Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/MTsNchiM1bA0Fht2i5Rb-FntfEI.roa
File: MTsNchiM1bA0Fht2i5Rb-FntfEI.roa (raw, json)
Hash identifier: MzTX+hzvXqKtWqu2LN24NqLLe+MkIAUKCiOLqju98QY=
Subject key identifier: 31:3B:0D:72:18:8C:D5:B0:34:16:1B:76:8B:94:5B:F8:59:ED:7C:42
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 018CCA99C55E4ADDB386D20FB476DEE2EBFA
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/MTsNchiM1bA0Fht2i5Rb-FntfEI.roa
Signing time: Tue 02 Jan 2024 14:35:24 +0000
ROA not before: Tue 02 Jan 2024 14:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.184.172.0/23 maxlen: 23
185.184.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:c5:5e:4a:dd:b3:86:d2:0f:b4:76:de:e2:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jan 2 14:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313b0d72188cd5b034161b768b945bf859ed7c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:ee:d6:66:71:8d:c8:f1:67:6f:5c:3c:5f:
5c:02:00:cb:e0:77:03:ef:41:f8:fb:a8:a8:90:20:
67:6f:b7:c3:8c:98:e7:9b:94:9a:73:35:0d:be:ea:
6e:da:f8:58:a0:c8:bc:91:82:34:c0:9a:70:99:11:
3f:39:8c:14:45:90:13:f2:9e:f1:84:18:87:5c:9e:
51:e6:44:fb:9d:ee:39:65:b6:be:1e:b0:5b:13:aa:
f4:66:6a:e3:63:80:4a:35:34:b3:ff:fa:a4:d8:ab:
a0:8b:a1:67:8c:07:f8:46:4c:18:db:28:f4:da:62:
c3:f8:9d:68:cc:88:5d:07:d6:ce:44:9c:24:e1:2c:
6e:4c:45:8c:61:b1:94:c7:2c:38:ee:b5:b6:30:96:
a8:b8:6d:4b:a3:cb:78:6e:af:3c:ab:f3:49:dc:31:
42:d7:13:f7:6e:fc:e1:ba:00:52:89:b0:28:fa:c7:
34:df:1d:f4:12:11:d7:84:0c:02:7a:e0:09:3c:95:
5e:49:a5:ed:7b:ec:0a:f4:d2:01:23:b7:e3:3d:50:
89:53:79:2c:33:2a:f9:56:75:c2:dc:43:22:89:3b:
c4:3f:80:93:6d:2a:86:61:27:22:ec:ef:0f:46:a9:
25:91:c6:3c:61:eb:25:82:95:c8:ac:d2:bd:28:dd:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:0D:72:18:8C:D5:B0:34:16:1B:76:8B:94:5B:F8:59:ED:7C:42
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/MTsNchiM1bA0Fht2i5Rb-FntfEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.172.0/22
Signature Algorithm: sha256WithRSAEncryption
94:ea:07:ea:04:e4:77:73:d9:9b:49:8b:a3:24:c7:c2:e8:91:
ce:d3:fc:0c:ae:2b:63:a0:df:5f:07:d4:f7:92:81:9e:9d:2a:
e8:3e:f5:9d:80:69:87:45:ae:05:a7:3d:94:1f:a6:88:09:c0:
42:56:72:2f:27:f6:15:3e:af:2a:a9:d5:ca:8f:fe:ae:c5:50:
44:1a:5d:c7:e1:33:13:49:c5:50:48:98:14:fb:20:9a:69:b6:
32:10:5b:ad:43:f6:2f:71:7b:f2:53:a1:d1:b4:a3:98:ab:7e:
0f:24:d6:dd:22:80:92:58:5e:73:d3:0b:c3:fc:8f:de:1f:6b:
16:f6:5f:ad:cd:6e:e4:25:d4:06:3f:80:6e:cb:55:32:61:3b:
13:82:7d:3e:89:f5:c2:91:41:1f:78:fa:53:20:92:f9:5b:c6:
0c:da:45:f5:05:ad:d6:cf:16:09:cf:58:3c:68:23:21:f1:93:
f1:ed:49:cb:43:f3:23:9b:37:b1:f9:30:a6:47:c2:e9:64:d2:
e5:98:49:39:45:b0:9a:6c:8e:5b:c5:c7:58:5c:bf:8a:e6:6d:
24:ec:d5:c8:69:96:c9:9e:21:54:cf:86:99:35:27:cb:6a:f7:
be:0a:cd:20:6a:77:f1:cb:c0:14:9c:2e:d1:34:18:88:fd:80:
b1:a0:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:16 2024 by rpki-client on console-ams.rpki-client.org