Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/mCCA04gUcqahes9gv_eKFJntiBI.roa
File: mCCA04gUcqahes9gv_eKFJntiBI.roa (raw, json)
Hash identifier: CpV+lev41mENs+/F4KKr6SPMkSNwhSvBgMCwL/WAyN0=
Subject key identifier: 98:20:80:D3:88:14:72:A6:A1:7A:CF:60:BF:F7:8A:14:99:ED:88:12
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 018CC726E566F9AEB240DEDF938ABD63C884
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/mCCA04gUcqahes9gv_eKFJntiBI.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39263
IP address blocks: 185.79.144.0/22 maxlen: 22
93.115.212.0/22 maxlen: 22
188.247.172.0/22 maxlen: 22
80.94.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e5:66:f9:ae:b2:40:de:df:93:8a:bd:63:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=982080d3881472a6a17acf60bff78a1499ed8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:e6:b1:8f:28:48:a0:0b:a9:b8:3b:20:cd:
d9:6a:08:92:a1:83:69:15:b7:ee:c5:70:bf:b3:98:
f8:67:78:91:25:e2:e2:9d:5d:28:bf:ec:4e:ba:3b:
9d:f6:f7:ea:3f:63:0e:78:68:3b:68:25:ab:49:c1:
e2:8f:c1:c6:4f:25:72:0a:7f:c0:b3:99:82:0a:b6:
11:e1:5f:ce:a2:63:a9:f5:1f:76:99:7f:df:89:21:
ec:df:7a:e2:b5:da:20:e0:b1:95:fd:04:d6:10:10:
43:8a:c9:77:43:f0:d1:60:51:4c:3f:55:fe:e8:af:
e4:7c:ff:47:0e:46:1f:0a:c1:2f:0f:e4:ae:97:c1:
0c:65:41:95:73:17:3e:9e:19:ef:a6:93:74:0e:11:
73:53:7f:34:69:b9:6c:08:b6:5b:38:89:ed:57:d6:
92:ef:55:ec:5e:c7:e4:27:0d:1f:53:f2:6e:7d:5d:
37:6f:db:6b:0d:f4:d4:32:2a:a3:c7:ab:1c:7a:43:
49:ca:cf:10:fd:18:e9:83:b0:94:26:3b:ab:b0:f7:
97:89:02:6c:19:0a:3b:4d:a2:14:56:ab:03:65:5f:
7e:87:d1:29:35:39:98:f5:86:60:13:35:60:c8:5d:
a0:ff:d1:43:37:61:83:d1:62:65:66:4a:a3:5b:30:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:80:D3:88:14:72:A6:A1:7A:CF:60:BF:F7:8A:14:99:ED:88:12
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/mCCA04gUcqahes9gv_eKFJntiBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.0.0/20
93.115.212.0/22
185.79.144.0/22
188.247.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:d2:34:53:ad:15:72:fb:42:8e:4a:47:91:af:3f:b9:4b:0b:
71:42:56:e1:8f:43:b7:94:b7:ce:4f:c4:a6:f4:0e:b9:6f:5f:
f8:4d:67:66:f3:32:82:3f:47:18:97:0a:73:15:55:a3:bf:12:
f4:af:e4:0b:90:1f:0c:0d:79:84:8d:dc:0a:82:25:f2:cd:df:
e2:b2:58:bc:4a:ab:08:8b:32:3a:fb:b6:f8:5e:59:1f:6c:ad:
12:dc:43:9a:da:9c:15:7b:ee:00:49:54:b6:6d:09:c1:90:55:
a1:3d:fd:45:da:5d:a9:71:4b:74:fd:0c:1b:b2:1f:63:e5:19:
18:12:fd:6b:ad:f5:75:f9:82:b7:97:9d:24:6d:30:68:d3:1c:
a1:53:75:dd:9f:82:99:70:10:18:d1:e5:de:93:96:4c:89:82:
4c:e3:ba:7f:7d:c8:da:be:d7:e5:0a:d0:7f:9e:1c:1a:41:a2:
85:79:53:18:b5:45:c1:84:50:dd:07:99:85:1f:f3:1f:52:85:
81:a2:8e:85:b6:f6:b9:bb:5c:4f:10:55:28:cb:3c:86:94:2a:
ed:51:dc:32:e5:f6:71:aa:c9:49:6e:23:12:cb:be:a0:40:4e:
64:25:77:95:bb:e8:b5:f4:0f:57:b5:fd:f1:69:69:cb:b7:b2:
d3:1f:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:36:54 2024 by rpki-client on console-ams.rpki-client.org