Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mn0wUY2SYT-LtQzKIeh4c31vN90.roa
File: mn0wUY2SYT-LtQzKIeh4c31vN90.roa (raw, json)
Hash identifier: 703zMIELzGIvAjcOAd18+vG39Cn9/E/7r7Qpo8aloiM=
Subject key identifier: 9A:7D:30:51:8D:92:61:3F:8B:B5:0C:CA:21:E8:78:73:7D:6F:37:DD
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8012AB0BC99B76DB8A9C67BD88ED685
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mn0wUY2SYT-LtQzKIeh4c31vN90.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43188
IP address blocks: 85.254.156.0/23 maxlen: 23
85.254.156.0/24 maxlen: 24
85.254.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2a:b0:bc:99:b7:6d:b8:a9:c6:7b:d8:8e:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7d30518d92613f8bb50cca21e878737d6f37dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:4e:8a:cb:7c:8f:ec:3e:e5:b7:dc:50:95:
65:ed:e0:cd:5b:be:58:69:b8:81:50:48:ff:35:5f:
29:26:d2:56:c3:71:b6:1b:6c:96:46:7a:5e:7c:69:
c4:e8:4d:a8:f7:ed:cd:ce:d1:0b:45:f0:b9:5c:ff:
a0:e3:c8:c7:3b:ff:8b:ce:e6:3d:18:78:64:29:19:
d7:1e:23:ad:83:58:06:05:11:b7:b1:dc:f8:f3:19:
0c:df:e0:6a:e9:0c:fa:9d:46:d2:10:79:63:53:4d:
16:7b:ab:2a:1d:a7:3d:41:12:d6:c5:b5:7b:11:54:
7b:32:87:98:3a:bb:5b:17:28:d2:8a:04:51:d0:0d:
51:86:4f:01:71:62:e4:1f:b2:6a:e0:f3:a1:41:ad:
f0:9b:a1:f1:fc:af:6d:7a:71:60:ec:b4:97:39:02:
30:78:de:1c:d7:91:9a:2f:30:9a:82:b7:3a:08:43:
40:09:7f:6b:7d:67:b3:aa:b9:ca:30:3f:60:a0:9c:
4a:f9:be:3e:3a:b3:a4:11:53:d6:61:be:6b:db:0f:
d4:8d:6c:75:11:63:37:52:5c:e5:f7:37:b0:a1:ae:
2c:90:33:a9:3b:56:a5:40:9f:9d:25:c0:97:4f:71:
af:cb:5c:ea:11:d8:7c:bf:22:1a:53:e4:15:ee:c2:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:30:51:8D:92:61:3F:8B:B5:0C:CA:21:E8:78:73:7D:6F:37:DD
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mn0wUY2SYT-LtQzKIeh4c31vN90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:1a:d4:86:13:ed:18:56:08:b3:78:45:6e:0c:68:c1:51:fd:
e8:3a:2b:6f:63:a4:85:ad:11:32:88:3d:0c:b5:18:43:34:55:
71:3a:3f:df:c9:ec:23:1c:0a:e3:cf:d9:6d:bb:47:e4:9e:d8:
42:19:9a:cc:1e:64:5a:53:9a:c1:a9:71:29:bb:67:5c:87:d3:
a1:3a:2a:3c:fe:5d:6e:c8:7f:92:80:b0:11:d6:c4:89:69:0a:
66:c9:a1:25:af:c3:20:35:d8:9c:3e:13:fa:e3:a7:cf:da:dd:
97:3d:f0:89:73:2f:3c:c9:76:a4:63:34:89:20:7e:5d:b9:fa:
ce:bd:01:ea:fa:70:6f:d5:8f:e7:f2:87:5f:bf:96:22:da:06:
27:3b:15:bd:bd:6f:12:76:39:9d:05:6f:75:81:58:af:dd:57:
46:3a:2a:34:3f:01:84:35:8b:70:36:c2:cc:60:f8:c9:18:fc:
54:0e:ba:7f:6c:ea:92:4e:02:87:88:2a:05:28:50:55:cd:7f:
eb:5b:d5:d2:a1:0b:d4:36:40:79:4a:61:28:43:34:a9:15:7b:
fe:dc:c8:fe:33:b6:14:3e:d4:c8:47:bd:34:4b:56:4b:d7:63:
a0:90:cc:5b:3e:32:80:39:54:32:43:ba:23:45:46:00:0c:fc:
7a:1c:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:32 2024 by rpki-client on console-fra.rpki-client.org