Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/mbLpksk5lTtge2F7Eb0EyrCB4zI.roa
File: mbLpksk5lTtge2F7Eb0EyrCB4zI.roa (raw, json)
Hash identifier: 1zD2W4z/ZPxeJc6MacfK7bHnQm20ZnoDkwjWHMvLDdw=
Subject key identifier: 99:B2:E9:92:C9:39:95:3B:60:7B:61:7B:11:BD:04:CA:B0:81:E3:32
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 018CC2DAB1D0ED423753A391A8804438182E
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/mbLpksk5lTtge2F7Eb0EyrCB4zI.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60558
IP address blocks: 185.62.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:d0:ed:42:37:53:a3:91:a8:80:44:38:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b2e992c939953b607b617b11bd04cab081e332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:f7:b4:2f:4e:3f:65:f6:86:ab:50:63:63:
d8:f3:0a:4f:49:59:d2:b6:2c:01:92:99:bb:62:15:
56:9b:92:7a:b5:59:9f:2e:56:08:59:26:a6:c4:8a:
7b:3b:1f:65:2a:56:0e:d2:1e:c3:26:40:d6:9f:37:
ec:cd:4f:7f:6d:a7:46:17:8f:86:43:3e:fc:78:41:
33:b6:ce:fe:bf:4c:ad:6d:a9:d7:68:1b:85:6b:a7:
77:8b:0b:47:82:b1:89:7b:b9:38:17:a4:80:de:d2:
fc:bd:4b:eb:c0:ed:52:e0:d6:ad:8a:3f:6d:6e:f4:
50:03:3c:cc:25:21:6a:6a:c8:ab:29:af:1e:37:88:
fc:ef:ce:bc:b9:36:77:f3:3f:3b:71:41:f8:73:b6:
c5:22:45:51:eb:e0:fb:8f:8a:1a:61:0d:f1:d7:f7:
a1:df:e2:03:39:98:9e:04:48:69:61:49:f5:13:aa:
e9:e9:32:ad:1a:64:c8:05:27:90:60:55:34:2a:de:
f2:0d:23:9f:62:92:6e:c3:aa:af:68:22:12:43:c6:
50:c4:a0:db:58:75:c7:11:4e:fc:6a:bd:3b:21:4e:
94:34:7f:ce:e6:e8:e2:66:3c:0c:ee:79:fa:48:8e:
9e:df:53:0d:39:83:1b:c1:29:9a:d2:e3:91:ae:87:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:E9:92:C9:39:95:3B:60:7B:61:7B:11:BD:04:CA:B0:81:E3:32
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/mbLpksk5lTtge2F7Eb0EyrCB4zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.36.0/22
Signature Algorithm: sha256WithRSAEncryption
84:61:ab:84:53:61:24:3f:ed:79:db:85:c6:ef:4c:23:4d:dd:
5e:a1:94:09:d0:45:8a:52:da:ee:f5:bd:36:d0:0a:92:b8:15:
df:56:14:a9:68:dd:1a:8b:b3:52:03:0e:14:fa:af:72:44:31:
82:3a:3b:bf:cb:7f:43:94:2d:8f:21:7f:41:8a:9d:65:44:65:
5f:92:6e:a2:06:0d:62:6e:f0:dc:7e:bf:59:39:77:59:eb:3e:
d4:13:be:45:9f:5b:48:bd:42:dc:db:c6:38:ae:fa:54:4e:63:
fe:03:69:60:ae:06:7c:f8:0a:7b:92:c6:b0:b5:82:ac:ea:d2:
59:30:cc:ec:b1:1d:69:15:32:e4:07:4c:37:65:21:bd:0f:8b:
ef:65:1c:dc:12:38:d3:2b:12:cd:4e:9c:84:38:7a:b0:b9:30:
ac:cf:1f:48:89:05:16:18:85:b0:b1:29:66:86:2b:37:76:1b:
5a:14:ba:27:65:e9:a7:60:fb:51:5c:9c:c9:44:88:ac:b5:8f:
4a:66:e5:64:53:f6:c2:e1:30:c0:8a:21:f6:98:5f:09:f1:09:
64:77:70:c0:73:2b:2e:a3:2a:a2:c8:69:af:76:2e:b8:a7:08:
3d:b0:9d:3f:7c:33:62:80:3f:bf:70:6a:41:4d:1d:50:ab:ba:
e5:63:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:16 2024 by rpki-client on console-ams.rpki-client.org