Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa
File: Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa (raw, json)
Hash identifier: FpzRxrdL5GM1JZOZ9tmbgTdHPgyrYrFJIBXSZ3ts6QU=
Subject key identifier: 32:16:FD:83:51:96:D6:27:39:07:5B:87:41:07:00:29:94:1C:13:F9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018F77A7A28ACAE5B82DE077C037F7F1837B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa
Signing time: Tue 14 May 2024 15:10:25 +0000
ROA not before: Tue 14 May 2024 15:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 185.121.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:a7:a2:8a:ca:e5:b8:2d:e0:77:c0:37:f7:f1:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 14 15:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3216fd835196d62739075b8741070029941c13f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:78:68:ed:3a:2f:90:b8:0e:26:95:f3:a8:
7f:a1:aa:5f:65:27:92:ad:31:6d:16:f4:16:dd:b5:
47:ca:0d:cf:1f:6f:48:6d:c3:eb:13:bc:c3:4e:2d:
1f:02:d9:8d:d6:88:f9:e4:2f:81:37:fe:e3:15:67:
19:bd:df:08:fb:e7:e2:6a:69:11:f2:bc:78:33:74:
1d:40:21:94:8c:2e:d6:9f:3d:5b:11:38:32:10:8a:
69:b6:60:39:19:cb:cf:b5:d1:ba:56:5e:90:f7:43:
d7:6a:19:1f:ab:66:c3:e2:a7:a4:fd:fd:6f:fe:85:
80:45:19:e2:2f:1c:fb:8a:fa:e4:35:de:3a:df:17:
40:89:dc:65:86:7c:29:d0:f4:c6:d7:24:31:d3:13:
d0:ef:42:9d:7a:8d:6c:fe:84:23:f6:5a:de:b2:7c:
ad:9d:b7:27:a8:12:45:be:8b:9e:99:16:8f:d2:74:
43:12:51:92:cd:86:79:32:99:28:b3:80:9a:46:b3:
69:01:ac:f8:2a:c3:fb:81:02:3a:9e:ef:c6:a6:ea:
42:1b:bd:27:10:31:7a:1f:fa:6c:e1:de:d6:72:a2:
70:c3:af:ba:fc:1d:bf:79:52:95:8a:87:f8:13:7f:
fe:e6:17:04:6c:83:cd:c9:a0:24:75:08:8a:a5:fc:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:FD:83:51:96:D6:27:39:07:5B:87:41:07:00:29:94:1C:13:F9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:08:6a:63:14:78:5d:43:c6:06:72:a2:e7:fc:cf:d1:1a:d4:
dc:e1:62:89:19:29:ad:57:1f:be:43:0a:81:41:8e:d3:fc:20:
10:50:eb:16:62:9a:4b:77:f5:e4:84:0c:ca:1b:97:dc:fb:49:
1e:ba:9f:05:46:ee:8e:c7:27:08:5d:84:c1:11:39:cc:83:62:
7f:30:aa:f6:ef:e7:4e:7a:34:cd:3e:47:d9:05:10:b6:18:4a:
6e:56:e4:8e:e6:81:d8:32:a0:ec:ef:76:0a:51:ae:c8:09:d1:
86:33:17:be:a5:69:41:e9:1c:cd:66:a2:92:41:f7:ad:c0:3c:
3c:c1:b0:34:05:22:74:ce:99:08:98:1f:4f:3b:7a:0e:a1:1c:
fb:6c:9d:af:53:74:c2:ac:72:ec:ae:26:d8:ec:7f:63:a5:f7:
08:b1:83:1b:13:96:b5:94:f5:09:04:b4:3a:71:0e:70:8a:3e:
06:23:a3:22:34:84:8b:0a:40:46:6f:27:2d:61:59:83:6c:d0:
98:18:dc:7e:25:02:3d:4c:81:15:e9:47:fa:4d:19:8c:9e:16:
3e:54:5e:ce:e2:2b:d6:b5:30:11:53:f8:43:89:94:32:ad:e9:
19:94:28:35:ac:e3:92:b6:10:71:87:d0:26:d9:61:b1:cd:b8:
56:00:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:50:20 2024 by rpki-client on console-ams.rpki-client.org