Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rMu_SFfVplzUJc6HZnCJZzG8wF4.roa
File: rMu_SFfVplzUJc6HZnCJZzG8wF4.roa (raw, json)
Hash identifier: I28FYpPqFeTHlJih94p/TVcdg5hIHdFWiReQV3haZDg=
Subject key identifier: AC:CB:BF:48:57:D5:A6:5C:D4:25:CE:87:66:70:89:67:31:BC:C0:5E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7E513AB33383D64CBB3C00569B76
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rMu_SFfVplzUJc6HZnCJZzG8wF4.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61326
IP address blocks: 178.170.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7e:51:3a:b3:33:83:d6:4c:bb:3c:00:56:9b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=accbbf4857d5a65cd425ce876670896731bcc05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:f1:57:10:dd:34:44:4d:ba:6d:12:34:4b:
f4:7e:e9:f3:91:16:6c:ec:3a:ae:8b:2a:08:b1:72:
87:48:8c:7a:63:c2:2c:86:37:48:a4:cc:a4:b6:89:
e8:5d:42:91:a3:c6:39:9e:75:c6:8e:da:15:f3:d1:
6c:26:26:61:c7:6e:49:ed:3f:9b:a5:e4:ff:9f:e9:
68:42:fe:80:c1:cc:0f:3a:cc:7b:ab:ea:5d:f7:73:
27:f9:dc:04:85:64:77:6c:9e:f7:76:62:fc:9b:68:
34:2d:76:0a:ac:25:61:8c:1f:7a:fc:65:3e:c1:51:
39:c6:9a:c9:34:36:31:c0:20:b9:31:64:2a:8a:16:
55:6e:e9:b4:ea:6e:1e:e6:fb:14:1d:5e:c3:0f:ab:
5e:88:a0:42:59:42:78:bb:e5:36:58:ac:29:63:bc:
6a:4f:6f:f5:eb:46:c9:d1:e7:eb:e4:a5:67:e0:76:
4d:63:e7:46:a6:59:b7:be:ee:7d:07:18:06:8a:09:
01:0c:7d:95:fb:e8:ec:54:02:fb:5a:9f:35:ff:57:
28:7b:bd:07:f6:a0:30:eb:d2:19:2c:9f:eb:58:d1:
8c:fe:90:90:99:a6:ca:68:18:2a:72:7a:df:33:2c:
84:bc:9b:dc:d2:02:56:0a:d6:89:2f:45:7e:8f:7e:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:BF:48:57:D5:A6:5C:D4:25:CE:87:66:70:89:67:31:BC:C0:5E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rMu_SFfVplzUJc6HZnCJZzG8wF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c8:90:45:a0:c2:ef:0d:de:2b:5a:4d:a9:6a:3a:ce:ca:bc:
be:0b:20:d2:7f:59:f8:31:38:be:44:b3:47:8f:c5:b2:31:e8:
d2:6c:6d:d4:11:60:52:35:9f:a0:e9:f0:e7:05:0f:00:a8:ab:
e6:6d:6d:4b:74:b2:55:b7:ba:cd:16:65:43:8b:28:e9:cf:4a:
ab:1f:fa:39:74:c7:2f:50:f5:18:d2:8f:f6:e8:a6:19:63:33:
46:cf:1a:0a:d0:59:25:74:fe:fe:c3:8d:a5:de:f7:e4:5a:9c:
a3:46:f9:d3:9e:6b:ec:20:f3:0d:24:ff:9f:fd:66:87:69:8a:
2a:04:68:e7:8a:0d:9c:9a:48:d9:17:e8:70:36:dc:de:20:58:
f4:75:c0:07:6a:e2:75:a9:dc:6d:c6:1e:cb:5e:46:d0:a3:60:
91:98:d5:42:94:61:de:3a:32:10:ef:58:61:d4:bc:32:56:01:
10:01:97:b6:9b:73:e1:46:39:d0:39:42:79:e9:26:12:7e:39:
fd:62:14:de:4f:eb:59:e5:26:be:af:78:d0:c6:9e:19:60:d6:
70:63:6d:69:b6:a4:4b:a7:40:28:ac:ba:1a:a4:f3:b1:b8:e0:
01:8b:ee:04:49:d5:64:95:31:a0:99:5b:9a:d7:cb:9d:f1:bc:
53:5c:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:48:40 2024 by rpki-client on console-ams.rpki-client.org