:24:b9:55:48:47:8b:95:2d:6b:7c:5f:61:d6:
2e:6b:b1:41:63:d1:68:9a:e6:43:7f:da:67:99:07:72:4d:46:
e0:0a:62:6d:57:5a:1e:22:3e:03:ad:2d:58:92:ca:14:d6:7e:
59:06:cd:7f:90:d1:6e:ff:3e:ee:85:01:67:ff:36:46:46:da:
2a:53:3f:aa:ce:9d:a1:3d:eb:7e:61:bb:f6:3c:83:66:b9:c0:
b7:6d:3b:27:84:03:d1:94:23:92:8b:93:85:d5:b1:3f:c3:a9:
52:c8:ab:b7:74:dd:d5:4b:73:87:81:70:40:d9:1e:fb:c9:18:
24:6a:5e:20:8a:05:05:42:9e:6e:4a:48:42:dc:34:5c:63:b2:
cf:bb:9d:6e:f0:05:c6:19:63:e2:24:e1:17:57:67:cc:a8:b1:
9d:1e:fc:1e:e1:14:d5:ac:60:4b:e3:e3:31:58:1c:6f:d4:1b:
1b:cd:55:06:6b:70:8d:a7:bc:c1:b7:fa:56:46:e1:9a:fa:84:
b3:85:3a:f0:6d:20:d3:c8:91:46:23:44:17:a8:f3:d4:5f:8b:
90:61:71:21:71:ae:0b:9d:40:63:77:15:d4:7e:a9:cb:c0:0d:
9d:30:fa:70:7b:c8:a3:c3:57:00:41:72:76:37:3d:28:2e:db:
a9:db:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:05:11 2024 by rpki-client on console-ams.rpki-client.org