Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/MS9KtkwHYnszMNlpq_ZNitFbCqw.roa
File: MS9KtkwHYnszMNlpq_ZNitFbCqw.roa (raw, json)
Hash identifier: AvwEIoz/lWRSBVsFlIRKjriS0HpOrrpR0DKWdIOIzs8=
Subject key identifier: 31:2F:4A:B6:4C:07:62:7B:33:30:D9:69:AB:F6:4D:8A:D1:5B:0A:AC
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 018CC4939571872B518D6BFBB013AEE7697C
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/MS9KtkwHYnszMNlpq_ZNitFbCqw.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59883
IP address blocks: 185.67.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 01:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:95:71:87:2b:51:8d:6b:fb:b0:13:ae:e7:69:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=312f4ab64c07627b3330d969abf64d8ad15b0aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:d3:2d:67:83:13:b0:10:b8:33:e6:56:a5:
56:19:41:74:72:a5:67:2c:98:ae:4d:e9:3a:e4:c8:
9f:fa:09:30:9d:2a:9c:94:84:c5:c3:ae:67:cf:24:
70:ee:0f:04:80:67:6d:27:72:ba:a5:e9:e0:10:6c:
a0:58:a7:43:04:21:63:ee:fa:9a:98:fd:b4:92:b4:
e6:f4:61:cb:5c:01:e6:67:9a:d0:ec:d0:81:05:79:
00:a4:fc:47:12:54:74:4d:02:c9:1c:4a:24:c0:ed:
33:a7:7d:35:39:c2:3d:8b:fe:79:29:97:b4:9f:0f:
ed:91:8b:07:07:63:b0:b0:4a:c6:33:ba:65:97:de:
25:68:9a:ce:37:c3:60:a7:97:5e:4c:9d:1f:53:d6:
f7:68:44:6c:31:55:19:ce:38:19:be:2d:9c:5e:b4:
5a:6d:5e:e7:5b:cd:c4:3f:7f:4d:76:1e:42:f3:ee:
ff:7a:da:30:d5:76:e8:e9:79:69:e6:8f:c7:aa:51:
cf:8d:32:ae:27:6e:e8:1c:a7:f3:b8:ec:e3:dc:cf:
f8:3c:ca:17:e2:97:1b:09:1e:7d:ce:bc:b2:6f:b1:
12:73:15:12:93:87:14:a8:d9:cb:d5:40:a5:8c:6e:
95:2c:1f:0a:8f:fe:d8:5a:19:b7:f6:c0:c3:71:4a:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2F:4A:B6:4C:07:62:7B:33:30:D9:69:AB:F6:4D:8A:D1:5B:0A:AC
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/MS9KtkwHYnszMNlpq_ZNitFbCqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.160.0/22
Signature Algorithm: sha256WithRSAEncryption
72:50:9e:79:52:8c:56:33:ae:20:46:0e:0c:80:4f:36:d7:b1:
ee:8d:61:e2:79:f5:3b:f9:73:1f:d0:1c:c4:0b:3b:da:92:2c:
c1:77:9b:44:f6:9f:a7:50:09:f7:88:98:21:b4:08:57:37:b6:
d5:23:17:c0:67:92:b0:64:c1:9a:0d:33:16:1d:f9:c1:13:c1:
e7:59:b5:f9:54:56:38:fa:d0:c5:80:3d:82:10:52:ac:95:5e:
53:56:54:eb:46:33:27:7b:dd:51:e8:6f:02:53:22:37:c9:ce:
fc:22:18:51:a9:6c:c8:f9:b1:7f:28:cf:43:38:17:b2:79:ae:
a2:9e:f2:e6:86:8d:c7:4b:b4:50:cb:c2:d1:8f:a1:fd:71:23:
d4:11:a3:5d:ad:9e:fd:cf:2e:58:c7:3f:c4:aa:a7:e8:33:22:
45:62:6a:a6:c8:13:7b:8f:8e:ef:7f:a1:c6:e7:b9:3d:43:fd:
db:b3:f3:01:aa:a2:e8:55:d1:9b:57:00:c3:a8:2a:d7:c5:3c:
57:f8:2c:d9:46:24:7b:44:52:31:19:9c:87:9a:5d:53:b1:9a:
0e:0c:35:ad:12:34:26:cf:3c:bd:3d:c1:e0:12:e6:5d:77:18:
13:08:d7:81:dc:84:0b:9d:48:7a:76:87:c5:64:bf:7f:dc:e2:
8b:d5:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:08:44 2024 by rpki-client on console-fra.rpki-client.org