Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MJjEVoagsDSDGrzrW-f3UW3-SPk.roa
File: MJjEVoagsDSDGrzrW-f3UW3-SPk.roa (raw, json)
Hash identifier: TdvMWsmlLCAyZX+sr1q4q6+Ley7q7KC8HsFAlNl+90Q=
Subject key identifier: 30:98:C4:56:86:A0:B0:34:83:1A:BC:EB:5B:E7:F7:51:6D:FE:48:F9
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 018CCA2B4242BAFE9E22EB0F61382907BE63
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MJjEVoagsDSDGrzrW-f3UW3-SPk.roa
Signing time: Tue 02 Jan 2024 12:34:41 +0000
ROA not before: Tue 02 Jan 2024 12:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35251
IP address blocks: 45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:42:42:ba:fe:9e:22:eb:0f:61:38:29:07:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 2 12:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3098c45686a0b034831abceb5be7f7516dfe48f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:c2:84:61:c9:c6:99:34:2e:ea:8d:46:bb:
9b:9c:86:96:cd:1f:10:7b:aa:96:94:71:8a:53:ef:
17:40:1b:70:64:5c:18:ac:45:5b:54:a0:7f:2f:de:
3b:35:ed:c9:b8:61:c0:a8:db:96:26:02:50:b7:57:
1c:73:fe:64:df:bd:13:9a:61:04:c2:4f:53:60:c6:
fa:39:b1:62:89:89:ff:59:7c:f4:13:ef:0e:ed:b6:
1b:66:a8:a2:65:62:ae:41:29:2a:a7:ca:a9:fa:52:
a0:fd:1b:6e:39:56:4b:d0:7e:32:92:a5:25:73:31:
7d:16:9b:49:03:39:4f:3a:68:2b:1f:64:b7:c2:ed:
d3:ea:2e:19:19:2c:44:c3:51:bc:4c:7e:01:0d:05:
12:43:d0:16:ec:8f:b7:f2:b2:e6:f4:ab:91:3a:24:
37:2b:cf:e9:f9:ff:59:39:11:e8:16:e4:7c:fd:eb:
40:3a:7f:82:d5:71:38:08:4b:21:da:20:b6:4f:01:
03:84:40:e3:4a:da:bc:eb:f2:1e:04:de:8a:00:d4:
9f:3c:d5:fe:ac:c9:b2:e4:96:18:42:70:05:e3:a0:
6a:0d:2e:83:22:dc:6a:90:c9:83:e4:7f:ee:79:d0:
9d:1e:03:a7:a8:b2:3d:ed:fc:f1:9a:02:50:9a:b0:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:C4:56:86:A0:B0:34:83:1A:BC:EB:5B:E7:F7:51:6D:FE:48:F9
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MJjEVoagsDSDGrzrW-f3UW3-SPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0a:b4:8e:ae:dd:39:93:be:0e:02:88:11:21:9f:74:47:c2:
3e:fc:71:83:31:85:20:9b:83:88:75:41:44:21:f9:e8:40:e9:
dc:08:9b:f8:84:b5:8b:e7:f0:87:ae:6e:1a:08:53:0d:4d:ef:
f8:d6:77:41:63:4a:25:e3:65:54:4e:1a:2b:d1:3d:be:98:1c:
75:87:d1:fc:a1:fe:31:b7:eb:26:22:a1:fd:15:46:41:c7:51:
c0:59:29:e2:48:85:e5:ac:a7:64:c2:c2:f7:3d:77:e2:c9:d5:
b1:87:02:a3:b2:c5:d7:75:ab:27:df:b0:d4:bc:42:4b:a2:f9:
85:f8:e3:2d:3c:77:6b:5a:5f:96:a3:87:10:c9:76:19:bd:b1:
97:5c:be:92:f9:a0:7c:0a:be:ae:6b:cb:8d:e4:bd:39:51:f3:
35:30:84:a2:53:80:80:34:50:3c:e8:43:22:f2:6d:96:ad:4f:
dd:cd:ad:a0:3e:b6:07:3d:c0:e2:e3:96:e3:56:02:94:4d:87:
4d:0b:a3:cb:b8:7e:22:ab:4b:e4:b3:cc:52:3c:d8:34:94:a9:
3c:fb:a8:d1:00:64:5e:a7:dc:f9:7f:e3:70:5f:ed:74:cc:b5:
df:9e:bd:ed:06:d8:92:fd:28:5e:fa:b6:97:eb:fb:72:e0:a9:
46:37:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:42:19 2024 by rpki-client on console-fra.rpki-client.org