Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/mnDWsyxUeKPuxDtjIdPJv2Pv038.roa
File: mnDWsyxUeKPuxDtjIdPJv2Pv038.roa (raw, json)
Hash identifier: 6BNbcqazgjUV+2EmfHtrE6k9QOGGfeZTjdJxge8GSWQ=
Subject key identifier: 9A:70:D6:B3:2C:54:78:A3:EE:C4:3B:63:21:D3:C9:BF:63:EF:D3:7F
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018CC9BC81D3987493AECFF01F1E16CF4E56
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/mnDWsyxUeKPuxDtjIdPJv2Pv038.roa
Signing time: Tue 02 Jan 2024 10:33:43 +0000
ROA not before: Tue 02 Jan 2024 10:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44574
IP address blocks: 193.150.34.0/24 maxlen: 24
91.230.181.0/24 maxlen: 24
193.238.80.0/22 maxlen: 22
193.104.113.0/24 maxlen: 24
95.215.174.0/24 maxlen: 24
2001:678:498::/48 maxlen: 48
2001:678:4a0::/48 maxlen: 48
2001:67c:16d1::/48 maxlen: 48
2001:67c:1954::/48 maxlen: 48
2001:678:4a4::/48 maxlen: 48
2001:678:49c::/48 maxlen: 48
2001:67c:16d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:81:d3:98:74:93:ae:cf:f0:1f:1e:16:cf:4e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 2 10:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a70d6b32c5478a3eec43b6321d3c9bf63efd37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:76:77:63:ab:c3:7b:cf:ad:5d:49:89:88:
cb:ec:f5:35:66:3e:90:6c:bf:08:da:dc:f3:ac:f1:
ee:dc:07:90:6e:7e:0b:a4:7d:cb:6f:04:42:07:d0:
97:4b:25:a3:7a:9f:65:50:08:e2:dd:75:57:ee:56:
10:af:af:91:65:7e:f2:19:04:31:44:fa:47:89:cb:
59:4c:87:a7:9f:0d:67:f9:94:92:0c:24:7c:f9:96:
07:af:94:26:c2:b9:58:81:7b:90:fc:c5:70:86:f8:
ff:c9:65:01:af:d8:f9:b4:e5:74:99:c9:04:8f:7e:
56:8e:05:a8:a7:7e:af:be:cc:61:5e:07:60:9d:80:
07:2e:10:15:0d:f4:60:33:62:3d:fa:e0:bf:32:8b:
fb:1e:81:ee:72:8d:76:d7:a8:5a:64:86:99:da:0b:
33:6d:7b:62:52:de:2e:26:c6:76:12:41:3b:7f:be:
50:1e:19:41:cf:77:a7:32:15:57:92:db:cc:cc:1d:
53:94:a8:3b:68:b2:9a:90:5d:55:f8:83:cc:f9:46:
a1:7c:6c:2f:ff:7d:5d:c1:1c:da:55:a0:49:23:9e:
2b:89:fd:fc:74:83:7c:3a:33:dd:5e:3a:ab:9e:49:
85:b2:d5:74:d1:e7:e4:68:ca:15:f1:4d:86:65:45:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:D6:B3:2C:54:78:A3:EE:C4:3B:63:21:D3:C9:BF:63:EF:D3:7F
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/mnDWsyxUeKPuxDtjIdPJv2Pv038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.181.0/24
95.215.174.0/24
193.104.113.0/24
193.150.34.0/24
193.238.80.0/22
IPv6:
2001:678:498::/48
2001:678:49c::/48
2001:678:4a0::/48
2001:678:4a4::/48
2001:67c:16d0::/47
2001:67c:1954::/48
Signature Algorithm: sha256WithRSAEncryption
98:a7:03:ca:04:f8:7d:80:b9:e2:e6:40:5f:e5:83:17:69:0f:
4e:b6:ec:aa:61:56:11:24:17:5d:98:12:d9:f7:ed:a4:53:1e:
0d:bb:2d:b5:3e:64:94:f7:58:02:5b:3e:89:46:f7:e6:27:67:
3e:ab:b9:14:44:d8:b1:53:cd:bc:5a:32:69:77:4b:b6:90:c5:
fd:03:76:e9:0f:b1:3d:9a:b4:00:04:8e:79:2b:42:e1:4c:6a:
ea:d7:3b:44:3e:38:c4:5d:6e:00:65:e1:51:f0:8d:d8:3e:4d:
d5:a8:6b:71:50:a4:8d:df:7a:fe:43:4c:7a:2a:84:2f:e8:b4:
c2:a3:22:3b:63:74:bb:2a:9f:87:52:92:8b:a5:e6:a6:c7:a4:
7b:91:2b:ac:55:12:d4:e7:31:f1:3e:14:13:73:c4:b5:c8:e9:
3f:e7:8b:de:ca:91:0b:d2:3e:04:38:ab:a6:69:ca:c8:94:3f:
a0:81:40:97:0e:92:13:c2:43:d1:ee:fc:6e:34:bf:ec:95:23:
14:1f:d3:13:5c:6c:fb:06:85:24:50:6b:81:01:38:0c:0f:06:
e1:7b:ce:f8:c0:2b:7b:5b:c0:5f:c8:3e:59:4b:d0:95:9a:10:
26:cc:d3:ee:9f:99:a5:65:56:19:11:f3:45:c6:3d:3e:c1:67:
c1:a5:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:22:39 2024 by rpki-client on console-ams.rpki-client.org