Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mnu6DhoCCSTKUZcO23RhPU4RQ8c.roa
File: mnu6DhoCCSTKUZcO23RhPU4RQ8c.roa (raw, json)
Hash identifier: VyMyhSAsoAEGOw9LAVxjYAEodGJg1RrAyxXpk3+qh2U=
Subject key identifier: 9A:7B:BA:0E:1A:02:09:24:CA:51:97:0E:DB:74:61:3D:4E:11:43:C7
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3488E37A81031B5E7A781530616C818
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mnu6DhoCCSTKUZcO23RhPU4RQ8c.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56382
IP address blocks: 185.244.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8e:37:a8:10:31:b5:e7:a7:81:53:06:16:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7bba0e1a020924ca51970edb74613d4e1143c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:dd:ab:7c:cc:67:4c:ac:f1:fd:a8:e3:01:
53:49:11:e2:9a:b6:66:bb:d2:68:4a:44:b0:b4:74:
c9:16:97:b6:ca:26:d6:eb:d1:af:77:1e:45:66:b9:
40:df:84:64:46:1d:70:a6:a6:d5:f9:2d:06:ee:0c:
f9:3f:ce:54:77:e4:51:6a:72:f6:c9:f5:fd:f5:d2:
48:ae:f7:8e:4f:23:e6:f6:82:ae:db:c2:24:8d:98:
49:82:9e:d6:4c:22:65:60:d1:23:88:68:03:91:c2:
be:49:ae:55:c6:bd:8e:4d:4a:d1:aa:09:0d:bf:33:
5a:6b:19:f1:02:ec:5d:8d:a2:8f:c4:53:51:80:51:
21:48:f2:5e:51:e7:66:0c:ac:b8:7f:c6:fb:27:08:
a3:c3:f5:15:f1:5d:11:84:6b:d7:77:c4:0e:90:c1:
79:89:b3:59:05:e1:a1:9a:21:a7:72:a1:4b:ba:b7:
3b:e4:32:ee:62:ad:93:c5:f1:b2:0d:2a:6e:7c:15:
c1:c6:7d:45:c6:33:2f:9f:a2:1b:12:77:3c:ad:49:
f5:a0:c4:69:43:95:ea:ff:f7:d8:75:fc:55:cf:90:
fa:04:a9:94:1b:e6:a4:48:6e:11:b8:a8:9e:ee:57:
68:fd:f2:df:52:83:08:f2:cb:0c:80:cd:99:9f:57:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:BA:0E:1A:02:09:24:CA:51:97:0E:DB:74:61:3D:4E:11:43:C7
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mnu6DhoCCSTKUZcO23RhPU4RQ8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3a:86:68:dc:27:b5:7a:5a:ce:7b:3a:21:23:20:47:3f:68:
b5:39:68:d7:1b:2c:3b:53:f9:ba:1b:2f:16:36:96:09:67:98:
3b:96:b9:4e:3b:4e:df:38:2a:a6:9a:59:73:cb:99:b9:fd:70:
71:1b:f1:2d:38:de:ea:2c:74:64:8f:5c:fc:0c:b3:2b:7b:8f:
24:b3:2b:b3:ab:8d:d5:30:32:97:cf:f6:16:58:b7:c0:e0:f9:
06:6e:be:54:36:70:28:e5:a3:1d:25:ab:79:94:f3:fb:7c:cf:
67:e1:81:1c:34:0a:aa:9a:b7:2b:61:ba:c0:fc:da:e0:b5:18:
67:56:b5:7b:48:c3:c6:af:bd:ff:02:f4:7b:21:53:f5:09:d9:
e2:17:21:ae:f4:e1:78:59:34:dd:4b:d0:65:bd:73:80:ec:76:
5e:9f:49:a5:2f:67:f6:fc:fa:ee:63:0a:ad:07:ec:ee:c8:57:
54:9f:6c:ae:ac:34:9b:da:55:0d:15:08:60:47:61:92:bf:d7:
5a:11:5c:c0:b2:38:3d:d1:15:de:07:a6:88:c7:93:3a:86:c9:
7b:f8:f7:be:4d:39:b2:1b:2c:4e:e7:3b:13:f8:a4:d5:a3:ae:
12:db:f9:50:f9:38:da:58:00:4a:77:43:de:81:71:69:84:6f:
f8:d1:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:52:38 2024 by rpki-client on console-ams.rpki-client.org