Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/mR7qCYpIr0rpRv0xwgaQsitNazM.roa
File: mR7qCYpIr0rpRv0xwgaQsitNazM.roa (raw, json)
Hash identifier: gYJHyHvj0dWwRt96U3gC1leIu6PdRmKwnbj4wzVik4w=
Subject key identifier: 99:1E:EA:09:8A:48:AF:4A:E9:46:FD:31:C2:06:90:B2:2B:4D:6B:33
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 018CC2DB2984E720BD0039400E306AB0033F
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/mR7qCYpIr0rpRv0xwgaQsitNazM.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50629
IP address blocks: 87.253.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:84:e7:20:bd:00:39:40:0e:30:6a:b0:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=991eea098a48af4ae946fd31c20690b22b4d6b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:2b:54:90:bf:0d:70:d7:bf:5f:78:60:b2:
93:ae:af:fc:17:61:b8:ea:fb:9a:2f:3e:3a:57:c7:
6d:cd:e7:94:76:f8:ec:4f:5d:15:ca:32:fd:71:93:
db:ac:51:99:66:d1:74:73:5c:6d:ad:84:35:b4:e3:
f1:df:37:e4:a7:d4:43:13:58:64:dc:70:98:04:af:
5b:91:85:7f:0c:27:68:32:66:87:ca:ac:ec:af:59:
a4:fd:70:b2:a7:68:6f:9e:98:7a:18:6a:8d:66:dc:
a2:b0:86:00:17:e7:ff:b5:d6:32:77:c2:86:59:fa:
90:47:b3:00:54:70:f9:a4:bb:9a:4f:50:96:d5:a4:
f9:5c:38:cc:1a:7d:0d:83:af:91:eb:80:df:cc:33:
c3:2c:76:af:6d:97:19:08:0d:4e:c9:7d:bc:52:15:
66:5a:36:b6:4e:23:21:da:fb:a4:23:55:9c:37:6a:
1c:56:09:34:a3:88:dc:32:35:35:5e:36:7d:89:b7:
30:5f:f6:d2:e5:cb:e8:9e:38:f7:79:bb:e3:69:0c:
9a:be:14:8c:72:d8:4e:63:56:b7:e3:81:03:a9:30:
13:b3:d0:4a:17:e7:a5:8d:83:82:22:1f:0a:06:a4:
c6:b2:9e:b8:b4:a9:d5:6a:84:01:25:cc:ca:bc:2f:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:EA:09:8A:48:AF:4A:E9:46:FD:31:C2:06:90:B2:2B:4D:6B:33
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/mR7qCYpIr0rpRv0xwgaQsitNazM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.253.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fe:fa:61:6f:f9:ac:18:24:d1:78:8d:d0:3b:2e:39:12:df:
b1:24:68:9b:b5:76:83:65:84:a8:ab:3d:ef:27:70:99:38:58:
c1:5f:92:ef:60:42:ea:92:69:e7:c2:19:00:f3:d6:dc:78:88:
b8:b3:c8:cf:81:e8:95:6d:ad:7a:7e:36:ee:7e:f3:ed:db:72:
49:aa:9d:e1:1b:61:b8:62:ea:94:55:b4:83:ff:12:91:31:44:
4c:69:d3:20:6b:8d:d8:74:bd:f9:87:0c:7b:71:b5:9d:d8:11:
56:d0:0c:db:98:98:79:ae:91:8f:89:b4:e6:df:64:74:2d:af:
a6:7b:1c:1a:91:e8:35:a6:53:26:33:fc:15:8b:4e:52:79:fa:
26:c1:a9:8f:0c:f6:ce:cb:2c:dd:11:78:1d:af:09:9b:e9:7a:
24:da:17:f4:eb:d5:7e:1b:a4:36:50:68:f8:b9:92:ab:1d:de:
ec:d4:06:be:2d:3e:0a:59:57:e1:c4:38:e7:1a:65:5a:f3:79:
c5:68:f3:c5:1a:f8:47:e7:eb:ba:a7:27:eb:2e:39:21:4b:d7:
fc:12:f0:8b:b7:4d:98:e8:41:ad:03:9e:59:c5:e4:fb:56:ac:
09:58:07:dc:96:ef:f5:93:3c:97:55:34:a8:d5:5c:89:7c:2c:
86:35:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:30:42 2024 by rpki-client on console-ams.rpki-client.org