Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/mkXQxSPjZeqy7_QVOXNNW8gvmnM.roa
File: mkXQxSPjZeqy7_QVOXNNW8gvmnM.roa (raw, json)
Hash identifier: 1BpFElbByXzYtn6ZjO2rufom3bvFEtLoShwQpkf9Boc=
Subject key identifier: 9A:45:D0:C5:23:E3:65:EA:B2:EF:F4:15:39:73:4D:5B:C8:2F:9A:73
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 018CC793358691F868FA97376C6E94AAAA7C
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/mkXQxSPjZeqy7_QVOXNNW8gvmnM.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199372
IP address blocks: 185.18.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:35:86:91:f8:68:fa:97:37:6c:6e:94:aa:aa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a45d0c523e365eab2eff41539734d5bc82f9a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:32:7c:8f:59:cd:27:67:81:b3:4e:6d:5c:
78:90:c2:a2:cb:4b:1b:67:af:46:3b:7f:7b:8d:d4:
82:17:cc:46:40:64:67:56:02:11:47:f3:83:42:65:
d0:4f:21:c9:01:79:3e:56:a5:0f:60:a2:8b:dd:d7:
42:e3:fe:df:37:9c:ab:8a:2e:ee:5b:7e:dd:7b:ab:
41:70:0d:11:d8:47:90:22:e5:04:26:a1:85:6c:e9:
c2:f0:e6:da:ae:18:a3:5d:bc:36:2b:75:40:6a:37:
d5:8a:df:c6:67:e5:1e:82:fe:5b:81:f4:dc:d5:a4:
15:b0:ee:90:71:61:85:11:73:01:2b:9a:4d:0a:6b:
9a:9d:50:72:73:c2:f9:37:61:f5:04:03:92:4e:9b:
da:2b:fe:e7:16:58:5a:da:53:48:c5:8e:b4:e2:43:
74:52:1c:c2:1e:76:89:40:88:9f:70:a3:93:7f:33:
0d:0f:f9:91:48:e1:d8:04:6a:39:2b:4e:09:36:5c:
2b:59:2a:5f:33:64:fa:04:25:39:bf:c8:b5:aa:22:
b3:dc:20:2d:ec:11:c3:10:0c:5f:b9:3d:97:66:d4:
16:03:ed:fc:ea:ac:ad:5d:be:5b:cc:8e:71:d9:7e:
1f:35:67:f5:18:c4:28:d7:11:d7:e8:5f:02:9e:6f:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:D0:C5:23:E3:65:EA:B2:EF:F4:15:39:73:4D:5B:C8:2F:9A:73
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/mkXQxSPjZeqy7_QVOXNNW8gvmnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.180.0/22
Signature Algorithm: sha256WithRSAEncryption
78:35:40:5a:67:ca:c3:12:19:c7:ee:50:71:3b:d8:cb:d0:dc:
f0:e0:1e:1c:06:cd:ca:a4:f0:29:0d:df:db:38:b8:da:6e:aa:
e2:1e:e9:f7:4d:b0:5a:ec:26:70:36:d0:18:1f:66:bb:46:4c:
d1:bf:1e:47:f9:14:83:c8:5a:8c:35:b3:3a:50:d1:c4:74:16:
2c:98:70:f6:cc:3a:16:15:c6:4d:31:82:31:93:16:6f:d3:8c:
20:92:10:6b:25:b3:ea:80:b7:57:4c:af:70:9d:19:1c:ff:a3:
4e:1b:cf:ef:05:f5:52:6b:be:e3:a5:a1:05:c5:4e:f5:31:81:
47:c0:97:35:cb:13:b2:89:2f:e0:96:69:6f:99:d3:66:2a:6f:
a4:4a:19:35:7e:e3:b4:b4:e3:17:a6:a7:c3:0c:1f:18:ff:27:
26:85:36:1a:6e:25:87:da:a5:22:33:05:53:fa:c3:cb:46:ce:
93:41:94:3c:95:29:6b:9b:92:f6:19:2a:17:f2:7c:07:c4:92:
19:10:b9:11:f2:90:82:1a:36:7d:a8:ae:66:40:49:c0:f7:ed:
4d:23:5d:bf:c4:b5:fc:f8:f6:f4:db:79:eb:37:94:6a:f0:fe:
6b:92:d3:a7:76:c3:91:d5:24:30:58:f8:e7:b3:4a:c6:e3:66:
37:7a:f1:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzWGkfho+pc3bG6Uqqp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm
M2ZkZjEwHhcNMjQwMTAyMDAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTQ1ZDBjNTIzZTM2NWVhYjJlZmY0MTUzOTczNGQ1YmM4MmY5YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwyfI9ZzSdngbNObVx4kMKiy0sb
Z69GO397jdSCF8xGQGRnVgIRR/ODQmXQTyHJAXk+VqUPYKKL3ddC4/7fN5yrii7u
W37de6tBcA0R2EeQIuUEJqGFbOnC8ObarhijXbw2K3VAajfVit/GZ+Uegv5bgfTc
1aQVsO6QcWGFEXMBK5pNCmuanVByc8L5N2H1BAOSTpvaK/7nFlha2lNIxY604kN0
UhzCHnaJQIifcKOTfzMND/mRSOHYBGo5K04JNlwrWSpfM2T6BCU5v8i1qiKz3CAt
7BHDEAxfuT2XZtQWA+386qytXb5bzI5x2X4fNWf1GMQo1xHX6F8Cnm/gIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJpF0MUj42Xqsu/0FTlzTVvIL5pzMB8GA1UdIwQY
MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt
OTU5NTU5Yjk2Zjg3LzEvbWtYUXhTUGpaZXF5N19RVk9YTk5XOGd2bW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3
LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRK0MA0G
CSqGSIb3DQEBCwUAA4IBAQB4NUBaZ8rDEhnH7lBxO9jL0Nzw4B4cBs3KpPApDd/b
OLjabqriHun3TbBa7CZwNtAYH2a7RkzRvx5H+RSDyFqMNbM6UNHEdBYsmHD2zDoW
FcZNMYIxkxZv04wgkhBrJbPqgLdXTK9wnRkc/6NOG8/vBfVSa77jpaEFxU71MYFH
wJc1yxOyiS/glmlvmdNmKm+kShk1fuO0tOMXpqfDDB8Y/ycmhTYabiWH2qUiMwVT
+sPLRs6TQZQ8lSlrm5L2GSoX8nwHxJIZELkR8pCCGjZ9qK5mQEnA9+1NI12/xLX8
+Pb023nrN5Rq8P5rktOndsOR1SQwWPjns0rG42Y3evEp
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:35 2024 by rpki-client on console-ams.rpki-client.org