Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/MDtGeTSubU8bjpY9bqoRVhZJxxk.roa
File: MDtGeTSubU8bjpY9bqoRVhZJxxk.roa (raw, json)
Hash identifier: +WN3gZ5BPY4nAvzwYdPz3iOWZfwW9Qbr335QJOMPkoM=
Subject key identifier: 30:3B:46:79:34:AE:6D:4F:1B:8E:96:3D:6E:AA:11:56:16:49:C7:19
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 018CC86F04BB173A9B0ACBEE15215E13DD20
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/MDtGeTSubU8bjpY9bqoRVhZJxxk.roa
Signing time: Tue 02 Jan 2024 04:29:28 +0000
ROA not before: Tue 02 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 185.104.28.0/22 maxlen: 24
2a06:2ec0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:04:bb:17:3a:9b:0a:cb:ee:15:21:5e:13:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=303b467934ae6d4f1b8e963d6eaa11561649c719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:ff:2e:78:59:85:1d:68:ac:ab:07:a3:9f:
98:2b:da:f6:5a:ce:3b:f1:26:02:2c:18:84:bb:86:
21:da:e0:28:41:a3:5d:8c:62:29:83:dd:91:43:be:
f8:22:a2:8a:39:d7:dc:aa:c0:de:4c:48:e0:75:0c:
5f:69:22:6c:ca:05:eb:61:90:c7:34:de:4c:9a:56:
50:61:80:b1:6e:43:0e:7a:2b:99:26:73:06:81:6f:
89:ab:7f:1f:fb:7a:ed:53:8b:bd:07:8e:7a:0b:43:
99:7e:e3:aa:67:18:9e:57:07:04:67:2f:80:88:5d:
de:17:5d:3f:50:3d:01:69:28:7d:83:ab:33:af:fa:
a1:f4:6e:ee:ab:9e:d8:8d:16:78:8b:98:43:cc:b3:
91:88:d0:7f:c2:15:d8:b9:ea:f6:1d:1b:08:8e:f8:
12:cd:b6:dc:4c:cd:73:b1:e3:48:f5:0b:1e:28:7c:
99:93:f5:f7:b4:b1:12:43:48:6e:29:f5:b4:3d:f3:
f2:44:bb:d4:d3:3a:87:ec:cc:89:b6:00:0f:18:9d:
2f:22:45:01:ea:78:51:c9:95:03:cd:66:7f:ec:60:
cd:26:5d:99:78:7c:48:04:89:b1:81:ad:10:9f:da:
a1:5d:16:e8:8c:4f:5c:a8:6c:74:08:29:03:61:27:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:46:79:34:AE:6D:4F:1B:8E:96:3D:6E:AA:11:56:16:49:C7:19
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/MDtGeTSubU8bjpY9bqoRVhZJxxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.28.0/22
IPv6:
2a06:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:26:5f:08:84:41:2d:65:71:51:29:70:18:6f:a7:f7:f4:89:
4d:71:8f:09:63:89:c5:75:bf:eb:09:4d:39:82:60:5c:c0:29:
ad:b7:04:82:d6:7f:fa:37:e5:53:3d:52:e7:22:59:64:96:51:
52:bf:8e:59:a2:2a:da:a5:21:ca:90:72:09:18:dc:90:81:0a:
21:e1:b0:50:fa:8e:be:20:14:5c:95:26:25:2a:fe:42:17:a1:
f3:e6:e9:06:b7:b0:fb:9a:ee:c0:b1:e5:ef:92:80:97:8e:5c:
53:d4:3d:34:3f:7e:9d:17:33:c4:54:83:7d:45:48:c5:4b:93:
26:1a:b6:eb:26:4f:1e:6b:38:da:17:95:5b:d5:e2:6f:74:95:
af:b0:eb:5c:b1:81:e1:23:ca:e6:bd:c1:32:e8:4c:80:d8:16:
c6:d4:d0:7b:61:43:04:1c:55:b7:d8:9a:bc:2b:a4:f1:d3:72:
df:02:d8:34:63:fd:90:9a:c5:70:b6:d2:cb:60:20:9f:67:70:
ed:97:dd:ef:3f:8f:08:de:96:83:d1:56:ac:8f:89:7a:c0:38:
e1:84:a4:83:6f:bb:ea:09:44:f2:97:6e:dd:e4:ba:0d:39:c5:
66:8f:44:77:9d:8a:4c:d9:77:5e:f7:40:04:d1:14:03:97:67:
49:f8:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:14:36 2024 by rpki-client on console-ams.rpki-client.org