Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/rm-NbcL2yWtfMlKdpKBXsK8O1aI.roa
File: rm-NbcL2yWtfMlKdpKBXsK8O1aI.roa (raw, json)
Hash identifier: n5UuyHCUos0aWN5YrO5YjvvlQMiYsMY26EXWi1jh6Sk=
Subject key identifier: AE:6F:8D:6D:C2:F6:C9:6B:5F:32:52:9D:A4:A0:57:B0:AF:0E:D5:A2
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 018CC2DAC5A51AC4756DA6A6252451C7C111
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/rm-NbcL2yWtfMlKdpKBXsK8O1aI.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35199
IP address blocks: 193.19.164.0/22 maxlen: 22
185.214.67.0/24 maxlen: 24
178.219.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c5:a5:1a:c4:75:6d:a6:a6:25:24:51:c7:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae6f8d6dc2f6c96b5f32529da4a057b0af0ed5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:67:18:f2:83:7d:2e:35:14:d1:9e:63:14:
91:00:22:a2:69:1f:08:8a:d8:ea:49:21:5e:37:84:
82:d8:ea:cb:a6:65:ea:eb:2e:ba:be:34:bc:53:9f:
3b:d7:54:5b:3a:2c:06:d2:e8:6a:50:2d:3d:ab:7f:
2b:2e:84:6e:c0:7d:d7:34:6b:b7:93:df:19:ba:e3:
f2:b8:a5:a0:b8:dd:75:04:55:37:fc:f3:31:5c:12:
09:66:a0:92:d5:e7:78:05:2a:90:ea:3b:fc:15:58:
74:af:9a:ab:ed:25:2b:ba:d1:d4:49:57:20:68:03:
ab:44:71:d0:ae:05:0b:ff:82:20:be:ed:c8:91:03:
de:71:2e:11:fd:0a:4a:b7:97:b7:88:2a:c5:ca:e6:
e3:06:f3:95:23:a6:cf:ec:95:22:2e:40:75:06:d1:
43:db:b4:0f:4d:ff:f0:3a:c6:e4:30:69:ca:14:3d:
14:c9:42:8e:57:13:52:63:b2:77:7d:7f:f3:00:c8:
de:62:66:f6:7d:c5:21:10:b5:34:c1:b1:c6:88:71:
7b:6d:0f:3e:bd:a4:9d:17:44:92:ac:96:8d:ef:9a:
6d:94:63:e5:7a:27:83:ce:f5:3c:56:42:94:0d:31:
94:95:7d:b7:4d:08:86:db:9a:7d:4f:c9:a9:8a:44:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:8D:6D:C2:F6:C9:6B:5F:32:52:9D:A4:A0:57:B0:AF:0E:D5:A2
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/rm-NbcL2yWtfMlKdpKBXsK8O1aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/22
185.214.67.0/24
193.19.164.0/22
Signature Algorithm: sha256WithRSAEncryption
02:48:17:bd:ea:85:a2:a9:b5:4d:a4:7e:b4:ae:7e:1e:cb:a3:
23:d6:dc:ff:57:e9:1d:36:a5:3a:d6:20:84:db:f2:57:08:78:
d6:11:5f:72:0a:68:d1:9d:12:67:61:ca:3e:9c:f0:fd:c1:14:
1c:ac:00:b4:cd:70:54:cc:b8:4d:7d:09:48:e3:83:8c:b2:57:
4c:2c:15:f0:72:fe:8e:5b:11:ea:ef:72:26:b6:fe:19:07:af:
82:db:7b:ec:72:09:42:46:34:b1:1a:58:10:49:2c:4b:a5:41:
41:ad:b8:33:06:7b:7e:53:da:4a:65:01:18:c5:5e:3e:e3:d3:
31:72:17:a4:56:8d:b7:2c:13:ae:58:18:68:a0:d6:de:69:5b:
dd:60:af:0d:71:d8:46:8a:49:9a:14:d4:44:28:6a:a1:6e:56:
04:24:3c:15:e2:86:12:04:49:4c:3e:fa:63:5b:b5:9c:59:51:
4f:5a:26:88:5b:d6:02:91:12:9d:8e:c7:51:ee:f3:44:ca:99:
a6:65:b7:7e:38:fc:ff:7d:a2:8c:d4:08:88:44:d2:2d:f3:16:
a7:c1:9a:eb:5c:37:be:8d:03:b0:23:ab:95:37:1e:54:61:fb:
25:f9:da:cb:dc:c1:c4:2a:b7:82:6e:7b:11:6e:7e:29:85:18:
eb:5f:c5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:25:20 2024 by rpki-client on console-ams.rpki-client.org