Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mJiyJ2uXmQ4IKCjH_3zhEIwmm5Q.roa
File: mJiyJ2uXmQ4IKCjH_3zhEIwmm5Q.roa (raw, json)
Hash identifier: jnYyTVS8NPCJQzy6EIxcDtUmG7sUxZGg2oZo7/dLhYM=
Subject key identifier: 98:98:B2:27:6B:97:99:0E:08:28:28:C7:FF:7C:E1:10:8C:26:9B:94
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 018CC5DBFCA7D905D528280B90C5AC500349
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mJiyJ2uXmQ4IKCjH_3zhEIwmm5Q.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 185.164.72.0/24 maxlen: 24
185.164.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fc:a7:d9:05:d5:28:28:0b:90:c5:ac:50:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9898b2276b97990e082828c7ff7ce1108c269b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:7f:3c:15:8f:fa:9f:30:71:8f:54:44:42:
34:56:53:ba:67:cb:f9:35:49:2f:ac:7e:53:20:92:
52:60:67:0f:62:62:90:38:79:9e:c9:cb:54:38:75:
35:7c:b0:90:73:6e:72:8d:da:0d:da:e2:12:75:37:
60:0b:df:88:36:17:03:d5:b7:1c:ce:25:8c:8c:59:
6f:89:1a:d3:3b:31:66:78:60:f3:23:44:94:2c:e7:
68:e8:87:bc:71:8c:56:35:fb:09:80:af:cc:c3:2d:
09:65:33:09:06:05:df:b0:86:52:9e:f9:5b:56:e0:
a4:e5:4b:0f:0f:63:af:a0:88:69:5d:e3:dc:5c:c7:
18:db:bd:c3:b9:a8:0b:21:b6:dd:02:a6:01:80:21:
80:d8:4b:8e:ec:4c:a6:15:79:6f:44:61:14:2b:7f:
e7:18:d2:e6:02:e9:51:29:61:90:16:66:0a:a7:b2:
4f:3c:24:94:60:bc:55:cf:ee:ec:a7:5b:88:3c:22:
e4:79:b8:3b:b2:fd:7e:0b:f7:87:5b:0f:74:53:50:
11:62:c0:08:9b:f0:78:de:bc:c9:55:cd:d4:f5:fd:
77:86:df:b6:06:b9:22:71:c1:05:6d:b3:24:23:bc:
a2:27:93:d0:fd:98:ab:d1:a1:c3:48:c2:f0:bd:06:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:B2:27:6B:97:99:0E:08:28:28:C7:FF:7C:E1:10:8C:26:9B:94
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/mJiyJ2uXmQ4IKCjH_3zhEIwmm5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.72.0/23
Signature Algorithm: sha256WithRSAEncryption
18:08:60:9b:bc:0b:27:98:ca:c3:0b:76:96:1d:c3:31:e0:58:
22:b7:81:78:65:bc:2d:48:a0:7c:e8:3b:b8:1e:6d:18:13:52:
82:45:dc:6f:15:d2:ff:b2:a7:a0:19:f5:55:2f:8c:ec:18:f4:
ab:49:bc:2a:b0:f0:d1:a2:9b:4d:43:b6:36:ec:3c:de:a4:97:
c1:2a:f3:c4:52:de:63:d4:08:74:85:8c:70:c8:57:db:b3:82:
12:e2:f6:a5:d9:77:62:33:5a:89:91:d6:5e:4b:81:ca:1e:a8:
e1:db:a3:df:f4:16:07:32:40:0d:1f:fc:ee:32:70:6a:55:41:
41:7c:ef:be:5e:e3:41:ed:62:62:dc:0a:07:78:cb:80:d2:d5:
2a:28:44:02:28:b9:48:c1:f8:6c:0a:c5:e9:a5:c8:6e:1c:ec:
a4:9e:5c:bc:48:1d:d3:59:aa:bf:2f:09:f2:c5:72:32:22:a0:
1c:ed:5e:fd:aa:69:3a:d5:c8:54:d4:4f:df:ae:fb:4a:03:f3:
78:2b:ef:6d:c7:17:91:82:f4:77:b5:b6:af:c0:ad:01:b7:60:
f5:37:bf:aa:e3:9f:f2:75:d1:a2:58:7d:fb:ba:9d:cd:3a:95:
76:8b:c1:4e:b9:d7:d3:6d:3d:2f:4e:49:a9:fd:70:f6:62:ac:
eb:45:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:17:13 2024 by rpki-client on console-ams.rpki-client.org