Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa
File: oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa (raw, json)
Hash identifier: iI5Yn4DK0z+jkf5vETgK3cwlDLbf+GK3Vtl6pEfA0yI=
Subject key identifier: A0:A3:28:2A:0D:C2:CD:12:9E:51:86:3D:08:3F:D9:AB:90:69:3E:AC
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 018CC64B25FCB49F2F96A205B7A4E80755A6
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.143.0/24 maxlen: 24
185.166.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:25:fc:b4:9f:2f:96:a2:05:b7:a4:e8:07:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0a3282a0dc2cd129e51863d083fd9ab90693eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:8b:5b:fe:4a:e9:b0:46:7d:0f:cc:b7:e3:
fa:97:00:e6:fd:e2:98:e9:cf:a4:87:08:e3:50:90:
f2:55:e0:ca:95:43:cf:dc:b5:96:7d:1f:fe:0b:a7:
e0:32:b2:9c:89:ef:f2:36:79:e9:fc:aa:70:b4:26:
30:55:c2:71:45:d4:15:a1:ac:e8:e7:ea:29:1b:9e:
46:26:b2:e0:b0:bc:04:76:20:2b:db:d0:c1:84:cb:
f9:7a:49:a4:28:7f:28:b9:9a:52:20:90:e4:1b:bf:
76:a8:2b:90:fc:c5:04:b7:d7:19:c2:18:aa:d4:f6:
78:f0:4f:07:d0:b3:a1:04:f5:b4:7a:74:3f:9e:16:
85:66:45:a3:50:b7:c8:7d:b5:77:9d:fe:f3:89:92:
d2:fb:d0:4a:8f:20:d3:76:72:bd:62:48:1e:ef:44:
0d:dd:42:38:7b:e7:85:b3:8f:1e:19:a9:35:fb:3e:
47:c5:18:93:0f:64:7a:5f:db:e8:c7:65:bd:ae:ec:
20:59:46:3e:75:7a:24:d7:92:7b:ef:06:6e:60:d3:
33:8a:19:e6:7d:84:e8:a7:ec:b2:95:1e:06:dd:36:
84:ac:97:e9:22:a7:95:13:0c:63:c4:f3:4f:de:87:
f6:fa:6c:1e:73:85:4f:cc:8c:f2:28:31:83:bd:12:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:28:2A:0D:C2:CD:12:9E:51:86:3D:08:3F:D9:AB:90:69:3E:AC
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/oKMoKg3CzRKeUYY9CD_Zq5BpPqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:9a:45:e2:4d:e8:ac:d2:96:21:2e:a2:e7:a0:c0:5a:59:74:
5b:19:fc:78:26:e9:91:f6:58:52:a0:2e:af:ea:af:42:8d:59:
ed:4e:b7:3f:6f:fe:56:79:54:73:c9:0d:11:48:1a:e0:e6:31:
cb:c2:38:e4:13:a3:0f:09:1b:b0:1f:1b:f3:99:b2:4f:28:a2:
c7:05:4e:8e:08:8e:ee:57:31:24:3e:c2:f4:17:e7:47:4e:dc:
8a:43:1f:9e:50:96:42:65:0f:b2:90:27:cc:c3:7f:27:55:62:
91:00:8a:ca:97:73:83:1e:cc:c7:78:67:ed:dd:f9:01:34:35:
f6:f0:5e:23:74:c2:b0:3b:43:9e:78:b2:7d:72:5a:9b:35:ba:
d4:3b:83:9a:38:33:b0:c1:d8:d6:93:06:ce:56:df:0d:d6:e3:
7e:a0:9f:bf:40:71:e4:4b:8e:3f:81:64:c1:b0:ff:15:5c:28:
8b:9d:42:de:d1:88:33:df:0e:75:09:d0:76:18:9e:f0:51:1a:
35:51:ee:08:5e:2a:43:2b:bd:72:5a:ce:cf:df:3a:0a:08:2b:
b4:92:6f:0d:ca:81:ea:ad:43:2c:d8:8e:15:fe:6d:c3:b8:e2:
58:ac:2d:db:4e:a6:3a:f1:db:78:3b:24:1f:86:8f:4f:24:97:
29:75:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:58:08 2024 by rpki-client on console-ams.rpki-client.org