Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/mqthtOlj-2ww2YY4mPwFEfF1zzg.roa
File: mqthtOlj-2ww2YY4mPwFEfF1zzg.roa (raw, json)
Hash identifier: hhQ6vx/Qjjz6O9Hpp8O8OTt+o4fWvIw5YpEGo/0hFBI=
Subject key identifier: 9A:AB:61:B4:E9:63:FB:6C:30:D9:86:38:98:FC:05:11:F1:75:CF:38
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 018CC4938AFD91DDE5C9C3BDACC339965DB2
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/mqthtOlj-2ww2YY4mPwFEfF1zzg.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8375
IP address blocks: 185.60.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8a:fd:91:dd:e5:c9:c3:bd:ac:c3:39:96:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aab61b4e963fb6c30d9863898fc0511f175cf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:3e:b2:30:94:a6:8f:7a:f5:9e:74:85:f6:
a8:1a:e9:44:1e:e1:f2:88:2b:78:f7:bc:17:71:84:
d0:78:52:ac:d2:14:00:3b:08:1c:b1:0b:7a:55:9b:
e2:33:0a:59:ae:fb:90:0a:b7:04:a4:67:f2:c9:26:
cf:b0:7d:36:e8:68:0e:b0:3c:2d:cc:dc:a4:2f:aa:
b6:ca:44:7a:c2:1f:d1:9a:4d:96:f8:4c:1e:7b:d6:
a9:9e:80:d7:44:40:9d:a9:80:52:f6:37:a8:55:34:
3a:22:e9:a2:96:85:5d:ec:e8:a9:ee:ca:12:e4:ce:
e8:da:e5:9d:e7:27:6c:91:98:af:93:47:7e:f5:29:
3f:ab:59:e4:10:3a:a5:27:27:b8:a8:dc:63:97:f8:
e8:dd:e3:1d:a3:5e:64:63:f4:03:59:ab:b4:a6:b8:
16:7c:e5:9d:07:55:23:b5:57:e6:ca:40:4f:dc:89:
8a:25:a7:10:5b:03:ab:1f:02:82:3a:60:49:fe:70:
93:ac:33:bc:3d:ba:34:01:36:1c:09:62:7a:83:29:
a4:e6:b6:98:11:29:46:66:ef:db:09:3d:61:59:dc:
2c:60:c7:42:89:47:d5:8f:95:97:57:02:14:a8:f8:
08:08:09:21:c1:2e:43:85:1a:5a:31:e2:56:4e:fb:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:61:B4:E9:63:FB:6C:30:D9:86:38:98:FC:05:11:F1:75:CF:38
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/mqthtOlj-2ww2YY4mPwFEfF1zzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d0:a5:ee:f2:69:49:85:f2:e5:54:29:fc:e9:ea:b2:34:b0:
a7:15:a3:5a:8f:ff:48:6c:d3:9e:4c:d4:6c:e9:f0:3a:b1:4a:
60:06:a1:a1:bd:34:e0:2d:bb:27:02:39:08:b4:a8:aa:18:31:
e2:33:fc:d0:b5:90:e4:5a:f5:3e:e0:51:37:17:d5:2b:e3:6b:
bd:7d:62:e3:2e:dd:b2:a8:32:1a:08:13:58:65:bb:57:90:00:
c7:e9:ab:4b:e2:f1:8d:00:62:e1:b2:d9:0c:08:c5:1c:f7:6b:
0e:6c:7c:0f:62:9e:0c:46:38:c3:4c:44:c9:9d:fc:d1:6d:5e:
fe:1e:2d:4c:dc:dd:37:29:0f:3a:7c:8a:b6:13:2d:c0:c6:61:
ad:7b:96:75:e0:1c:f7:e7:f3:71:a2:da:4e:3a:7a:56:2c:b1:
13:ad:77:b4:7c:f2:f4:eb:e2:7f:a5:c8:d8:57:a1:40:65:e7:
92:c4:78:65:88:fb:8c:25:c1:09:56:75:2b:50:af:c0:05:ae:
63:c5:74:ef:16:eb:5c:c9:ab:aa:81:73:a1:fc:da:0d:32:d9:
99:71:11:51:2b:b9:37:a2:1a:cd:df:24:6e:8f:60:f2:7c:91:
40:06:cc:38:c0:e7:21:32:23:6a:89:03:66:9b:58:93:06:80:
23:3d:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 14:02:59 2024 by rpki-client on console-ams.rpki-client.org