Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pMByhVGlYn4u1lExMrPNu_PGBQU.roa
File: pMByhVGlYn4u1lExMrPNu_PGBQU.roa (raw, json)
Hash identifier: OdMgHyTNBXDp41oFTQ5iCHY5C5pmc7yo+39IsSuXs8c=
Subject key identifier: A4:C0:72:85:51:A5:62:7E:2E:D6:51:31:32:B3:CD:BB:F3:C6:05:05
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 018CC7263F37B4631D5A94ED776CB02A00A6
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pMByhVGlYn4u1lExMrPNu_PGBQU.roa
Signing time: Mon 01 Jan 2024 22:30:21 +0000
ROA not before: Mon 01 Jan 2024 22:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43134
IP address blocks: 185.239.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:3f:37:b4:63:1d:5a:94:ed:77:6c:b0:2a:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 22:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c0728551a5627e2ed6513132b3cdbbf3c60505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:d8:f9:40:ff:70:b1:0e:8d:0d:c6:3d:67:
a3:62:c4:c3:80:96:c2:7e:ea:34:e0:bf:2d:56:9c:
db:19:6e:7a:06:97:ef:ae:13:af:85:df:ff:78:a8:
a1:68:a4:5d:a2:38:45:c1:06:a5:c8:59:97:eb:91:
d4:c8:a9:d6:70:49:95:56:bf:fb:de:9c:ea:b8:fd:
25:4d:51:d4:e2:43:f8:7f:c6:16:d3:87:59:5b:ce:
74:90:d6:c1:da:b8:36:c3:eb:69:19:0d:fb:b1:b5:
c2:d1:01:4f:26:6f:12:05:54:71:81:bf:21:2c:bd:
7c:d1:92:b3:89:1e:55:5f:91:50:25:a0:6b:34:ed:
88:f3:10:7a:0a:01:7d:b0:54:e5:eb:ad:ac:e3:5c:
29:29:57:01:54:de:32:e1:5b:a9:18:ff:8a:6e:ba:
78:a2:08:c6:20:da:a6:92:ba:20:4c:5b:05:78:fb:
12:ed:76:36:e0:4e:b5:5a:c7:d0:b3:fe:59:2f:db:
ce:7e:db:cb:5d:66:f4:ff:78:93:de:14:6e:5e:36:
50:71:17:9c:74:c9:83:75:43:e3:63:60:81:be:a9:
47:6f:aa:db:8c:89:17:19:ed:39:f9:10:a5:0e:b0:
5a:b4:61:ae:9c:ec:32:a1:1c:97:75:95:e9:32:4b:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:72:85:51:A5:62:7E:2E:D6:51:31:32:B3:CD:BB:F3:C6:05:05
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pMByhVGlYn4u1lExMrPNu_PGBQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.125.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4a:4a:72:f4:d3:27:b2:b1:f2:56:4d:c8:a4:bc:d8:75:56:
9b:7c:e4:26:10:c7:19:6f:14:c1:14:9b:99:60:a4:6b:f6:38:
01:5a:29:11:e1:13:7f:b6:a9:10:e4:4d:2b:23:b7:cc:8a:37:
5b:c1:f2:a0:ee:47:b5:16:7b:9f:42:d4:cc:dd:74:87:cc:3d:
48:6f:c6:4b:92:e8:bf:cd:ca:f3:4f:c2:2f:d4:f1:36:a6:45:
56:7c:df:9b:59:af:50:34:2c:e6:49:cc:01:aa:4e:58:59:e7:
f0:ac:69:f2:e7:03:94:7c:ec:e1:16:68:1a:23:9f:f7:ba:6f:
8a:0d:70:49:65:2f:53:da:a2:16:7e:15:c6:c2:97:43:cf:df:
13:f3:0f:7e:95:1a:3c:8e:7e:6c:04:d9:5e:1a:be:ae:a4:43:
4a:e4:cc:b7:f0:ea:9a:9a:c4:ab:a6:70:2a:0a:37:b4:80:fa:
3d:39:9a:60:23:06:47:8f:af:06:be:04:50:0c:fa:31:9a:30:
63:5c:4c:1c:21:08:9d:61:d5:36:c1:a9:8e:50:d2:e1:cf:da:
c7:f8:e2:06:53:0c:7c:de:9c:47:1d:da:ef:ae:98:0f:35:c1:
01:46:9d:e8:f9:bd:0f:1e:63:38:94:e4:e4:8b:e1:5e:95:d2:
31:3b:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:13:28 2024 by rpki-client on console-ams.rpki-client.org