Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mr8NCLm1x5rS6L8dfXvKoO1jpWM.roa
File: mr8NCLm1x5rS6L8dfXvKoO1jpWM.roa (raw, json)
Hash identifier: wjvEbVzQf+I2xRp9gbPUqps/8sZRtXOagz1xbnYhsOA=
Subject key identifier: 9A:BF:0D:08:B9:B5:C7:9A:D2:E8:BF:1D:7D:7B:CA:A0:ED:63:A5:63
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 018FBFCAFEB084BF49141B6B41F87AD513C1
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mr8NCLm1x5rS6L8dfXvKoO1jpWM.roa
Signing time: Tue 28 May 2024 15:21:42 +0000
ROA not before: Tue 28 May 2024 15:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 217.140.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:ca:fe:b0:84:bf:49:14:1b:6b:41:f8:7a:d5:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: May 28 15:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9abf0d08b9b5c79ad2e8bf1d7d7bcaa0ed63a563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:5e:1a:c2:b2:d8:ac:63:93:06:e5:4c:a3:
dc:1c:f6:7b:3a:4f:3b:02:40:96:f3:68:5e:01:39:
b6:9e:69:f2:cd:6d:5e:d4:3b:f5:2c:b0:f2:a0:91:
cb:2a:39:00:5d:64:7e:35:e3:b2:5c:aa:7e:0e:89:
71:33:01:d4:7d:06:a9:59:9b:15:24:95:30:00:bb:
0f:0d:55:16:f2:a5:06:d9:bc:f6:51:a2:4b:70:6e:
ae:97:54:8d:0b:13:11:df:02:82:f1:df:2a:89:7b:
59:9e:d7:ee:74:04:57:8a:c8:a4:c3:a0:db:39:54:
ff:4b:f7:f3:99:48:b4:f1:38:4f:aa:8e:02:21:3d:
82:81:88:0f:42:2e:74:52:99:eb:a4:c8:86:f9:01:
4d:f8:bd:be:1f:7d:92:ec:88:7b:7e:29:ab:b4:0e:
ff:9f:6c:d7:34:d6:f7:0d:e3:b6:7b:ec:55:38:c9:
dc:90:96:d8:bd:bd:57:5f:02:f1:c2:e5:21:0c:d3:
40:c6:79:a1:92:ba:e6:10:6d:56:7a:b3:c5:b4:ab:
0d:64:69:c6:4f:a5:15:0c:77:42:e8:87:fe:84:76:
af:4d:5e:95:05:42:4a:bb:af:c1:d9:82:94:b0:c6:
a5:2d:17:8b:d3:d2:ab:58:fb:99:25:a6:59:a2:39:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BF:0D:08:B9:B5:C7:9A:D2:E8:BF:1D:7D:7B:CA:A0:ED:63:A5:63
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mr8NCLm1x5rS6L8dfXvKoO1jpWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.140.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:6a:e9:f4:7f:c7:34:f8:70:eb:51:a2:66:f8:78:35:09:0c:
89:81:cd:2e:12:c6:73:c3:81:22:83:82:e3:c4:34:c4:29:6a:
29:ca:bf:93:0c:5d:1a:bb:95:04:5f:2a:a1:75:c4:d4:45:26:
04:e3:cb:7a:a4:4e:2a:85:67:e0:19:59:f2:17:52:31:27:8d:
9d:00:f5:d8:7e:e2:f3:78:5a:c1:51:04:bb:83:91:62:55:b9:
c0:d2:50:75:2d:3f:ac:3a:22:84:87:3c:02:90:14:60:44:b7:
28:3d:81:4e:bc:93:72:15:e3:28:76:65:fe:dd:50:ee:e5:60:
54:61:df:53:3c:37:22:fb:78:7c:d7:b5:a3:e4:2a:ef:88:4a:
0c:90:1a:32:35:e0:1c:d3:5d:c4:8c:fd:64:8b:0c:7a:dc:32:
cd:69:24:11:f7:34:d4:39:c7:2b:bd:49:09:50:ce:ab:8f:bc:
5a:69:93:47:6c:45:e8:20:74:1d:29:5f:80:0b:48:09:25:ee:
19:e7:97:28:2c:96:83:b1:9c:51:11:66:fd:d9:36:aa:21:8f:
f9:cd:5a:c9:f2:2c:e6:a0:2d:9d:37:73:a8:27:ff:68:e6:55:
81:da:00:d0:fb:3a:6e:4b:2d:68:73:e2:69:dd:d1:f2:96:6e:
f2:e5:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:09:12 2024 by rpki-client on console-fra.rpki-client.org