Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/mdgcoZzCrkHdt8A8iHcaS25pvuc.roa
File: mdgcoZzCrkHdt8A8iHcaS25pvuc.roa (raw, json)
Hash identifier: 5V7/cqWQv5zJQdPX2ew7cJFJ65HQRpjb0VJdkBVOQZ4=
Subject key identifier: 99:D8:1C:A1:9C:C2:AE:41:DD:B7:C0:3C:88:77:1A:4B:6E:69:BE:E7
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 018CC94CE2A83573157F173CD85E4EF62038
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/mdgcoZzCrkHdt8A8iHcaS25pvuc.roa
Signing time: Tue 02 Jan 2024 08:31:48 +0000
ROA not before: Tue 02 Jan 2024 08:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213151
IP address blocks: 185.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e2:a8:35:73:15:7f:17:3c:d8:5e:4e:f6:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Jan 2 08:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99d81ca19cc2ae41ddb7c03c88771a4b6e69bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:6a:6d:73:1c:5a:2b:34:d3:0e:5e:93:9c:
32:7b:31:09:f3:cc:7e:40:57:d6:71:66:15:9f:06:
37:ab:ab:27:25:1e:9c:a2:1b:a2:e7:1a:cc:71:c5:
12:a4:a4:22:aa:ed:f8:e2:83:c9:fa:58:3a:a7:d8:
24:91:d3:8b:f2:80:c7:75:6f:b0:3a:44:df:9c:e8:
6f:4e:79:35:ba:7d:0e:8c:db:40:ba:6e:ee:41:cc:
c2:1a:27:6a:55:13:98:91:44:72:7c:6c:df:5d:e2:
b7:cd:ee:84:ef:e5:f4:f2:6f:0a:d9:ec:db:cf:90:
68:68:9c:c2:1e:8c:c0:74:02:01:9a:32:a6:1e:8c:
3d:c0:95:93:a3:5a:d8:f0:19:10:aa:6d:db:6e:1c:
8c:68:ea:12:6d:81:22:ca:a3:d3:d0:6c:72:b2:60:
5f:74:35:95:a4:46:d0:fa:9b:9b:de:7c:92:f7:62:
30:95:f7:54:e7:39:a6:08:c8:dc:ee:b2:6f:77:14:
f3:27:9e:5a:7b:ac:c7:9c:23:9e:e2:38:68:b1:ad:
bd:82:30:a4:e9:34:68:e2:29:0e:80:85:5b:54:20:
8d:6d:56:59:19:15:f4:da:3b:a9:f4:10:b3:9e:91:
70:19:53:05:82:8e:5a:5a:b5:81:4c:3d:2e:47:0a:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:1C:A1:9C:C2:AE:41:DD:B7:C0:3C:88:77:1A:4B:6E:69:BE:E7
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/mdgcoZzCrkHdt8A8iHcaS25pvuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
88:53:cd:1f:8f:6e:df:43:aa:0e:e3:60:09:be:7a:ff:9b:a8:
54:b0:d2:61:68:8e:20:53:bf:48:8e:da:f4:03:13:61:ca:39:
66:5c:02:6f:fe:7d:7f:98:4e:e1:ce:4e:1f:4d:2e:4a:66:1d:
cd:34:63:b4:22:1c:fa:7f:d8:06:10:47:04:a0:90:57:71:ef:
ed:cd:59:22:16:5f:69:fa:b1:48:07:35:9d:39:90:e3:40:57:
cb:2d:23:6a:d0:3e:a7:55:17:ff:0c:b6:74:45:23:bc:a5:22:
33:ce:ec:b7:19:9c:8e:81:b3:25:6d:72:1e:46:81:3c:41:6d:
25:23:83:e6:a8:e5:4f:a3:96:95:95:be:06:72:14:a6:85:e9:
8f:0c:2b:56:4b:50:0b:56:34:6e:ad:fa:a5:03:72:3e:d3:8e:
cd:c3:30:a1:e3:1b:9e:c4:ec:f4:6e:ae:a5:9d:32:f1:83:9a:
9f:14:26:20:22:66:11:9d:16:99:02:46:58:cb:8a:d7:47:1f:
6e:e6:bf:3a:97:9e:48:f2:50:49:3e:82:ea:fa:9e:24:7b:26:
5d:e0:65:78:79:b1:18:90:97:dd:02:09:02:d2:da:f5:66:bf:
bb:a3:b7:67:73:45:06:62:2f:2f:33:53:58:1d:a9:9c:e6:ed:
ff:09:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:09:38 2024 by rpki-client on console-ams.rpki-client.org