Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/m-CtMiVoFTZfJFMPU7CKctminsc.roa
File: m-CtMiVoFTZfJFMPU7CKctminsc.roa (raw, json)
Hash identifier: IHa7eAHBWIY6EXTu1VnQrlAm/aNTJu13QXqDohJoZTo=
Subject key identifier: 9B:E0:AD:32:25:68:15:36:5F:24:53:0F:53:B0:8A:72:D9:A2:9E:C7
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 018CC6B90ECD737C46A5DE2040F0EEADE782
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/m-CtMiVoFTZfJFMPU7CKctminsc.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 185.77.1.0/24 maxlen: 24
185.77.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0e:cd:73:7c:46:a5:de:20:40:f0:ee:ad:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be0ad32256815365f24530f53b08a72d9a29ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:5b:25:23:03:3e:64:d0:b8:32:82:51:ac:
5b:87:c8:21:af:bb:43:08:8e:94:df:df:22:61:8c:
e4:9f:2a:2c:cf:f4:47:28:71:46:b2:e9:b4:21:2c:
62:77:19:31:bb:84:81:7a:01:f9:95:8a:7f:00:26:
d7:65:de:23:cf:24:5e:c2:5d:3a:a9:2a:c6:70:d2:
f7:39:24:a1:2a:9d:5a:f7:73:af:11:df:56:ff:c9:
1c:0b:02:3b:cc:a3:11:8c:78:2e:fe:50:29:d9:18:
64:c2:35:ff:a9:a9:fb:3e:f3:4f:49:9b:e1:ca:05:
7b:f5:80:ab:24:b5:0f:0e:a8:d1:f9:5b:29:ff:14:
37:71:19:ce:16:bc:31:3e:13:54:34:1d:dd:46:ad:
ca:59:8e:55:50:2c:bb:31:46:7c:97:ff:db:c7:60:
30:88:d4:70:56:23:74:d5:9a:f9:01:4d:2b:70:a3:
4a:de:15:97:9d:60:78:88:c6:83:34:96:f7:c9:76:
8f:6c:e6:fb:31:16:9a:90:22:4d:a7:31:90:63:50:
d1:9e:2d:d6:1d:d3:af:ce:26:80:94:fe:f9:47:45:
a7:ef:c0:a7:ce:8b:56:ff:0d:3b:e2:0c:8e:6d:75:
8c:50:f7:33:07:c8:8a:6e:30:31:19:c9:a5:de:95:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:AD:32:25:68:15:36:5F:24:53:0F:53:B0:8A:72:D9:A2:9E:C7
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/m-CtMiVoFTZfJFMPU7CKctminsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.1.0-185.77.2.255
Signature Algorithm: sha256WithRSAEncryption
3c:87:0e:34:62:b9:a9:fc:17:9e:aa:5c:26:9b:89:8c:c2:6a:
97:f0:26:bf:51:eb:06:a1:4d:a9:fe:67:fc:e6:79:36:16:73:
9d:4f:00:b1:95:8d:13:ca:b8:6a:99:13:33:36:6f:f2:3a:e3:
60:3d:fe:b0:6b:ef:f3:55:e5:a7:8c:ee:87:51:df:f5:c2:6e:
26:3b:a2:cf:41:a3:d9:6f:21:d6:5a:5c:98:64:42:fa:ef:42:
9d:36:93:7a:af:28:d3:7c:4d:54:d6:24:0b:92:76:92:cb:e8:
1e:62:32:f1:ce:45:9c:02:18:a3:b8:bb:33:1e:04:7e:de:8e:
3d:14:6e:df:19:3e:62:ce:da:0b:2d:b7:14:ec:53:d2:d9:32:
df:f4:0f:25:3e:43:65:9a:9b:72:01:1e:ff:a2:bc:b0:94:f6:
5b:f3:4a:d9:a4:39:1a:04:52:85:87:b8:72:ad:a5:87:f7:87:
38:e4:05:7e:51:24:62:d3:c7:52:d6:42:8a:38:16:e9:ec:a7:
c3:57:b2:1c:9d:ec:72:b9:61:f2:83:3e:28:0d:5c:31:bd:fa:
0f:13:78:c1:9d:33:76:64:df:6e:a1:e7:3d:20:ca:33:ef:8e:
bc:a4:6e:67:1c:59:24:8b:91:b2:f2:33:94:ef:e9:e2:08:11:
88:f3:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:45:56 2024 by rpki-client on console-ams.rpki-client.org