Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/9NKVnNMtAKSYfk8vUOI7FiZyiPM.roa
File: 9NKVnNMtAKSYfk8vUOI7FiZyiPM.roa (raw, json)
Hash identifier: mqZ9dFQvwzJN317+bpzpJw60GoIDhKfV5v//qZfdQDE=
Subject key identifier: F4:D2:95:9C:D3:2D:00:A4:98:7E:4F:2F:50:E2:3B:16:26:72:88:F3
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 018CC5DC6F50139B953407AD08D19CDDB184
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/9NKVnNMtAKSYfk8vUOI7FiZyiPM.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51681
IP address blocks: 185.105.16.0/24 maxlen: 24
185.105.17.0/24 maxlen: 24
185.105.19.0/24 maxlen: 24
178.239.208.0/20 maxlen: 20
185.105.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6f:50:13:9b:95:34:07:ad:08:d1:9c:dd:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4d2959cd32d00a4987e4f2f50e23b16267288f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:58:37:0a:51:f2:39:96:57:5a:82:59:38:
3c:f7:e4:54:6a:8c:65:d1:c6:28:03:f1:0b:92:e3:
f5:56:29:77:60:7b:a5:81:3b:26:19:2d:f3:5e:6c:
e3:1a:e5:f8:7a:3d:84:37:24:ef:c0:c7:96:2c:86:
27:50:8f:0b:2e:3c:b7:95:33:74:52:9a:0e:07:fd:
a9:2a:db:3c:f9:5a:e2:21:4b:29:8f:d4:8b:52:55:
da:b0:eb:04:73:08:37:35:ac:69:54:00:da:1c:d9:
61:fb:43:9b:27:04:2c:59:0d:f1:a6:a9:9a:c6:63:
bd:94:d0:14:5c:05:8c:4a:36:85:2b:88:e6:e2:23:
82:66:58:9d:69:cf:61:7f:77:be:e9:e0:a9:c8:c6:
e2:ce:9a:f0:3a:f2:c1:ec:64:d2:c6:7f:4a:33:35:
50:46:49:6d:ad:13:4e:16:d4:6d:33:c5:d4:12:dd:
4d:a4:eb:56:66:77:2c:89:cb:3e:ae:1e:16:b8:09:
af:91:f6:c8:f0:4e:8b:82:2f:19:a9:59:90:9d:ea:
75:9d:11:3d:f1:31:b7:19:de:15:68:96:ab:ec:97:
58:01:de:88:b2:3f:28:76:81:1c:6a:39:77:34:1f:
92:22:06:62:8a:fa:1b:f0:01:4f:62:b8:93:1a:2d:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:95:9C:D3:2D:00:A4:98:7E:4F:2F:50:E2:3B:16:26:72:88:F3
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/9NKVnNMtAKSYfk8vUOI7FiZyiPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.208.0/20
185.105.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:9f:76:57:fe:ab:98:39:ad:ee:5c:39:11:0d:7a:d4:0c:26:
b9:32:26:46:8c:df:94:8e:bb:87:fb:c6:b8:6e:90:f2:d5:6a:
4e:5c:60:fc:91:73:74:81:7b:44:b3:9d:df:25:94:63:7b:c3:
64:64:c0:3b:ab:57:d7:03:98:0c:34:1f:ba:77:e2:cc:00:2d:
cd:b9:d2:09:29:6e:e4:3a:a9:2d:6c:e2:d2:b4:f6:a3:80:67:
2d:ad:76:83:2d:11:61:ed:98:9d:06:77:ab:59:fe:20:f2:37:
a9:69:f0:7c:30:6f:61:ce:ff:79:45:82:86:e6:5e:fb:b4:5e:
28:9f:f5:0a:62:62:5d:6b:71:a0:6c:28:33:0f:58:a0:4a:1a:
d9:4d:69:4b:79:39:fb:71:49:78:10:7d:7f:48:cc:c8:0c:f3:
24:f2:fd:5d:52:62:36:44:96:56:b8:13:01:4d:bc:74:ea:95:
fe:26:fb:bf:76:73:52:e7:10:b9:79:e3:09:ee:91:79:5b:7f:
72:f7:3b:b3:2f:1b:64:d4:05:60:92:95:75:40:47:3e:48:05:
d3:02:a6:1b:1b:74:a6:f4:e0:e2:ec:c6:9b:01:9f:3b:60:ea:
a3:e6:68:85:47:c5:67:b6:30:ee:45:b1:35:65:e7:f4:fc:4b:
b5:f8:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:35 2024 by rpki-client on console-ams.rpki-client.org