Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3WVo4FqFMS-tp15_cmm5LNyjww.roa
File: m3WVo4FqFMS-tp15_cmm5LNyjww.roa (raw, json)
Hash identifier: HPQt/yxvQ5t3FbzAqyDvRw3D/flNba6xI+R+FW3pOL4=
Subject key identifier: 9B:75:95:A3:81:6A:14:C4:BE:B6:9D:79:FD:C9:A6:E4:B3:72:8F:0C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6DC344BF378F436030F6C5E6E3A4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3WVo4FqFMS-tp15_cmm5LNyjww.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 185.80.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6d:c3:44:bf:37:8f:43:60:30:f6:c5:e6:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b7595a3816a14c4beb69d79fdc9a6e4b3728f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:2c:46:e0:ce:89:39:e5:71:de:3f:d3:f8:
ae:05:7d:95:70:c5:9e:f9:e1:80:57:91:10:43:dc:
a8:6a:a6:22:06:e5:73:08:da:90:cc:85:6c:f3:a4:
1b:db:8d:fc:da:d4:0e:87:a2:1b:82:74:ea:24:c5:
a4:ee:76:f8:97:7d:f6:9b:42:73:87:9d:20:0e:22:
85:59:5f:ff:93:98:1e:7e:be:44:e5:c1:d0:51:0c:
60:90:9f:73:da:e9:d9:53:07:52:8f:f4:3a:d9:02:
78:25:92:c9:79:16:2e:59:99:2c:b5:83:a4:a9:0e:
db:78:0f:96:0d:41:6e:b1:cd:49:af:a5:19:9d:03:
45:2a:5c:a9:01:92:db:c3:8b:6e:e4:ea:89:94:2b:
af:b2:0d:44:49:05:1e:a0:2e:41:c2:e4:e2:ae:a6:
59:c5:3c:79:29:b3:17:d9:bf:67:07:ff:ba:3e:18:
cf:69:4c:bb:54:76:46:d5:b0:29:f4:1f:7d:28:eb:
84:8f:82:c1:84:24:21:6d:ab:ff:80:be:ab:dc:b1:
e6:b5:9f:e8:00:af:63:c8:a7:92:0f:85:e7:37:65:
fd:d7:b7:c9:87:14:ad:95:e8:bc:f2:c9:ee:12:ed:
f8:e6:d4:97:ca:52:7b:20:0d:20:23:ae:db:0e:58:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:95:A3:81:6A:14:C4:BE:B6:9D:79:FD:C9:A6:E4:B3:72:8F:0C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/m3WVo4FqFMS-tp15_cmm5LNyjww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.196.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3c:a5:87:65:4f:e6:23:69:e2:38:d4:6d:99:f4:38:75:21:
3c:4d:81:1d:d3:eb:ae:c5:b9:c3:21:78:0d:2c:26:8c:56:ce:
85:a4:d7:30:de:da:1d:3a:a8:ab:f5:1d:18:b6:59:57:15:82:
4f:70:13:a2:b8:77:fa:39:cc:43:25:f9:db:a6:cb:cb:17:e7:
c2:b2:7c:f7:d6:3f:7a:60:4b:08:e7:f7:93:08:73:ce:4a:c4:
11:fb:d8:13:f8:91:ef:31:54:2c:0c:8a:53:fd:30:10:ef:ba:
91:a9:ee:1d:30:e8:67:6a:d6:83:91:cc:5e:f3:ce:70:f6:bb:
e9:60:74:10:fe:3a:4f:18:a6:be:9a:68:ab:cc:d9:42:34:ff:
e0:c8:24:50:a9:5a:8b:a7:c8:ac:2a:e6:e7:77:af:96:c9:b8:
52:d1:43:e8:6f:c4:6f:51:df:03:9b:60:01:ef:88:40:92:77:
b8:c9:9b:4a:2b:15:84:de:7e:9a:58:0f:f0:3f:1c:13:2a:33:
60:c2:7a:d8:c8:cf:9e:70:a0:5b:33:51:0a:91:2b:b9:56:2d:
97:2c:5b:36:c9:65:b4:b8:21:93:d5:1e:e8:6d:ad:95:26:87:
cd:b6:60:35:f1:04:6a:77:9f:8e:78:47:36:3c:92:40:33:eb:
eb:0a:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:11:23 2024 by rpki-client on console-ams.rpki-client.org