Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/mJtJLlV8EmizpA2GCxJKoVPjoYY.roa
File: mJtJLlV8EmizpA2GCxJKoVPjoYY.roa (raw, json)
Hash identifier: Ry5V+A1V4BRKw3xwagFdQ0o7coHlJ3w+5VUzOLki8b8=
Subject key identifier: 98:9B:49:2E:55:7C:12:68:B3:A4:0D:86:0B:12:4A:A1:53:E3:A1:86
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 018DEF1EC868B99BABD373FA0874381DF53E
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/mJtJLlV8EmizpA2GCxJKoVPjoYY.roa
Signing time: Wed 28 Feb 2024 09:49:48 +0000
ROA not before: Wed 28 Feb 2024 09:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:1e:c8:68:b9:9b:ab:d3:73:fa:08:74:38:1d:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Feb 28 09:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989b492e557c1268b3a40d860b124aa153e3a186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:09:b0:f5:d0:2e:46:67:2f:43:2f:05:ed:
d1:0b:a2:b6:71:91:55:ac:ae:5e:21:c1:3b:d2:46:
62:2c:e8:79:bc:65:7a:56:17:25:86:ad:a5:bf:26:
c6:a1:94:bd:af:c0:98:ca:c5:99:d5:bc:70:7a:54:
af:19:65:66:15:e4:cd:90:57:0e:6b:f6:0f:3d:10:
4b:2c:ac:cf:0d:98:88:41:9e:07:cb:77:00:57:54:
7f:32:9a:44:76:31:bf:c2:e2:95:15:a9:7c:63:a1:
b7:14:32:c9:ec:00:aa:21:dc:24:18:d5:19:5b:10:
e6:e1:ad:69:a5:bc:82:2f:5a:b1:e4:ca:52:31:f4:
9c:d1:7e:12:df:75:0f:52:49:e2:dd:54:41:87:b8:
cc:2b:e2:15:5d:00:f5:3c:15:5d:f9:ce:ef:b8:53:
e5:9a:90:a8:b8:53:b6:15:0e:a7:70:af:85:79:6e:
94:41:16:49:9b:8a:8d:1d:2d:c1:8b:58:a8:13:4d:
33:0b:75:d1:84:0b:4b:3e:1a:29:f3:31:6f:00:d9:
7e:87:8b:b3:a8:46:17:70:b0:cb:16:06:90:d8:89:
76:7e:80:fe:c9:5b:60:a0:c8:83:71:02:af:15:73:
da:8a:a1:37:0d:5e:eb:f1:73:81:90:70:43:b6:9f:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:49:2E:55:7C:12:68:B3:A4:0D:86:0B:12:4A:A1:53:E3:A1:86
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/mJtJLlV8EmizpA2GCxJKoVPjoYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0-185.145.2.255
Signature Algorithm: sha256WithRSAEncryption
a2:d7:95:05:92:e8:f9:d0:26:b9:98:15:21:a5:a1:33:c6:5a:
20:09:4c:4d:b9:62:d1:74:67:c6:26:36:f7:f5:af:db:65:ba:
93:76:6c:4e:75:ca:ca:d7:9e:5a:3c:da:a2:67:07:b0:c2:5e:
36:95:54:28:92:af:f9:18:c0:0a:5a:ce:90:ff:2b:59:55:6d:
a6:95:7b:55:42:30:27:b8:2e:2f:84:e7:a1:23:35:c8:a1:67:
68:d4:65:7e:7d:db:29:52:0d:86:b5:b6:67:59:ce:75:ec:fe:
5f:ee:57:ec:bf:8f:50:93:29:68:ba:8f:05:40:2b:93:4d:cb:
93:3d:8b:48:68:dd:9b:55:bf:b4:58:f6:00:12:a3:ef:4d:b6:
d6:07:c2:11:dc:a4:c7:1b:9c:5d:2e:15:a9:03:e4:b0:ea:93:
60:22:98:4c:a3:e2:dc:bb:70:5f:81:dc:d3:e2:32:f4:31:06:
01:3d:9f:ea:d3:a2:56:a8:31:0f:86:40:e0:6e:a9:f0:01:86:
44:06:c7:63:b7:e4:7d:7e:ff:75:4a:da:7c:0f:a1:02:76:39:
c8:ce:45:b8:70:16:8e:46:dd:7b:a3:13:b0:a1:3e:98:40:69:
74:c9:7a:f9:9c:58:84:de:29:71:f8:62:0b:44:89:56:51:be:
d5:18:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:23:42 2024 by rpki-client on console-ams.rpki-client.org