Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/mrAggarOK13LGKNhPZXlj26tMrU.roa
File: mrAggarOK13LGKNhPZXlj26tMrU.roa (raw, json)
Hash identifier: W4ZhbDDea2hgg19DP2UBWdDllThxJ4Giw2Vxs/ZdKzs=
Subject key identifier: 9A:B0:20:81:AA:CE:2B:5D:CB:18:A3:61:3D:95:E5:8F:6E:AD:32:B5
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 018DC1091A0DC497470659506C8E93F1158A
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/mrAggarOK13LGKNhPZXlj26tMrU.roa
Signing time: Mon 19 Feb 2024 11:03:35 +0000
ROA not before: Mon 19 Feb 2024 11:03:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.187.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:09:1a:0d:c4:97:47:06:59:50:6c:8e:93:f1:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Feb 19 11:03:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ab02081aace2b5dcb18a3613d95e58f6ead32b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:7a:20:7a:ee:71:e1:4e:02:ea:5b:38:6a:
9f:42:70:8e:3f:32:c5:5d:c9:92:ad:8a:9e:d7:28:
85:6d:7c:4b:bc:ba:58:c2:69:ef:d2:e9:70:67:16:
03:06:1d:27:e1:fd:d8:64:55:79:fb:02:a0:e0:5c:
59:88:b8:08:64:53:57:43:54:53:45:f6:3d:a8:c3:
e0:73:10:5f:6c:44:12:02:01:5f:53:c0:1e:87:6b:
d7:79:52:0e:02:d5:cd:5d:16:1e:d2:f3:2b:bb:f4:
42:41:fa:c7:8b:ab:24:3d:d7:5e:ea:a2:00:37:b0:
70:91:cc:d5:2f:ac:5d:3f:d2:4e:ab:8d:31:5f:6c:
ae:9c:d4:9f:18:6e:df:ae:08:dc:9b:f2:50:b7:fc:
08:40:75:db:7d:99:5e:e5:4a:4f:bc:9b:f2:2b:bd:
fc:dc:2f:6d:f4:7c:ea:93:b3:be:65:7b:7e:26:57:
60:8e:e9:55:ba:9b:28:c7:9a:39:61:8b:0e:7a:44:
3a:47:62:f1:08:60:dc:fe:18:55:f2:2f:ac:a6:de:
a0:bd:59:5b:bd:a6:d5:25:65:9a:4d:10:72:27:d9:
74:c1:16:d7:32:8d:94:64:3f:01:72:48:8f:c2:9d:
54:b9:85:e2:5b:6c:a3:d3:01:1d:cd:ec:e0:76:71:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:20:81:AA:CE:2B:5D:CB:18:A3:61:3D:95:E5:8F:6E:AD:32:B5
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/mrAggarOK13LGKNhPZXlj26tMrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1b:a8:33:22:d7:bc:20:d9:10:c7:1c:90:a6:d0:eb:6a:46:
43:f2:c2:0b:3c:5c:42:11:9a:4f:94:0a:45:50:df:67:7d:cd:
dc:5e:91:c1:64:63:7a:3f:1c:9a:bd:ea:92:bb:d1:db:36:93:
a5:8b:1a:1a:8b:24:be:ea:4c:ef:94:df:8f:d0:d3:11:d5:16:
64:a1:19:ef:91:ec:8c:f6:f2:3b:12:0c:af:ca:43:5e:77:97:
05:2e:bb:de:5f:a8:09:ed:eb:bd:cf:2f:73:59:51:2c:19:57:
08:db:62:67:92:6b:6a:f3:bb:23:3d:5c:88:55:45:5e:e7:50:
e2:08:00:e3:18:9c:06:bd:49:b2:7d:37:12:9d:d8:e0:90:b9:
55:b3:e5:ed:e0:28:c6:81:dc:2b:fb:f4:85:91:cd:12:91:ad:
7f:de:9d:4b:05:eb:33:0b:45:a6:91:85:3c:87:7c:ad:a3:85:
5a:34:91:89:fd:40:e3:fb:32:69:47:5d:4e:73:71:d0:06:d4:
9e:13:a1:3b:8c:5b:4f:da:66:52:e9:9c:81:7f:b9:c4:d8:da:
9f:cf:97:d4:8a:4c:ec:4a:bf:ca:76:ed:dd:a4:b0:d5:5d:d8:
bc:11:85:37:d9:87:3a:ef:54:f0:13:49:8b:b5:72:ce:6e:63:
15:a4:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:25:48 2024 by rpki-client on console-fra.rpki-client.org