Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/mmzDeY2b_TyOM1wM8I0HT3JIvc4.roa
File: mmzDeY2b_TyOM1wM8I0HT3JIvc4.roa (raw, json)
Hash identifier: 3uqQ6H9MNUH3NJNg8qKOdmzbI/dvetl/6go9okzYfRg=
Subject key identifier: 9A:6C:C3:79:8D:9B:FD:3C:8E:33:5C:0C:F0:8D:07:4F:72:48:BD:CE
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 018CC94DE60A1E0C30C6BCAF5FA7D0251611
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/mmzDeY2b_TyOM1wM8I0HT3JIvc4.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208855
IP address blocks: 109.71.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e6:0a:1e:0c:30:c6:bc:af:5f:a7:d0:25:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a6cc3798d9bfd3c8e335c0cf08d074f7248bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:e5:ab:64:ed:5b:ad:e4:03:a7:7c:bc:d5:
b8:fc:ee:b8:57:0c:e8:93:3a:e8:9f:14:d0:b5:5d:
f1:1e:4d:c1:79:ba:0a:62:94:87:2e:40:fd:f8:77:
6d:09:46:0c:94:ab:e6:4f:72:4e:a6:f2:59:0f:69:
70:b7:98:78:31:e9:25:69:f9:45:ab:32:6d:43:5c:
9f:6a:15:60:44:50:d8:a2:db:36:ca:cc:a2:7f:a9:
0e:2a:39:ec:2c:24:c2:a2:35:1f:32:31:3b:7e:18:
58:1e:b3:61:c6:4b:a7:dc:c2:5f:d5:5b:96:27:a0:
b3:8a:ba:c7:57:59:e5:8f:3c:a9:c2:7d:82:7a:f3:
a4:7e:f6:ce:03:25:ba:48:78:bd:9b:d0:61:6a:6b:
cd:b0:02:71:c4:22:1f:fe:7c:09:cd:08:cc:06:bf:
e6:26:44:2b:63:82:3d:7f:07:0a:67:ad:40:0d:e7:
61:02:a4:95:38:25:54:ff:3c:4a:1d:27:86:26:a2:
be:5c:8e:6d:0f:f6:2b:0a:e6:51:4f:2a:89:01:f5:
f4:aa:9d:5b:a0:58:19:0a:5d:07:86:c0:36:fc:28:
3c:90:75:30:63:50:a3:35:e9:fc:a1:65:09:c4:c6:
53:dd:6c:43:f4:c3:f8:97:fa:e5:59:e9:5b:b7:68:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:C3:79:8D:9B:FD:3C:8E:33:5C:0C:F0:8D:07:4F:72:48:BD:CE
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/mmzDeY2b_TyOM1wM8I0HT3JIvc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:43:6b:5f:77:0b:09:7f:31:a2:2f:b5:30:b1:98:90:69:d9:
49:55:d7:44:61:6b:d1:84:06:74:4b:61:8a:b1:d6:3b:b6:78:
9c:ed:7a:41:db:ac:02:95:d4:99:01:56:c6:1a:f0:c0:7b:db:
7a:f0:ae:7b:86:d3:1e:38:77:07:17:81:eb:84:64:1d:1b:d2:
ab:dd:d3:32:95:c3:31:de:a6:d9:db:95:7f:44:91:e6:29:6e:
38:02:9a:84:83:22:26:07:82:27:00:44:30:c7:6f:cc:89:59:
75:93:c2:52:f4:54:38:fc:27:3c:99:21:4f:37:fe:0b:eb:1c:
f3:62:a9:62:d7:89:31:e5:12:6a:52:58:47:1d:ff:b9:8e:83:
63:00:d7:57:65:eb:64:d9:b3:7f:60:92:4f:6b:24:cf:03:83:
80:ec:cd:3d:03:68:a4:0f:78:55:20:c8:63:b3:f1:0d:0c:9e:
f1:3c:48:0e:aa:8d:c2:1e:f9:5b:84:ff:b0:1d:74:b9:e6:8c:
8b:a0:39:64:14:d0:d1:65:09:a0:86:58:9f:83:ed:00:55:64:
43:f9:20:fb:24:da:47:ca:af:d3:93:fd:61:da:9f:ba:dc:67:
21:91:50:6f:42:6a:69:ca:79:24:43:37:1f:0a:18:ce:02:28:
29:81:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:26:17 2024 by rpki-client on console-ams.rpki-client.org