Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/mnJZYacpbHJBMSglONlBW2In0sg.roa
File: mnJZYacpbHJBMSglONlBW2In0sg.roa (raw, json)
Hash identifier: UqMeaGHk6kyzgPXlCGJUB3zxCxlqEDTWCqTgO4V9/Fg=
Subject key identifier: 9A:72:59:61:A7:29:6C:72:41:31:28:25:38:D9:41:5B:62:27:D2:C8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 018CC802AA4A3750FD9245F5CD957077D39C
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/mnJZYacpbHJBMSglONlBW2In0sg.roa
Signing time: Tue 02 Jan 2024 02:31:06 +0000
ROA not before: Tue 02 Jan 2024 02:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206496
IP address blocks: 185.198.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:aa:4a:37:50:fd:92:45:f5:cd:95:70:77:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Jan 2 02:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a725961a7296c724131282538d9415b6227d2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:b6:87:0b:ae:fb:d3:ef:99:39:79:1a:2f:
83:15:99:8c:3f:1e:a1:d7:96:f4:1b:7a:92:fc:d9:
4e:10:76:32:ca:84:28:22:42:fa:0e:4a:0f:7c:6e:
dd:04:c8:43:41:ca:77:f9:a7:78:7d:68:19:f6:5a:
39:73:10:63:ff:ed:66:9b:14:77:c6:56:2d:e3:cd:
9e:5d:e9:5a:c9:39:74:3f:5c:b8:aa:b3:9f:97:ee:
ac:5c:2c:11:1d:21:6d:7b:ab:70:79:39:cd:e7:ce:
6b:6d:fe:63:ac:ca:24:b7:06:5e:38:b9:04:4b:ae:
b9:cc:c4:81:6d:74:5d:f4:99:9b:ea:ad:42:22:80:
92:ca:ef:4f:2d:3f:ef:7a:2d:9b:d3:40:84:58:22:
8d:d0:7d:38:db:ca:e0:cd:20:b1:32:b4:03:63:09:
c9:61:00:74:db:dc:75:21:af:4d:4a:17:0d:aa:d4:
a2:4c:04:2b:70:79:54:1f:01:5a:1f:2e:71:8d:dc:
21:21:3c:78:46:4b:9e:f9:2d:0f:8c:dc:a5:3e:0c:
0a:2a:0d:bc:bd:90:df:04:a6:76:ce:15:54:e4:5e:
16:d4:6a:9b:e3:26:5e:df:bf:ec:55:ed:3b:9a:84:
1f:04:22:3e:3f:97:a5:39:ac:b8:4a:56:94:56:c4:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:59:61:A7:29:6C:72:41:31:28:25:38:D9:41:5B:62:27:D2:C8
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/mnJZYacpbHJBMSglONlBW2In0sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:48:1f:00:e7:50:2d:ca:a4:f7:e4:f2:65:d9:11:74:95:e8:
17:ec:d1:7a:c6:cc:e8:75:5c:4a:a5:24:bf:cd:87:d7:31:e3:
07:b0:0a:df:5d:91:17:6d:e2:04:5d:4f:9a:78:3d:1e:66:e1:
9b:c3:12:e0:ec:3d:01:d4:c5:d6:d5:23:60:eb:dc:bf:66:36:
5b:f9:a7:e6:3d:38:5d:cf:d3:27:08:d5:7b:8a:a2:32:98:58:
a3:5f:ff:21:da:aa:1d:23:d2:cf:9b:72:7b:50:f8:7a:96:08:
9c:01:b2:30:d1:de:60:a0:b6:b6:37:6a:b9:7d:c2:8f:e5:8f:
57:54:a7:d5:6f:99:13:e3:de:b7:a7:c7:ff:63:b0:27:74:f1:
db:ae:45:11:46:a2:bd:4e:08:57:20:a2:9e:8d:32:15:be:6c:
e9:43:e3:59:01:13:47:b4:cf:23:78:83:f1:1f:1d:5b:7a:0c:
29:94:54:2e:60:c3:39:1e:6d:4f:58:63:3b:db:14:e9:95:c8:
1c:63:77:0b:9e:bd:f6:c5:ac:f2:ca:49:80:ed:bb:81:8d:01:
9a:f8:46:6e:7f:74:b7:69:9b:33:fc:4e:84:01:cd:83:ae:b5:
27:2d:b9:9e:57:09:6a:f1:92:65:84:e9:04:d2:0f:59:52:f5:
84:db:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:40:56 2024 by rpki-client on console-fra.rpki-client.org