Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/M1U2FqvmJ-bvE3MTFe1q01Ge_D8.roa
File: M1U2FqvmJ-bvE3MTFe1q01Ge_D8.roa (raw, json)
Hash identifier: VG+7k9tZ3jrD97oawkAvQqJD7ql+ob4OejR+6L+5fLM=
Subject key identifier: 33:55:36:16:AB:E6:27:E6:EF:13:73:13:15:ED:6A:D3:51:9E:FC:3F
Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial: 018CC8714F8B71693C90BF24E0CA06B320EC
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/M1U2FqvmJ-bvE3MTFe1q01Ge_D8.roa
Signing time: Tue 02 Jan 2024 04:31:58 +0000
ROA not before: Tue 02 Jan 2024 04:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50357
IP address blocks: 193.106.124.0/22 maxlen: 22
193.106.124.0/23 maxlen: 23
193.106.126.0/24 maxlen: 24
193.106.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:4f:8b:71:69:3c:90:bf:24:e0:ca:06:b3:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Validity
Not Before: Jan 2 04:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33553616abe627e6ef13731315ed6ad3519efc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:fd:d3:d9:1f:97:62:30:5d:59:7c:4c:10:
40:68:70:74:dd:a5:b7:b9:b5:dc:4a:6a:93:68:9b:
ca:f8:9c:ad:75:1a:26:0c:ec:fd:5a:c8:61:69:a0:
9c:d0:87:5e:33:45:7e:cd:fc:a7:cd:e4:fc:84:e7:
18:bf:00:8a:20:2d:f0:fd:c6:0c:76:21:af:0a:35:
a6:e7:a1:0a:40:5e:06:9d:d9:85:e5:3c:a8:8c:8e:
14:aa:df:90:56:51:e3:32:56:8a:2a:bd:f3:84:5f:
df:db:70:b1:a5:47:9f:f0:bc:8f:ff:d2:34:f0:db:
eb:5a:fd:05:bd:ba:42:16:79:74:f0:19:d0:a0:ae:
9d:9a:d7:0d:2b:38:49:da:84:37:34:e7:1b:99:a5:
e6:8e:04:5b:4a:96:87:be:85:9a:fa:7e:0c:c3:dc:
4e:ba:84:c3:0b:0e:16:0e:59:76:e6:d5:5d:26:15:
13:6b:9f:2e:76:fa:cb:38:ce:f1:6a:76:84:3e:1a:
43:6f:86:a8:62:ba:02:53:25:ee:1a:fb:27:52:2b:
4c:63:82:02:2c:34:4c:43:1f:10:25:74:c8:7b:23:
2f:84:13:0c:23:e0:11:50:d1:e8:98:a8:65:33:2f:
67:17:9e:ab:dd:fc:48:32:fa:c2:f2:40:55:5b:92:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:36:16:AB:E6:27:E6:EF:13:73:13:15:ED:6A:D3:51:9E:FC:3F
X509v3 Authority Key Identifier:
keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/M1U2FqvmJ-bvE3MTFe1q01Ge_D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:48:6d:ba:67:ca:9b:91:f5:2b:00:4e:32:fc:0c:df:03:17:
c4:00:20:5b:17:48:b0:65:a9:f7:31:72:03:09:f9:71:d3:49:
68:a3:71:44:43:01:35:78:2e:ed:14:cf:46:ca:cd:c6:79:1e:
0e:a9:96:b7:ef:42:8e:f1:98:34:8b:29:40:99:56:f5:84:15:
ce:86:34:68:cc:d6:6b:2c:97:1f:32:a3:81:ad:3a:91:05:ab:
54:10:5e:2f:05:bc:b0:78:3f:3f:5c:1b:08:be:fa:d2:14:63:
b9:80:3e:d9:50:3f:5f:cc:37:f7:4e:d5:79:02:08:44:24:6e:
b0:ef:d0:8d:76:7e:a8:20:50:1a:17:9b:42:a0:6e:96:bf:4b:
af:d5:6c:ca:ba:65:a7:3a:84:be:23:ba:38:a1:d0:0a:16:61:
e6:a3:35:d5:0d:3d:a1:a4:84:62:4f:ff:b5:11:d0:b1:6f:24:
c7:79:c7:8e:7b:5f:54:d8:b1:bc:6a:da:83:98:b4:36:3a:2f:
e3:62:ef:a3:d5:5d:ab:8f:05:85:be:55:6a:cf:b3:81:5b:c2:
3a:82:45:4f:c6:8c:bd:61:13:55:b8:d2:5f:15:d7:cd:77:07:
bf:c5:4d:17:9c:b1:82:2d:26:19:c2:89:18:bf:38:33:cf:39:
d5:4a:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:01 2024 by rpki-client on console-fra.rpki-client.org