Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mdsRh-EeqZpiWuwPsoui3y2B-Kc.roa
File: mdsRh-EeqZpiWuwPsoui3y2B-Kc.roa (raw, json)
Hash identifier: NtxNDOZrZPOGmLkdKTIYxY4wJUuR4Zg+GQEHz5D3dkQ=
Subject key identifier: 99:DB:11:87:E1:1E:A9:9A:62:5A:EC:0F:B2:8B:A2:DF:2D:81:F8:A7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018F3922DB40EF46C328D8D857FC9052A026
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mdsRh-EeqZpiWuwPsoui3y2B-Kc.roa
Signing time: Thu 02 May 2024 11:48:56 +0000
ROA not before: Thu 02 May 2024 11:48:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215124
IP address blocks: 45.88.139.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:22:db:40:ef:46:c3:28:d8:d8:57:fc:90:52:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 2 11:48:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99db1187e11ea99a625aec0fb28ba2df2d81f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:a7:fc:43:a6:38:f1:15:e7:2f:46:ac:f2:
5a:6c:30:04:e8:df:29:ee:78:42:54:09:b7:ea:7f:
f8:84:02:4e:08:16:14:71:27:4a:ed:ab:3b:86:d0:
68:27:f9:1c:5c:76:32:ad:49:5f:2d:7c:87:26:92:
d5:c2:13:0e:88:a2:21:a0:fd:44:3d:cd:49:9e:f2:
1c:83:37:75:d1:ea:ac:9c:23:ff:15:3d:71:d3:fe:
2d:bc:0c:13:5d:0b:5e:75:a8:16:0b:32:72:f1:c2:
8e:c4:ba:68:79:d4:5d:c2:e1:ba:6c:20:17:0f:13:
a9:b4:b4:36:31:cf:a3:ec:ce:0c:5c:24:80:c5:bd:
63:09:ce:45:ef:1a:6c:d5:18:51:57:40:33:93:57:
0a:94:1e:9c:9b:b7:03:fc:b5:93:b7:5f:e0:16:b4:
17:b0:27:13:80:0d:c0:4c:d7:e8:ac:d6:95:2c:a5:
26:d2:1e:d3:94:b0:0b:a1:39:c3:8b:89:7a:88:80:
fb:91:e5:97:79:ee:6a:57:83:33:77:58:de:3a:46:
35:a2:e3:a9:43:46:74:ab:5c:5a:82:52:fb:03:60:
94:87:ad:d0:cc:90:56:82:39:c8:c1:94:1c:d8:4d:
30:73:44:25:d4:1a:c1:58:3a:0c:10:b3:22:6c:e5:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:11:87:E1:1E:A9:9A:62:5A:EC:0F:B2:8B:A2:DF:2D:81:F8:A7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mdsRh-EeqZpiWuwPsoui3y2B-Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
85.209.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:71:d5:50:9e:ed:fc:72:6a:5f:73:b6:60:44:c6:62:b7:80:
b1:b9:7f:2b:45:c2:47:c2:8b:95:78:aa:e6:e2:87:76:cc:f9:
74:62:00:40:e7:0e:3a:8d:b7:57:ad:49:3e:10:5a:e4:43:37:
a5:49:5b:4b:68:21:3f:5e:13:13:9e:5a:68:66:1a:89:56:d3:
f6:0b:66:70:a9:67:70:e3:c1:41:73:9c:82:d6:2c:1a:32:40:
b6:2b:37:ee:9b:da:92:9f:fe:61:14:ca:57:2b:b8:9e:3c:d2:
fe:23:52:5d:cb:1c:f0:9a:13:f8:9b:e5:57:bd:b7:4d:c4:c3:
f5:6a:0e:fd:bc:78:38:d2:c5:30:cb:d6:74:72:f7:f7:13:1c:
30:2f:80:33:76:8d:f6:1d:08:2e:30:fc:26:63:a4:d4:a0:cb:
6d:90:df:78:69:d7:73:92:06:b3:e1:2e:bc:08:2d:90:6f:46:
1f:17:ec:91:af:d3:d0:63:e1:aa:e7:24:a7:db:5c:c5:45:b1:
50:ba:34:f6:f6:aa:21:97:3d:fc:de:ae:d6:6b:4a:7d:01:11:
aa:0d:da:08:50:07:70:95:0a:98:72:ac:01:f1:89:00:b8:ed:
a1:71:cf:69:70:71:72:e0:70:cc:0b:97:bc:ca:12:46:84:05:
82:59:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:50:22 2024 by rpki-client on console-fra.rpki-client.org