Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/sk-64RvVm6CpefBvEKIW3vczuJY.roa
File: sk-64RvVm6CpefBvEKIW3vczuJY.roa (raw, json)
Hash identifier: 7W6DR0K5kk2WVZ4T+J1uEyC0hqzhcmpEUo3AjOm2gPU=
Subject key identifier: B2:4F:BA:E1:1B:D5:9B:A0:A9:79:F0:6F:10:A2:16:DE:F7:33:B8:96
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 018CC86FBC46790E1D76826632C6DF0FB524
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/sk-64RvVm6CpefBvEKIW3vczuJY.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201607
IP address blocks: 185.64.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bc:46:79:0e:1d:76:82:66:32:c6:df:0f:b5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24fbae11bd59ba0a979f06f10a216def733b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:f7:16:f6:2b:0c:0a:84:ce:24:6a:3a:d3:
f6:ba:ef:c2:e1:db:af:08:75:78:f6:a4:b6:cc:29:
0f:2c:f9:95:1c:6c:6c:c5:0f:24:94:ea:88:b7:a5:
e2:86:41:d1:e9:56:0e:8d:c5:7f:ce:88:d3:6c:ec:
b2:06:ef:ab:2b:f1:22:a4:ff:fc:bd:ce:8c:ad:ab:
e7:8a:8c:c2:10:68:74:57:4f:e5:5b:83:95:86:03:
43:9d:59:92:02:26:5b:34:35:38:56:51:a4:54:39:
4c:59:3f:01:b2:a8:82:b0:ef:8d:6a:52:fb:9f:4d:
5b:3b:80:29:3a:61:1c:da:9a:bf:7f:94:46:20:21:
dc:47:2b:74:5e:b9:5e:fe:09:b5:6f:c4:84:f1:d7:
79:4b:86:05:0a:ae:3d:47:c9:15:30:99:26:b8:7d:
d8:4d:82:fa:e1:6a:1b:b4:3b:c7:63:dd:e9:68:7c:
d2:fd:6d:76:81:b9:2e:55:ef:e1:68:4e:be:dc:be:
6f:97:05:58:bd:2b:9a:d1:d3:d9:4f:8c:a7:b6:5f:
da:9e:60:a9:05:3c:fb:18:e0:5f:1d:73:b9:15:11:
46:bd:67:e8:ef:df:cf:24:f4:c0:51:16:00:97:3b:
65:19:1e:0b:20:89:df:57:69:89:1a:89:44:bd:b0:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:BA:E1:1B:D5:9B:A0:A9:79:F0:6F:10:A2:16:DE:F7:33:B8:96
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/sk-64RvVm6CpefBvEKIW3vczuJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.16.0/22
Signature Algorithm: sha256WithRSAEncryption
93:76:0d:36:2d:ba:24:f1:e0:f5:cd:d2:20:51:8f:f6:dd:22:
b7:c1:32:d3:b1:70:d1:55:d0:98:7f:af:8d:da:40:65:b6:37:
69:3f:de:16:ad:0c:78:7e:b7:49:2d:ca:44:24:0d:01:97:74:
ca:6f:98:8e:29:a8:ee:20:06:9a:89:63:31:da:37:da:5c:13:
6e:9c:24:57:5a:0a:e7:b7:07:7c:c8:55:43:64:d1:d8:73:51:
97:11:a4:3e:5d:a9:49:1f:b3:0e:88:43:c8:e5:63:0e:cb:f1:
da:98:86:96:c4:86:40:c0:b8:24:e2:0c:d9:e8:22:e1:43:f9:
09:5e:94:2d:ae:b2:dd:24:f4:1f:43:dd:45:9d:9e:8b:0c:9e:
3b:f1:b4:02:c8:69:90:40:e4:eb:c4:d5:9f:6d:57:40:81:52:
ec:1c:2b:fc:e7:18:2a:75:32:1a:2d:ae:00:24:45:a4:9d:f3:
55:4c:7c:f5:11:a9:a9:af:47:a0:14:63:bc:c7:cf:29:01:43:
66:9b:9f:9a:d9:e2:9d:65:b9:5c:65:cf:2d:af:9d:ff:35:11:
17:aa:a9:99:43:76:84:ee:9d:e4:c3:0c:ab:e5:fa:f8:4d:25:
c3:fe:d3:91:0b:6c:02:47:06:8f:a7:aa:1f:9f:a9:43:11:13:
27:ac:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:19:33 2024 by rpki-client on console-fra.rpki-client.org