Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Mks1HSSYuUHksWDWps2yS9v07KM.roa
File: Mks1HSSYuUHksWDWps2yS9v07KM.roa (raw, json)
Hash identifier: /KqNmLAoSleGTavSFMerfwHWAW0Gz3tg/8hMccDIMC4=
Subject key identifier: 32:4B:35:1D:24:98:B9:41:E4:B1:60:D6:A6:CD:B2:4B:DB:F4:EC:A3
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 018CCA2A7674002F612520ADA36B91958D90
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Mks1HSSYuUHksWDWps2yS9v07KM.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205471
IP address blocks: 185.69.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:74:00:2f:61:25:20:ad:a3:6b:91:95:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=324b351d2498b941e4b160d6a6cdb24bdbf4eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:86:4b:7a:28:17:e6:e8:04:49:e0:74:cf:
f7:93:a1:85:c7:d7:1d:5e:3d:4c:9a:c0:40:ba:74:
4f:e8:01:69:50:47:d3:67:96:de:ee:3b:55:2c:93:
18:23:53:5d:52:9f:f4:83:15:d5:17:59:60:66:5d:
f0:7c:2f:17:7d:6a:19:8e:64:0b:41:e9:08:6d:aa:
07:fa:84:eb:51:52:e7:e3:2c:32:e9:cb:fd:bf:01:
8b:27:79:57:77:bf:38:23:08:1f:6c:1d:93:9a:44:
3d:8b:98:47:c7:cd:6e:0a:44:7f:9a:79:0b:61:63:
07:a2:3b:ca:43:f6:da:a9:0c:be:7a:da:4c:fd:39:
4e:89:79:2d:f2:1d:f1:88:22:3c:cd:89:c0:0e:e3:
97:42:ef:f7:02:91:4a:53:91:f1:21:b7:67:ed:83:
7a:33:ad:26:7c:e1:8b:f7:61:d6:77:e3:28:3e:81:
a8:0f:24:93:0a:e5:62:76:ed:c0:e2:fa:8e:ed:89:
61:41:84:44:9a:79:8c:4a:29:e3:b0:9d:fa:78:0b:
77:99:55:68:23:32:0a:31:a0:02:09:0f:61:76:43:
ff:98:ed:84:60:2c:3a:82:92:6b:f6:5b:dd:5c:c6:
21:bf:3b:7f:a2:fd:da:ee:80:fc:96:64:e0:de:02:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4B:35:1D:24:98:B9:41:E4:B1:60:D6:A6:CD:B2:4B:DB:F4:EC:A3
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Mks1HSSYuUHksWDWps2yS9v07KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.185.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c4:2b:aa:0f:8b:c8:d6:4c:b4:ab:aa:15:78:f8:86:ed:ae:
30:74:72:c4:a3:b9:2b:b4:7a:b3:3a:4f:17:ad:26:73:fe:58:
03:18:ad:5d:54:5a:a0:d9:9c:b6:c1:63:ea:83:7e:2b:f3:cf:
fd:90:79:97:3a:9e:83:89:98:69:e9:d3:56:89:1f:47:7c:28:
7f:60:b2:3b:93:8c:0b:38:52:1e:e6:b2:a8:bb:28:b0:a7:68:
47:0d:1f:e2:23:05:64:d6:47:5d:07:93:cf:df:51:8d:dc:f5:
92:54:99:62:02:21:e3:44:97:51:6c:fb:d4:ac:96:ec:3a:c0:
c5:84:eb:35:1a:5d:43:22:02:53:70:ac:73:c9:85:07:71:0b:
b0:b8:f9:55:f9:cc:bc:09:69:ef:73:d5:17:81:7e:f6:9b:85:
15:d9:66:9c:76:8d:06:a5:17:cd:94:82:ed:70:32:3b:b9:3a:
f8:3c:bb:73:06:95:27:0f:56:e4:8a:c2:41:e9:7e:0f:d5:85:
49:d8:19:61:ff:e7:d8:b4:bf:50:a9:85:50:8d:9a:d8:42:c2:
11:14:0e:fe:48:b2:aa:91:b2:7e:a3:2e:25:8c:90:3e:68:d9:
41:04:dc:1d:54:26:d0:12:f8:fa:3e:20:12:55:08:21:fa:ea:
da:c4:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:06:34 2024 by rpki-client on console-ams.rpki-client.org