Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/mUQxgud0V-MMHqJnFHllthb4MUA.roa
File: mUQxgud0V-MMHqJnFHllthb4MUA.roa (raw, json)
Hash identifier: lYQ58Ss1Z8GQmMm7hvZTjZyiY/wVGI4VbVbMKbYpqJo=
Subject key identifier: 99:44:31:82:E7:74:57:E3:0C:1E:A2:67:14:79:65:B6:16:F8:31:40
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 018CC8012F3D2DC18485D770DF5E392714DB
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/mUQxgud0V-MMHqJnFHllthb4MUA.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51305
IP address blocks: 195.226.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2f:3d:2d:c1:84:85:d7:70:df:5e:39:27:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99443182e77457e30c1ea267147965b616f83140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:32:13:66:26:0f:2b:09:11:9c:e7:c8:1c:
42:7f:53:06:2c:df:f8:0d:9b:a4:80:3a:2b:0c:42:
cf:02:69:97:c0:55:0e:86:d5:d3:92:8d:4b:69:c2:
4c:13:d8:84:24:b6:cb:6f:3d:23:ce:65:8e:64:57:
4d:de:69:cb:53:76:96:27:ef:62:02:7f:4e:47:c7:
00:8b:a6:c0:6c:b4:86:64:b2:96:44:fd:ab:90:de:
ff:75:02:72:b5:36:99:c8:04:eb:34:84:87:9d:c8:
c9:e2:f8:66:fb:3a:c6:d0:76:ed:7c:4e:fd:4e:70:
75:c1:63:df:f9:51:af:d5:e6:57:9c:17:0c:0e:01:
df:e3:dc:31:9e:95:4b:c3:ec:d4:c9:e7:60:36:a2:
ca:2a:ac:3f:7d:92:55:e5:3f:61:67:8b:0e:a2:71:
5e:df:02:1d:47:a0:fa:c9:a1:f6:ac:64:cc:27:73:
e5:b5:0d:ef:40:1a:5f:7a:4e:42:c0:37:4a:c2:15:
d6:ac:57:0b:0a:ab:d3:eb:4c:5b:fa:f9:47:d7:1b:
21:6d:5e:6f:e1:fb:83:a4:51:63:ac:99:37:ab:81:
bb:e6:9f:d4:f8:75:60:6e:c2:8f:86:fa:53:91:69:
87:7d:73:44:5f:1b:93:18:8b:8f:08:d7:0a:41:0b:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:31:82:E7:74:57:E3:0C:1E:A2:67:14:79:65:B6:16:F8:31:40
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/mUQxgud0V-MMHqJnFHllthb4MUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4c:e1:fd:84:a6:c2:35:c3:0b:e3:e8:1a:64:8d:be:56:d9:
9e:fe:b3:76:24:ff:9b:24:12:87:ab:84:a0:25:37:23:19:f3:
e8:4f:a5:82:0b:f3:40:3b:04:14:c6:35:7e:bf:5a:7d:4a:e7:
d2:16:72:e0:a4:00:5c:7a:c5:de:ab:42:cc:e5:85:d2:64:eb:
2f:23:3f:8d:52:d3:29:2c:be:6c:d3:35:12:e7:32:01:96:73:
39:68:35:f5:e5:23:24:c4:16:1a:8b:4c:3a:30:0f:d1:8a:23:
d9:84:52:cf:4b:f4:b7:dc:92:6f:07:cf:1f:ec:d5:e0:93:f8:
86:a1:51:48:ae:87:d7:df:e7:6f:35:f2:35:61:57:e9:4d:72:
4b:70:04:85:31:ff:59:90:62:ed:0a:fb:b3:5b:36:42:07:30:
a4:5c:eb:38:08:9a:33:5c:f4:18:89:b4:de:14:82:ed:07:f2:
d6:ee:69:4d:1f:04:07:e7:e2:7c:67:14:69:30:5b:0b:d3:80:
18:b3:8e:89:98:bc:00:ac:8a:01:73:f9:ba:6d:31:e1:b3:21:
df:68:46:91:73:2f:2a:40:12:1b:38:ef:ce:c0:10:c5:00:70:
28:19:df:ec:92:dc:19:d8:3c:f9:f0:02:c2:98:01:c6:52:65:
ee:16:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:34:08 2024 by rpki-client on console-ams.rpki-client.org