Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rmgWADLTo0N_RvlZCQpB-Iu-9wA.roa
File: rmgWADLTo0N_RvlZCQpB-Iu-9wA.roa (raw, json)
Hash identifier: 3DiTwJQfsYYC/gJcG5fvyrrcg8u1uxbjyFeh7eu1Jgs=
Subject key identifier: AE:68:16:00:32:D3:A3:43:7F:46:F9:59:09:0A:41:F8:8B:BE:F7:00
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E048C25D0A1346F63E43E4F1BA1C4
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rmgWADLTo0N_RvlZCQpB-Iu-9wA.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201202
IP address blocks: 195.187.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:04:8c:25:d0:a1:34:6f:63:e4:3e:4f:1b:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae68160032d3a3437f46f959090a41f88bbef700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:f6:fa:35:6c:39:b6:88:4c:fa:67:f4:38:
d0:00:b6:22:7d:5e:ca:7f:24:79:0f:c3:8a:7f:f1:
7f:30:69:f3:03:ad:2d:e0:31:31:c2:a6:18:d9:0b:
8b:48:7f:67:54:d3:d8:54:53:0f:00:73:85:22:62:
8d:07:90:24:9c:59:97:33:44:fb:c6:f3:8e:9c:74:
81:a4:73:1a:f8:e9:71:3c:8a:ab:ab:d9:7d:32:63:
b1:2e:44:e2:b8:48:56:51:bc:8a:ad:26:b2:8b:36:
1a:e8:e9:0b:af:77:99:6d:89:8b:d3:77:3c:d7:1e:
44:71:3f:60:d7:d9:88:26:77:cd:5e:ad:16:ba:f8:
1b:e5:72:63:e8:ff:c7:90:77:66:60:76:8f:0d:5a:
ca:28:91:d9:ab:38:55:df:1f:12:71:d1:dd:4f:83:
f7:f7:e3:11:74:cd:4b:b5:3d:ff:91:00:fc:b2:f6:
de:c1:3b:4e:8d:0a:ed:c0:92:cd:15:0d:6f:d3:88:
43:47:a9:a4:20:0d:e9:e2:f4:b4:ad:27:53:01:5d:
8c:08:96:c0:95:aa:bf:76:0e:f7:6e:5f:8f:f5:47:
af:bf:da:ac:7b:57:05:36:cc:6a:7c:05:34:62:c3:
6d:03:0c:8f:97:13:82:55:d1:3a:7d:a4:97:53:b8:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:16:00:32:D3:A3:43:7F:46:F9:59:09:0A:41:F8:8B:BE:F7:00
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rmgWADLTo0N_RvlZCQpB-Iu-9wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:19:24:cc:d4:46:38:50:e2:c2:2e:f9:d9:bc:d4:f9:52:eb:
82:79:0a:fd:d6:be:7e:b1:25:02:5f:0a:8a:58:e5:0e:1e:95:
db:c0:9c:4f:87:cf:ee:b4:1c:a8:ae:b0:27:68:d7:d5:3a:94:
51:71:f8:3a:3d:33:80:56:5c:cc:d8:21:53:b8:72:7e:98:b2:
94:ba:80:74:01:a3:6b:6d:8e:0f:3c:44:86:1c:6b:49:5e:b7:
05:9a:d5:3b:df:12:fd:32:a8:45:08:f1:cf:0b:e1:45:3d:91:
c7:3d:cd:5d:30:5e:3e:f2:b4:2c:26:b8:7c:b3:b3:82:3f:b7:
7c:2d:c9:22:09:77:0d:19:bf:b5:1f:38:b4:95:33:62:f6:9b:
a7:46:85:db:34:37:ea:2b:df:89:7d:9e:7f:65:2a:66:b3:fa:
d1:ac:dd:9e:9f:73:6e:e1:67:a0:c0:9d:d5:6d:1e:82:34:2e:
ec:5e:88:64:5f:df:5d:85:15:1b:d8:7f:3e:cf:31:a8:88:91:
7f:57:79:c9:4b:78:cb:19:79:e5:2c:a1:2d:e6:43:d3:e2:0a:
27:7a:08:39:bf:ac:6c:2b:d7:8f:df:bd:60:72:40:2a:2b:63:
30:d6:b6:30:05:37:ae:9a:f2:7d:09:ce:3f:57:6b:6c:89:11:
96:93:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:31:38 2024 by rpki-client on console-ams.rpki-client.org