Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mtojR9UFPF0HuUMDGpEVY69zQ_w.roa
File: mtojR9UFPF0HuUMDGpEVY69zQ_w.roa (raw, json)
Hash identifier: m/LVTyQmz8zwW3bIfSVAbPzN/gC4bJCKMtQinJ8hVq0=
Subject key identifier: 9A:DA:23:47:D5:05:3C:5D:07:B9:43:03:1A:91:15:63:AF:73:43:FC
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801273E9D0CD2025023DB7DD391F5DA
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mtojR9UFPF0HuUMDGpEVY69zQ_w.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34073
IP address blocks: 85.254.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:27:3e:9d:0c:d2:02:50:23:db:7d:d3:91:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ada2347d5053c5d07b943031a911563af7343fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:2f:8d:e2:f2:53:db:6d:b6:39:fc:c6:dc:
84:3d:a7:96:50:eb:72:e0:9d:bb:53:21:6b:9f:e9:
2d:76:bd:bf:3d:b4:d6:e6:dc:d8:70:0b:1d:7b:68:
34:5d:ff:33:6d:be:a2:98:4f:d7:8a:d1:af:ca:63:
c7:40:bd:da:86:4f:c0:11:04:2f:79:c9:e4:25:42:
94:72:45:b3:0a:94:1c:ff:21:7b:05:b9:b2:0b:45:
da:7e:ed:b3:e4:f7:bf:a3:cd:ff:6b:45:9f:ff:eb:
0a:e9:a5:25:61:c0:5c:a7:3d:2c:61:50:00:21:b5:
1e:80:d1:96:84:52:4c:54:6b:aa:95:ff:ce:ff:25:
33:ef:48:28:0b:eb:a3:eb:3e:19:ec:f2:4e:84:81:
d4:f9:29:69:a4:15:62:5c:ab:a1:0c:36:7c:25:fc:
0f:b6:74:c5:d2:d4:ec:b1:23:40:e1:15:66:1c:e6:
4c:99:26:ec:70:97:43:d7:87:e7:4c:37:45:89:03:
58:9f:96:00:36:c7:05:8a:d2:ab:f0:c9:4e:fb:35:
e2:0d:d2:a9:dd:55:bb:34:7c:8e:6c:a6:2d:61:1b:
64:31:b6:a8:e0:27:af:72:a0:65:d0:d5:6f:2e:4a:
ad:36:03:dc:00:c4:eb:d4:21:24:15:aa:ca:75:0e:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DA:23:47:D5:05:3C:5D:07:B9:43:03:1A:91:15:63:AF:73:43:FC
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mtojR9UFPF0HuUMDGpEVY69zQ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:44:ab:9a:da:38:f0:a4:6a:33:34:6c:7f:7e:f2:50:b1:5a:
70:a9:44:60:f7:32:b0:21:d0:55:c4:77:97:bb:c3:c4:2a:a2:
01:de:86:30:de:79:db:cf:75:23:c3:99:72:27:21:93:40:96:
29:cc:0c:f2:41:f5:47:ed:68:6e:79:ad:14:d7:a0:f6:2f:f2:
65:6c:98:1a:32:f2:83:f6:01:ad:2d:39:b1:f9:1b:c3:1f:dd:
3f:f0:aa:cc:36:80:a3:d3:a8:8c:07:fb:05:29:fd:00:f8:14:
d6:ab:06:35:f8:70:97:2e:3b:61:5b:3f:1f:eb:38:b9:fe:cb:
dc:bf:a7:94:89:ce:52:30:a0:42:95:27:68:f5:34:a5:c3:76:
d1:5f:97:66:ac:72:25:20:ad:f8:bc:8f:d3:80:bb:2d:31:08:
18:d6:13:e2:52:36:5b:10:33:09:5e:16:fa:c8:d9:ac:16:a8:
3e:e3:41:cb:da:c7:b0:ce:93:c8:e8:bb:2f:bb:f6:7b:5a:7f:
af:40:c6:95:af:0b:c9:ab:ab:84:a3:e8:b0:0d:5a:0a:d1:ac:
98:e7:1a:c5:f6:ac:b5:26:3c:bf:ae:02:b4:ae:ce:ff:87:17:
f8:ee:15:9d:e6:e6:65:11:7e:84:65:80:ec:da:e6:39:e1:0c:
5b:a0:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:38:18 2024 by rpki-client on console-fra.rpki-client.org