Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/MbhfE_efCMzqlbtXs1ykcFYphuM.roa
File: MbhfE_efCMzqlbtXs1ykcFYphuM.roa (raw, json)
Hash identifier: HBTORhDATGcHii7+YfrkFlrCDp6falLMzKpmf4Yr9ks=
Subject key identifier: 31:B8:5F:13:F7:9F:08:CC:EA:95:BB:57:B3:5C:A4:70:56:29:86:E3
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 018CC3B69CEAB100AB53C4B5C97205E7D6D1
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/MbhfE_efCMzqlbtXs1ykcFYphuM.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14380
IP address blocks: 206.195.50.0/23 maxlen: 24
87.237.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9c:ea:b1:00:ab:53:c4:b5:c9:72:05:e7:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31b85f13f79f08ccea95bb57b35ca470562986e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:f8:7b:fc:58:8d:58:57:f7:41:fd:9b:bc:
cb:45:ea:66:a2:a5:7c:77:0e:cd:ca:ff:ba:d6:32:
15:c9:34:45:ee:f0:e3:bf:91:7a:2e:50:42:f8:06:
fe:32:5b:15:10:bd:6d:b4:42:fa:66:2d:f6:29:0f:
8a:97:95:5d:bc:fa:d1:01:92:46:01:6f:5d:2b:a5:
70:ed:48:99:94:e5:1c:c8:88:54:6b:2b:79:8a:a8:
f0:e7:bb:2f:55:2d:89:ba:8b:44:0f:a4:db:f8:fc:
a4:5a:77:6d:de:d3:76:11:b3:9d:ff:0d:b9:bd:b1:
c4:1c:f8:51:77:72:1c:0a:f2:1f:f0:03:8a:b8:22:
ad:31:96:d6:d6:bc:27:81:e3:90:d3:e6:a4:48:79:
50:60:e1:8e:ee:e0:3d:64:e1:1e:e4:78:f7:a6:60:
7e:6a:4a:ab:bd:99:a2:b7:7c:b0:8e:c4:9a:d0:4e:
0a:68:e9:97:87:0b:3f:1f:dc:41:81:59:0d:16:65:
da:41:ac:ed:2e:59:2e:d8:5b:ea:94:0b:87:91:49:
71:f0:81:e1:62:70:db:4b:64:01:53:20:2c:27:e6:
41:c8:b7:d0:36:a0:bf:af:18:53:db:57:e5:4b:5b:
12:49:ec:76:fd:f6:a6:0b:2f:22:5e:b5:50:09:1e:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:5F:13:F7:9F:08:CC:EA:95:BB:57:B3:5C:A4:70:56:29:86:E3
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/MbhfE_efCMzqlbtXs1ykcFYphuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.219.0/24
206.195.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:93:47:43:d0:a5:0f:9d:24:33:68:3b:72:57:41:14:22:ee:
74:da:c3:2e:52:bc:f7:f5:9e:d1:3d:7f:98:98:8f:ab:eb:6e:
6f:40:2a:f6:ab:ff:ff:d5:b2:c8:66:c9:60:5d:0b:d1:b4:25:
5d:d4:b8:d9:b8:b8:f2:56:f8:d1:8d:86:c7:da:99:b8:76:9f:
97:a4:eb:f1:fa:a3:df:f5:b5:f5:ff:cc:a8:e2:96:4b:b6:1b:
07:92:95:8a:22:18:e4:2f:84:48:be:5d:29:f4:62:af:aa:27:
9e:f1:82:99:a4:48:51:91:38:7f:5a:63:a7:3d:4c:f7:86:ad:
51:7e:27:a2:a9:3a:99:da:fa:9d:4b:fb:0a:c9:76:0e:35:cd:
de:1a:3f:59:88:ec:b8:89:71:ad:ec:28:8b:97:92:f0:db:67:
b6:ef:00:69:73:ca:32:cc:73:9c:9c:48:00:e4:de:f9:69:fd:
76:82:c7:b7:be:36:08:69:a5:2b:f1:cf:20:25:e3:35:d7:40:
43:2c:3c:df:96:2e:a0:a4:0a:6f:09:bb:44:4d:7e:3e:30:96:
3b:cd:9c:9f:aa:fd:e5:03:29:ce:c4:17:0c:e9:f9:d9:ab:20:
ea:39:25:ca:5f:3d:c6:3b:6f:d5:54:2b:87:ce:d9:f0:38:af:
54:ab:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:18:02 2024 by rpki-client on console-fra.rpki-client.org