Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/mcegTA8KryHaQRa4XPE5O1v4yY4.roa
File: mcegTA8KryHaQRa4XPE5O1v4yY4.roa (raw, json)
Hash identifier: FD5+bKCL030R5u9B0DUU4AyDw7samia6m+1hQW0MLL8=
Subject key identifier: 99:C7:A0:4C:0F:0A:AF:21:DA:41:16:B8:5C:F1:39:3B:5B:F8:C9:8E
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 018CC9BC135C510F4F05C7430B35DB4B146E
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/mcegTA8KryHaQRa4XPE5O1v4yY4.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60672
IP address blocks: 185.182.69.0/24 maxlen: 24
185.182.68.0/24 maxlen: 24
185.182.68.0/23 maxlen: 24
185.182.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:13:5c:51:0f:4f:05:c7:43:0b:35:db:4b:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99c7a04c0f0aaf21da4116b85cf1393b5bf8c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:7a:28:bd:a9:93:f9:e1:fa:e2:a2:6c:1d:
cf:66:38:53:b1:42:c1:f0:e1:73:41:e6:e8:11:31:
d4:02:d9:7d:a7:57:bb:ee:ff:d9:31:ff:48:77:46:
eb:83:03:57:64:a4:73:b5:b2:73:31:f1:71:94:91:
e7:e8:3b:8a:18:50:25:72:5f:91:83:9a:b4:7d:a6:
04:47:bf:8b:79:0c:00:2a:a2:54:81:b5:11:7a:6d:
b5:5b:3c:6b:20:92:1e:80:29:8d:d2:9b:57:8d:cb:
c0:90:3a:2e:c5:9c:b0:fa:3f:af:7a:39:3a:f4:62:
e5:e2:c3:59:eb:aa:20:a0:62:9e:1c:a8:75:d9:2e:
58:68:b8:51:9f:c5:2d:e7:ae:4a:15:66:76:a3:e3:
92:28:6f:f3:30:28:fc:a7:f1:1c:a0:7e:ee:a8:9b:
d1:d8:c8:b8:c3:87:0b:05:81:c2:06:fd:37:0a:47:
08:c6:b3:00:7d:58:aa:c1:4e:3f:0e:3d:a1:00:84:
5f:36:e3:d5:09:92:9f:1b:a9:5d:8a:34:d6:ed:d4:
54:de:a9:1d:91:21:15:c8:76:02:9c:37:6a:3c:45:
a7:42:ed:ec:70:43:17:2f:ac:e2:76:8c:84:cd:76:
ce:30:ec:6a:47:bc:b6:14:bc:66:6d:8c:2f:f4:60:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:A0:4C:0F:0A:AF:21:DA:41:16:B8:5C:F1:39:3B:5B:F8:C9:8E
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/mcegTA8KryHaQRa4XPE5O1v4yY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.68.0-185.182.70.255
Signature Algorithm: sha256WithRSAEncryption
85:c7:cc:13:cd:fe:8f:a5:f5:23:0c:8f:fd:7a:81:ee:c9:8f:
60:0c:67:06:e1:b2:22:a1:01:50:fd:14:c8:fd:89:71:6a:72:
b9:98:d0:f0:9b:7b:7c:94:4b:58:17:e0:d0:be:67:f6:af:e5:
25:6e:42:5f:9d:81:ff:a9:ea:90:d8:20:81:ca:9a:d6:43:fc:
15:9d:bb:ac:d5:9c:bc:00:6a:51:d1:fd:97:85:de:8c:8c:4e:
bc:46:21:33:34:97:cf:b1:d7:2b:7d:b0:fc:d9:5c:77:3d:13:
ce:17:34:4b:0b:03:83:65:b6:5c:a4:89:b1:7b:96:ba:14:78:
07:c9:f4:cc:9d:97:14:fe:f7:95:96:d2:b2:80:83:72:0a:3e:
e4:94:25:26:37:cc:3b:61:c9:e6:0c:85:a9:d1:ba:8c:10:ed:
b9:4f:e1:30:cc:54:96:05:d2:72:b7:4e:75:d3:ca:80:92:3c:
f2:0b:10:5b:ea:70:4c:97:24:6d:ac:f0:b9:dd:95:1f:45:f8:
e9:8b:cb:c9:f6:3b:19:b8:85:28:31:9c:5c:a6:ae:ef:68:a0:
73:29:d0:0f:aa:23:f3:ec:81:46:47:11:67:f7:74:75:6b:cf:
75:9d:b4:f0:f2:d4:ec:1e:5e:fa:fb:6a:13:57:3e:e2:2e:06:
b4:ca:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:54:10 2024 by rpki-client on console-fra.rpki-client.org