Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/MAyt69ZMS2e5CjZBCuX0cmFYtG8.roa
File: MAyt69ZMS2e5CjZBCuX0cmFYtG8.roa (raw, json)
Hash identifier: +Y+xg+0vSU2iKdg1rdG9CVwk2ePqUcZqnm000q/VWMA=
Subject key identifier: 30:0C:AD:EB:D6:4C:4B:67:B9:0A:36:41:0A:E5:F4:72:61:58:B4:6F
Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial: 018CC2DB2A6E915085FCC5D17796679FEC23
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/MAyt69ZMS2e5CjZBCuX0cmFYtG8.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200695
IP address blocks: 185.98.233.0/24 maxlen: 24
185.98.232.0/24 maxlen: 24
185.98.235.0/24 maxlen: 24
185.98.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2a:6e:91:50:85:fc:c5:d1:77:96:67:9f:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=300cadebd64c4b67b90a36410ae5f4726158b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:02:f0:c9:84:aa:c3:12:1e:e3:f2:66:b5:
1b:30:5a:aa:b6:63:90:fd:d9:af:0e:c8:6e:5f:ed:
77:c3:9f:f2:94:22:5c:86:3f:06:0b:e1:f6:e8:21:
24:8e:91:ce:45:bf:51:61:85:fd:6a:ab:10:3f:94:
37:a6:b0:3f:2d:ab:24:3d:0e:ae:71:05:53:14:5c:
a1:ee:ab:13:5a:d2:a1:21:88:1d:57:36:1f:3a:c0:
6c:a6:6f:01:3c:ac:20:c8:40:c4:4a:2f:16:e2:73:
5f:ef:28:c5:f6:0e:a1:a9:2b:e6:e7:23:88:01:3b:
d3:66:b3:86:2a:eb:dc:e3:7f:8f:af:29:26:04:1b:
cb:e3:ff:ef:f6:2e:a2:fa:d6:8e:2c:67:af:c8:57:
3f:c4:21:4a:cb:b4:a8:77:b7:7c:91:38:a8:75:e8:
58:c2:f9:94:75:41:35:5a:05:3b:69:60:01:e0:0b:
72:88:e3:e8:c3:4e:58:a5:da:39:6a:86:3c:1a:e5:
d3:0c:3b:17:ae:43:68:74:db:96:49:13:62:c1:81:
6e:6d:5a:71:1a:2c:5c:d1:da:0d:eb:91:03:89:36:
4a:40:79:f8:da:40:f6:9c:a2:ef:e5:dd:74:ee:95:
ad:e7:81:7a:06:c3:6f:a6:7a:e4:3f:44:68:75:62:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:AD:EB:D6:4C:4B:67:B9:0A:36:41:0A:E5:F4:72:61:58:B4:6F
X509v3 Authority Key Identifier:
keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/MAyt69ZMS2e5CjZBCuX0cmFYtG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:65:db:82:dc:95:d6:99:61:0b:a0:45:d3:b2:77:e2:8f:8a:
c8:85:50:15:7a:89:ed:dd:5a:ee:64:da:84:03:e0:25:e2:7e:
e5:5d:00:39:e8:e2:da:b4:e0:10:56:ec:bf:81:52:0c:4f:65:
71:d6:e9:e9:a3:ce:fd:da:99:ae:28:da:67:23:81:cc:6d:7e:
ce:c8:e0:c4:6a:5a:92:9c:5c:14:3f:eb:0a:cd:c2:6e:39:02:
f3:0f:20:11:2b:53:74:62:20:72:cc:3a:5d:6a:5c:0b:13:b9:
aa:16:37:9d:a6:84:aa:6d:75:36:3b:23:4b:22:44:02:a4:cb:
1a:4e:75:0d:36:fb:28:2e:02:34:9d:1f:9f:d9:1c:5d:8e:9a:
62:16:e2:43:c7:e6:ab:e7:91:4d:04:4c:2b:50:80:dc:76:b7:
c6:9a:48:b9:9d:84:5d:fd:9d:18:10:69:62:8b:38:61:01:0d:
bc:ac:b3:af:ee:fb:3c:a3:ba:ef:78:3f:03:40:45:d7:d0:55:
cf:94:2f:5a:0e:07:1a:b9:cb:96:b7:ce:df:03:5f:14:bc:e5:
3e:7d:a3:8e:94:4b:fd:c6:fc:13:d6:61:40:39:bc:88:ce:cf:
28:91:c7:6a:ea:95:21:13:d6:85:a9:4a:a6:e9:95:5a:d3:f2:
b4:1d:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:57:44 2024 by rpki-client on console-fra.rpki-client.org