Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/M2tFrjY58rsUg4UHvPSGiRaxNBo.roa
File: M2tFrjY58rsUg4UHvPSGiRaxNBo.roa (raw, json)
Hash identifier: 6igT4Z5uhDDDN+n+A7eRUv9NnJvuwXvaBnL5BXUSPHo=
Subject key identifier: 33:6B:45:AE:36:39:F2:BB:14:83:85:07:BC:F4:86:89:16:B1:34:1A
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 018CC64ACD6E02D1E283BB9E958BD2FA89B7
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/M2tFrjY58rsUg4UHvPSGiRaxNBo.roa
Signing time: Mon 01 Jan 2024 18:30:40 +0000
ROA not before: Mon 01 Jan 2024 18:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201838
IP address blocks: 185.240.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cd:6e:02:d1:e2:83:bb:9e:95:8b:d2:fa:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jan 1 18:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=336b45ae3639f2bb14838507bcf4868916b1341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:5a:5f:10:a0:48:bf:1e:be:80:46:98:c2:
1f:ed:83:ba:e9:e3:02:d4:b1:c0:ba:d6:80:07:41:
7b:4f:59:9a:be:38:3a:b5:b8:85:7e:70:67:76:b1:
56:f1:15:f1:d0:4f:f9:42:30:ac:89:5e:92:3c:f9:
c4:99:d8:f1:91:f4:d2:64:19:0f:f2:ef:cb:fa:75:
85:6a:43:06:6c:a4:4a:a2:10:96:e7:7a:32:7a:76:
b8:b7:c4:37:9f:dd:bf:24:4a:60:64:eb:7f:2f:27:
ab:47:1e:ae:aa:f1:ca:68:0f:1f:55:d5:f8:f0:c4:
72:76:b4:3f:f2:92:0f:aa:b7:8a:3d:0e:5a:31:53:
06:5d:49:bb:28:3d:8f:8a:49:9c:07:82:d5:21:a2:
c6:19:fe:fd:c1:f3:39:cc:6c:6b:0e:53:d8:da:24:
60:d0:d0:aa:1d:bb:3e:24:5d:5d:22:b5:3d:cd:df:
ec:db:6a:85:bc:c2:cc:83:a2:21:8e:ba:32:78:5b:
56:5e:b1:f7:1d:db:94:6c:c8:75:60:6c:1d:cd:20:
5f:23:bc:15:99:5c:d9:61:3e:c1:3d:04:b1:28:ae:
db:70:76:cb:65:27:2c:66:6c:be:e7:50:49:0e:c2:
15:44:c1:a4:db:41:b7:94:00:43:4b:ea:c8:51:7f:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:45:AE:36:39:F2:BB:14:83:85:07:BC:F4:86:89:16:B1:34:1A
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/M2tFrjY58rsUg4UHvPSGiRaxNBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.24.0/22
Signature Algorithm: sha256WithRSAEncryption
21:1b:f3:3e:3a:36:35:c2:3a:23:64:ce:0c:94:2e:a9:eb:c3:
00:3e:88:d5:58:35:1f:93:3e:0e:8d:26:2a:cf:20:6a:73:78:
3f:1e:52:67:8a:02:79:7d:6e:68:a9:82:8c:4b:92:ba:e0:d7:
bc:50:2b:a7:d6:39:d8:00:b0:ed:e5:f2:11:62:c2:d5:71:c9:
21:b2:6d:d6:b2:5c:17:ed:44:8f:08:3f:4a:58:d7:8c:7e:a8:
64:37:0f:31:cc:12:4d:2f:a9:e1:2f:63:84:9e:cf:7a:22:89:
18:9c:10:3f:43:7f:5f:4b:3f:a6:f5:ce:56:d6:b8:a5:17:b8:
f0:a9:8d:ec:5d:4f:d5:20:90:af:07:7b:50:16:e5:0c:9e:b5:
a1:68:e9:46:31:fe:de:47:b8:52:dc:6b:ad:d1:92:51:4c:65:
75:18:0e:a0:45:4c:d4:14:4d:5b:e3:76:2e:8f:50:bc:a3:e6:
1d:97:aa:49:b8:d5:57:c0:7a:25:4d:30:45:c2:04:0d:57:07:
4c:3a:f2:fd:67:c7:92:20:f7:54:fb:45:00:bd:25:16:bf:12:
41:a9:41:e9:09:4f:31:bd:f0:1e:86:0e:2e:a6:1f:97:45:31:
ea:ef:7a:52:34:60:5a:fd:d4:c8:ca:80:aa:7a:81:59:c1:32:
68:f4:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:30:58 2024 by rpki-client on console-ams.rpki-client.org