Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/MhorYDQr13Hzi1RG-Jrxl-cOtSw.roa
File: MhorYDQr13Hzi1RG-Jrxl-cOtSw.roa (raw, json)
Hash identifier: 9gBHepoU+2YPWeToKmcbeEBCsIRnJSlGiMe3UEEYTsI=
Subject key identifier: 32:1A:2B:60:34:2B:D7:71:F3:8B:54:46:F8:9A:F1:97:E7:0E:B5:2C
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 018CC8DEB59BC718F8428184896ABFB9BB60
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/MhorYDQr13Hzi1RG-Jrxl-cOtSw.roa
Signing time: Tue 02 Jan 2024 06:31:27 +0000
ROA not before: Tue 02 Jan 2024 06:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205718
IP address blocks: 185.248.20.0/22 maxlen: 22
2a09:f4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b5:9b:c7:18:f8:42:81:84:89:6a:bf:b9:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Jan 2 06:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321a2b60342bd771f38b5446f89af197e70eb52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:44:a8:b7:28:83:af:26:25:fc:91:e1:8e:
bb:e2:84:72:5b:c0:7a:0c:d8:80:b9:8b:50:ed:b8:
6e:eb:5a:c4:00:88:79:7d:40:a4:a6:d9:4a:28:bc:
16:f8:dc:31:4f:ec:c7:91:8e:76:ca:bc:a4:20:ed:
b1:eb:cf:4a:4d:cd:4d:e5:b0:1c:6a:98:7c:dc:1c:
e9:bb:45:a1:77:2a:0f:ca:6d:bf:73:82:ac:e9:ac:
d1:50:76:55:02:d2:80:07:b9:62:5f:5f:ca:6b:ae:
fe:98:ef:d6:4a:5f:99:e6:16:79:35:23:36:b9:cc:
36:2a:80:2e:f1:1f:7a:b3:45:b3:a6:72:58:4d:84:
22:c3:5d:86:91:03:6e:de:d7:7e:0b:c5:6b:88:d6:
4d:51:67:48:89:0b:cf:da:c4:91:4d:cd:84:05:11:
8d:3c:e7:b7:ec:e4:5c:fd:6e:78:ab:8c:e0:78:02:
54:1a:f0:ea:8d:70:cd:a8:0e:ec:d5:2c:d7:bf:cd:
d1:c2:22:4f:cc:d1:9e:35:60:1f:c8:66:75:ae:31:
3f:62:96:0c:b8:32:f8:71:87:37:d8:11:52:82:c4:
b1:68:45:2d:69:01:ce:8b:3a:4d:07:51:ea:60:0a:
5c:e7:32:cb:9e:ea:f1:fc:75:d4:19:4a:b2:ff:48:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1A:2B:60:34:2B:D7:71:F3:8B:54:46:F8:9A:F1:97:E7:0E:B5:2C
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/MhorYDQr13Hzi1RG-Jrxl-cOtSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.20.0/22
IPv6:
2a09:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
be:d3:73:47:13:64:ff:0f:d0:11:a8:7d:d5:73:54:29:1b:6c:
bd:3b:1e:d5:ff:9c:b8:ee:7f:22:54:c3:20:03:53:e2:9a:bc:
fa:5f:53:46:68:63:36:2a:d8:ee:d6:4c:e0:d0:7f:43:84:21:
8c:79:9d:83:cd:db:e3:87:5a:ab:ff:96:c0:cc:0b:33:07:42:
c2:d3:b4:09:a1:09:44:b7:72:62:d7:29:41:84:d2:f3:b1:e1:
18:df:f4:9b:db:77:66:76:fc:47:be:bf:76:09:15:76:18:0a:
8b:5d:57:a1:22:6f:75:46:c0:e1:6e:8e:e2:2b:e9:57:a9:19:
61:7c:a7:08:44:bc:f2:3c:9e:27:3f:f4:61:f5:2f:39:4b:17:
2c:4a:10:fe:80:22:57:4c:27:14:38:d0:5b:01:ee:c9:47:69:
ea:57:43:f7:9a:98:fc:81:39:d7:97:b4:26:98:7f:4b:31:ef:
54:5e:d9:03:0b:c6:b7:82:b3:0b:2a:44:3c:77:10:ba:29:f9:
eb:8f:48:58:4f:9d:d3:61:f7:fd:8a:c8:66:dd:ed:ef:3d:39:
f2:74:ac:b6:54:d7:9d:32:b3:65:84:27:6d:1f:9e:a0:7a:47:
f7:fa:93:70:52:72:b1:52:65:78:9f:11:1d:5c:c9:6d:6b:ab:
10:d5:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:11:48 2024 by rpki-client on console-ams.rpki-client.org