Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/mxY7QsaZbMIA7tINrnH2u7Y1ieo.roa
File: mxY7QsaZbMIA7tINrnH2u7Y1ieo.roa (raw, json)
Hash identifier: IPxUmKvy4cTfvMkdMJpmK6gB/U9Qq183aH/5StVv93Q=
Subject key identifier: 9B:16:3B:42:C6:99:6C:C2:00:EE:D2:0D:AE:71:F6:BB:B6:35:89:EA
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 018CC26CF328360E44E5749118117391280F
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/mxY7QsaZbMIA7tINrnH2u7Y1ieo.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208444
IP address blocks: 185.192.170.0/23 maxlen: 32
2a06:5d07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f3:28:36:0e:44:e5:74:91:18:11:73:91:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b163b42c6996cc200eed20dae71f6bbb63589ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:0a:a8:c2:05:47:e4:8b:03:e9:12:bb:8b:
a5:75:53:2f:93:c3:a2:b0:ce:99:18:6d:a7:d0:e1:
64:a7:5e:eb:b2:a0:0a:40:ba:9e:21:70:f1:42:da:
c4:0f:c0:0c:f1:6f:fd:41:f4:c9:ba:13:69:d1:2f:
a6:19:88:31:85:08:24:ed:7e:d4:11:b0:9d:81:5c:
a5:7b:bb:f1:b6:cd:f8:63:48:2e:4d:62:34:53:ce:
fa:bb:13:5a:07:9c:96:2c:dd:3e:0a:da:aa:34:cd:
99:d4:74:d4:81:55:07:29:fc:44:f6:2c:a5:81:10:
a2:8c:0c:71:3c:f6:9c:d6:57:be:06:60:e4:ad:b0:
c6:42:95:b3:de:e6:85:5f:66:9a:7b:56:2d:a3:03:
a3:89:20:65:79:51:8c:9d:8b:e5:23:c1:01:9f:e5:
db:a2:c7:78:31:9d:4a:4c:c4:ce:9a:84:fd:ba:ff:
02:3b:a0:44:25:a2:19:d0:03:d6:2c:41:02:c7:2a:
ad:27:96:5a:d9:6f:85:30:1b:5b:2a:4c:b4:2d:d4:
de:93:b8:e6:16:49:74:e9:c3:f6:d0:44:4f:c6:c0:
07:b6:ff:9d:0a:64:a7:e1:8b:fc:81:50:03:04:aa:
f5:22:02:69:df:e5:b0:99:53:5b:58:3a:93:3a:4d:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:16:3B:42:C6:99:6C:C2:00:EE:D2:0D:AE:71:F6:BB:B6:35:89:EA
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/mxY7QsaZbMIA7tINrnH2u7Y1ieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.170.0/23
IPv6:
2a06:5d07::/32
Signature Algorithm: sha256WithRSAEncryption
72:b5:91:ae:77:57:69:c2:95:23:a8:10:3d:a6:46:52:3c:df:
0e:5a:cc:9c:a1:53:dc:d7:5f:77:45:98:cc:6e:af:d3:91:9b:
c0:e6:93:83:0c:99:9e:b8:be:3e:db:8b:af:22:6c:dc:21:13:
f0:39:53:7c:30:ec:91:88:c1:56:b1:bd:3d:49:0a:83:b3:6e:
7f:01:f2:22:81:2d:40:3c:1b:9f:cd:47:31:da:5c:21:d6:ce:
a7:1a:8f:bb:bf:68:3b:53:2b:c6:20:29:b3:a7:2c:6e:69:71:
0b:87:90:f3:0d:28:9f:ba:f2:b6:84:26:6c:3b:dc:fc:98:77:
5a:e2:db:ff:d3:0a:de:73:80:a6:6c:01:20:42:0e:2b:81:e5:
0f:5f:b5:6d:f3:07:6d:36:e2:56:9d:57:8e:a9:86:04:56:0d:
a8:6a:e7:56:e7:27:7a:77:d3:ee:d0:3f:59:52:d3:3f:8a:c3:
84:a8:ce:34:82:0c:75:df:6f:10:0f:b9:a5:cd:d5:88:22:ae:
a6:dc:79:ac:11:e6:4c:10:5e:2a:2a:e4:99:23:b0:c4:74:da:
1d:6f:99:0c:a2:05:5a:f7:de:fa:1a:42:d2:66:1e:c0:20:33:
39:59:b1:d4:49:f0:17:6e:63:3c:eb:05:70:dc:e4:1f:ce:0b:
8c:7c:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 10:18:47 2024 by rpki-client on console-ams.rpki-client.org