Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/mjAxihskuwKidFE2LJAttQ8jzHU.roa
File: mjAxihskuwKidFE2LJAttQ8jzHU.roa (raw, json)
Hash identifier: tqV2EyjNJDG+s/C2xgvsMrRpElngs78bvqFxQVqcATw=
Subject key identifier: 9A:30:31:8A:1B:24:BB:02:A2:74:51:36:2C:90:2D:B5:0F:23:CC:75
Certificate issuer: /CN=a0e41fd03d2fddcda58a08fa5fa1091ecea0c0b0
Certificate serial: 018CC9BC4BFEC0D7ADED5EF5A2B5CF47EB32
Authority key identifier: A0:E4:1F:D0:3D:2F:DD:CD:A5:8A:08:FA:5F:A1:09:1E:CE:A0:C0:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQf0D0v3c2ligj6X6EJHs6gwLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/mjAxihskuwKidFE2LJAttQ8jzHU.roa
Signing time: Tue 02 Jan 2024 10:33:29 +0000
ROA not before: Tue 02 Jan 2024 10:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211454
IP address blocks: 185.215.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/oOQf0D0v3c2ligj6X6EJHs6gwLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/oOQf0D0v3c2ligj6X6EJHs6gwLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQf0D0v3c2ligj6X6EJHs6gwLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4b:fe:c0:d7:ad:ed:5e:f5:a2:b5:cf:47:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e41fd03d2fddcda58a08fa5fa1091ecea0c0b0
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a30318a1b24bb02a27451362c902db50f23cc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:fa:5b:ac:f5:ff:14:b3:07:4a:4a:a1:f2:
1c:c3:a0:a0:22:05:4a:a3:33:09:b6:91:e1:26:68:
82:ad:07:b8:f9:d8:ae:a4:8b:4e:ab:2c:cf:2b:b4:
c6:4c:87:7e:6b:1b:a6:34:9c:ed:95:82:be:c9:66:
de:12:3a:66:28:72:b4:0c:18:cb:31:57:b6:ff:c7:
94:f4:d6:54:89:ba:51:d7:1c:84:1e:48:ac:15:9c:
ba:b0:37:8c:f9:13:ce:67:19:87:d8:bc:6a:e8:30:
68:e6:44:5c:c3:39:85:8a:d3:a3:6a:6b:fd:4e:3e:
fa:8f:8b:c2:c4:e5:65:ac:8c:c3:d4:13:71:73:0f:
c5:14:1a:53:38:92:fb:97:ff:97:a6:62:8f:c5:94:
8c:85:c9:d6:58:d5:89:47:6a:9d:50:f1:bb:12:01:
72:94:04:18:ea:e3:ea:72:16:c2:85:1f:e4:48:cf:
38:09:eb:ee:ee:aa:00:cc:fa:2d:44:37:d0:e1:54:
43:77:d6:0f:90:c4:b6:0a:f1:4e:b9:12:82:55:44:
11:a1:5c:a0:7e:3b:a6:ec:f5:16:db:6c:e7:c0:fd:
27:ff:ad:1a:da:9d:5d:a2:83:c0:b1:d0:ca:02:cd:
30:d2:ba:e1:cc:8b:0e:6d:c1:24:92:02:12:38:b4:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:31:8A:1B:24:BB:02:A2:74:51:36:2C:90:2D:B5:0F:23:CC:75
X509v3 Authority Key Identifier:
keyid:A0:E4:1F:D0:3D:2F:DD:CD:A5:8A:08:FA:5F:A1:09:1E:CE:A0:C0:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQf0D0v3c2ligj6X6EJHs6gwLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/mjAxihskuwKidFE2LJAttQ8jzHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f040fd-ebb2-4a6b-ad43-21603f4e809c/1/oOQf0D0v3c2ligj6X6EJHs6gwLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.7.0/24
Signature Algorithm: sha256WithRSAEncryption
96:59:c8:cd:5f:ed:6f:3b:5d:f4:25:70:d0:cc:b0:28:ef:ab:
22:70:cb:ce:f9:86:58:92:22:08:99:92:0a:21:20:9e:3f:67:
e5:59:2c:67:99:fc:73:38:4b:b9:6b:00:5f:f8:29:2d:dd:93:
18:aa:db:89:74:58:90:98:7b:f2:79:e0:54:b7:5c:92:05:b1:
59:70:97:b9:f1:8f:2d:4c:4b:0a:28:33:d5:0f:ef:67:28:bb:
47:49:e0:6d:70:da:42:16:2b:e2:1e:21:b9:c0:19:85:f4:c1:
90:9c:ce:cb:07:6b:a3:b7:99:d4:56:8a:60:c6:b3:a1:49:8e:
92:5c:58:f6:d2:f8:14:e3:e7:dc:06:5d:ce:33:ff:09:9d:ef:
34:65:40:2e:83:23:c7:81:79:66:b6:49:8e:94:92:37:41:2f:
28:c7:f4:4f:ae:44:b0:76:9a:62:95:ab:02:d4:03:f3:ca:ba:
0a:6a:c8:77:bf:2e:02:c3:55:34:93:d8:5f:97:fb:96:5d:08:
db:df:d1:37:b0:18:14:68:de:20:03:29:14:9c:c8:95:2e:14:
b2:78:74:55:f8:67:bb:25:bb:d9:d3:b8:f0:e2:33:9d:0e:58:
91:bf:fe:42:80:0e:ce:10:c0:bb:0f:56:30:b7:ef:c3:ea:71:
45:27:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:31:08 2024 by rpki-client on console-fra.rpki-client.org