Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/mlPJdLFaKSYkMOavq5ZquBArepg.roa
File: mlPJdLFaKSYkMOavq5ZquBArepg.roa (raw, json)
Hash identifier: aRZW6X0d+q0i5Ewzm9LuE4VeXLin6yCIxh9XqhUE2po=
Subject key identifier: 9A:53:C9:74:B1:5A:29:26:24:30:E6:AF:AB:96:6A:B8:10:2B:7A:98
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 018CC72758394EF946A6B08DFA4A29B4B2D5
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/mlPJdLFaKSYkMOavq5ZquBArepg.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 193.84.78.0/24 maxlen: 24
193.84.85.0/24 maxlen: 24
193.84.88.0/24 maxlen: 24
193.84.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:58:39:4e:f9:46:a6:b0:8d:fa:4a:29:b4:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a53c974b15a29262430e6afab966ab8102b7a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:c6:08:49:79:d3:ac:cb:62:4d:36:fe:9f:
db:f6:98:77:26:17:ee:a6:bc:b3:c1:85:28:93:c6:
17:00:be:4e:4a:25:ec:5b:74:af:0f:18:ce:2e:4c:
94:80:05:78:54:46:02:ed:0a:85:e7:6c:ba:5a:38:
b9:20:65:c7:71:be:26:45:c7:60:7f:6c:7a:ab:59:
77:29:36:99:e2:33:22:1a:52:76:fa:35:2b:5a:3a:
f3:0b:dd:cf:34:e4:68:76:67:1d:72:44:d4:65:c4:
18:21:98:5b:cb:b4:90:c2:5e:e6:a4:80:81:43:36:
3f:fb:c8:bc:2a:47:c5:ba:5f:fb:05:54:12:7c:73:
8a:03:39:cd:ca:b6:cc:91:84:9b:22:03:de:02:e7:
77:f8:2e:97:bd:8b:1b:cd:96:89:7d:5c:e8:73:52:
73:f5:f0:fa:b6:cb:79:4c:f8:7e:0b:c8:c7:02:1a:
ec:9a:ba:55:06:ee:02:cb:45:6e:4a:a6:7b:08:28:
7a:ec:ce:52:99:b6:64:db:6f:b5:f7:f3:cd:3e:70:
b4:69:e5:24:89:9e:8f:fa:63:f9:de:60:c7:c0:16:
81:22:eb:88:e8:8e:9e:c8:a3:62:ab:e1:7c:38:a5:
21:3c:43:c4:63:0a:a8:81:f5:a2:1e:02:d0:12:9a:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:C9:74:B1:5A:29:26:24:30:E6:AF:AB:96:6A:B8:10:2B:7A:98
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/mlPJdLFaKSYkMOavq5ZquBArepg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
193.84.85.0/24
193.84.88.0/24
193.84.90.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:44:57:ce:6a:33:0d:d9:11:81:6f:4c:ff:2e:0c:8c:f3:8f:
72:7d:37:a1:45:01:99:15:dc:0e:4c:e7:b9:cf:d2:89:f2:42:
b9:f4:da:ac:63:33:ff:ee:56:8e:d6:42:1e:e9:36:7f:47:8f:
c3:93:98:cf:00:57:55:61:91:a7:3e:8e:c4:a3:3d:a4:97:e8:
a1:cc:b6:66:b2:21:44:20:79:28:6c:1e:45:9b:11:a8:72:eb:
d7:2f:d7:ea:b2:dd:50:db:97:3c:70:13:88:7d:1b:68:73:b7:
76:7b:d6:6c:14:d6:72:85:c4:0a:41:73:c2:70:c1:54:0d:9d:
d6:d3:5f:bd:e2:dc:9b:97:d8:2a:20:1a:bb:0a:25:ca:e2:ec:
dc:69:ab:66:d6:37:25:78:67:d1:de:9d:55:a2:b1:5b:1b:4c:
e8:21:f3:a0:f7:5f:be:93:bb:b6:df:6d:c0:fd:05:2f:00:b0:
da:f2:30:d0:7d:96:93:5c:66:2e:97:14:66:75:0b:cb:69:2c:
18:b3:b2:06:ab:83:c4:19:02:05:9f:7a:bd:60:e3:45:99:f3:
47:e0:1f:c4:dc:11:8a:95:cb:aa:d5:42:d5:6e:eb:65:77:b3:
13:a6:db:a4:78:52:06:24:c8:cb:5b:1e:21:16:21:0f:f4:be:
1e:d1:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:19:23 2024 by rpki-client on console-fra.rpki-client.org