Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/mlyepGde1QkXQLI3PozR6-0BQq0.roa
File: mlyepGde1QkXQLI3PozR6-0BQq0.roa (raw, json)
Hash identifier: tqqc54mT57smm52qHcwqGEivsll9fRnKNCuh4QtSzuU=
Subject key identifier: 9A:5C:9E:A4:67:5E:D5:09:17:40:B2:37:3E:8C:D1:EB:ED:01:42:AD
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018CC6B910F3493719EC1CD5F4B6A828C377
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/mlyepGde1QkXQLI3PozR6-0BQq0.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60051
IP address blocks: 185.141.8.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:10:f3:49:37:19:ec:1c:d5:f4:b6:a8:28:c3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a5c9ea4675ed5091740b2373e8cd1ebed0142ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:19:9b:9d:f1:12:43:25:19:84:48:05:f5:
25:1a:ad:b1:38:25:a2:e4:90:c7:b3:12:b8:36:3b:
db:92:00:95:19:28:b7:ed:a4:1f:3a:3b:3a:8c:4e:
9f:e5:dc:71:df:3f:61:20:88:e8:02:8f:9f:a7:bf:
b5:c2:25:c2:c3:80:e7:27:8d:09:9a:0b:7d:ca:11:
51:78:11:54:27:e9:99:eb:af:ad:91:cb:af:bf:e1:
76:c3:07:d8:a6:01:6b:b8:17:24:7c:1c:8f:c4:f8:
c4:75:4a:78:08:e6:02:17:a1:ad:ae:53:ed:9f:42:
74:94:48:94:81:5b:80:cd:ea:c9:de:77:0e:fe:84:
c1:47:36:11:21:a5:c3:a6:ec:21:66:80:87:06:6d:
ce:7b:d4:4f:a5:91:c8:1d:3e:8b:4a:09:67:4b:3d:
11:60:61:35:d8:cb:18:0e:9d:b9:19:32:f4:9e:6e:
80:56:63:94:2c:fc:2c:ba:a4:d9:14:ff:33:e5:38:
78:00:cf:a7:2b:ed:9f:79:1b:aa:19:ba:0b:d0:5c:
7e:b3:6d:f9:9b:ca:d8:8f:b7:0e:f0:d7:fc:cd:9e:
62:5d:2e:ba:98:f3:db:bd:bb:6d:97:0e:f1:3b:f6:
77:21:86:94:bb:32:e2:45:33:4d:23:b1:a6:90:f5:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:9E:A4:67:5E:D5:09:17:40:B2:37:3E:8C:D1:EB:ED:01:42:AD
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/mlyepGde1QkXQLI3PozR6-0BQq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.8.0-185.141.10.255
Signature Algorithm: sha256WithRSAEncryption
94:80:6a:69:8f:ca:d7:ee:39:01:e0:0f:a4:a3:27:eb:7b:b7:
c4:70:f0:c0:1d:a5:51:aa:d4:88:79:02:a7:d0:d0:ac:c0:cc:
61:dc:9b:25:dc:57:62:43:47:37:8a:9e:b8:3b:51:b2:68:eb:
b6:d1:aa:2a:6b:49:e4:07:54:b1:dd:82:d4:a3:19:6f:77:0e:
be:4a:0d:c7:63:c8:0f:32:5a:0a:dd:aa:6c:45:75:83:5b:f8:
bd:d9:6b:85:a9:8b:58:19:93:5c:5f:fa:da:1d:8d:a5:17:ca:
55:7c:e8:90:35:9d:76:13:f3:22:97:92:3a:e1:25:72:24:79:
35:23:07:ca:e1:1c:af:34:14:39:7c:03:f9:49:fa:d5:65:19:
6e:ed:32:f3:4e:1a:a0:94:8d:4f:69:d1:dc:fc:31:18:e3:d6:
a6:f7:90:c2:e7:69:4c:45:c1:8d:1f:ec:09:85:ef:cc:20:5e:
48:d7:ad:49:75:ea:9a:49:fc:6d:50:c8:71:09:0a:6c:0a:8f:
58:99:50:b3:41:c6:d7:f8:a4:fb:6a:44:8d:65:71:b4:b3:fe:
c8:1c:fe:f3:e4:17:e4:c7:2c:43:90:29:49:ae:b2:85:a9:a0:
61:d7:10:5a:64:c7:77:24:19:4b:2a:23:98:c5:19:47:3c:38:
68:e0:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:04:36 2024 by rpki-client on console-fra.rpki-client.org