Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/mtp4NmRmXG1CW5F4cNnKHgiQQ5I.roa
File: mtp4NmRmXG1CW5F4cNnKHgiQQ5I.roa (raw, json)
Hash identifier: G+5xCocxVDTMEU5rC4QYIRFIrLYQXZItWS20txYmoG4=
Subject key identifier: 9A:DA:78:36:64:66:5C:6D:42:5B:91:78:70:D9:CA:1E:08:90:43:92
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018CC4246C9F9B8F5562A1205638ED7FEB1C
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/mtp4NmRmXG1CW5F4cNnKHgiQQ5I.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13280
IP address blocks: 95.83.192.0/18 maxlen: 24
89.204.160.0/19 maxlen: 24
89.204.160.0/20 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
92.251.128.0/17 maxlen: 24
62.40.32.0/19 maxlen: 24
80.233.0.0/17 maxlen: 24
83.136.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:9f:9b:8f:55:62:a1:20:56:38:ed:7f:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ada783664665c6d425b917870d9ca1e08904392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:47:aa:f4:cf:44:74:2b:56:2a:2c:3e:69:
57:b9:fe:99:cf:e8:de:5a:a6:89:4a:47:cf:65:d6:
ac:6a:a5:da:81:6a:39:34:1f:58:a3:55:f7:00:c7:
91:ae:49:a1:0a:c0:75:fd:a4:80:72:26:2a:e1:a4:
6e:d8:56:4b:11:6c:49:07:c1:e3:5e:4c:79:56:44:
6a:31:31:0e:54:74:2a:3e:b8:2b:c9:1f:0e:4d:aa:
ca:2b:17:ff:47:52:47:69:d4:64:18:6e:d5:04:1f:
be:36:67:4d:80:46:8f:c2:e3:c9:41:63:0f:f4:9b:
5c:21:c1:54:5b:78:46:b4:49:e9:89:47:1d:c1:c7:
17:1a:fd:45:f1:bc:d1:4d:fb:24:29:a3:a6:e0:f1:
ea:d7:c1:c0:3b:cb:ea:44:e1:25:aa:df:ca:19:27:
b8:4f:8b:db:8f:76:89:47:b5:7c:fe:1f:3d:69:a9:
6f:64:5a:be:37:08:dc:f0:31:46:7c:fb:46:aa:8e:
80:ee:30:20:fc:3b:3d:1f:a9:9d:38:3d:88:a6:9c:
e9:1c:c4:62:7f:a3:b9:47:08:d2:f8:0b:25:a8:63:
a1:ae:c5:92:e8:9e:d8:30:5f:31:38:2a:20:5e:a6:
a7:e1:92:cd:c1:35:9c:78:b0:5f:ce:dc:c8:fc:b7:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DA:78:36:64:66:5C:6D:42:5B:91:78:70:D9:CA:1E:08:90:43:92
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/mtp4NmRmXG1CW5F4cNnKHgiQQ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
83.136.40.0/21
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:4c:d0:28:66:ec:c9:82:5d:08:d1:07:1c:c5:24:2a:4e:57:
5b:ee:7f:fa:bd:58:2f:ad:f5:c9:9c:2c:94:ee:33:88:9b:2f:
53:10:91:ea:fe:2e:72:ac:53:c8:0a:0a:62:d7:1f:2e:47:ca:
10:8c:3e:5e:95:f0:13:35:be:2f:28:8b:a8:9d:68:2a:c8:5a:
77:d5:72:13:5f:78:f3:3b:82:5d:3c:6d:ac:8b:1f:7b:7f:ca:
28:66:fb:89:c9:53:6c:73:4f:7b:be:31:21:c0:c2:29:72:70:
8f:ea:60:29:30:b4:17:92:e3:f0:4a:1c:b9:e8:29:e0:e6:d6:
14:29:89:07:b2:8b:1b:00:b6:b4:10:f3:ae:ab:be:49:1f:69:
c9:9a:af:48:6f:42:99:14:24:df:fe:a9:b1:2a:43:b6:e2:1f:
cc:33:dc:b0:e0:97:36:76:03:68:ca:4c:07:c2:fd:a5:c3:85:
e2:d5:86:ff:d3:79:69:fe:3f:d5:c6:99:18:af:15:b9:44:df:
51:b5:e4:c5:51:e0:ff:92:c3:41:49:8e:2d:fe:ab:c6:44:f4:
fd:9c:4d:74:f4:0d:0c:c9:82:5f:4c:22:0d:f8:30:d1:38:3a:
61:c3:ed:d8:0d:d2:6f:5b:67:fe:24:55:15:51:62:28:e6:4e:
be:38:45:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:13:44 2024 by rpki-client on console-fra.rpki-client.org