Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/mHoziKYODC1WDr3vs1v0UHhbE5o.roa
File: mHoziKYODC1WDr3vs1v0UHhbE5o.roa (raw, json)
Hash identifier: dn9+7noIw04V7EE7CXVbSbthUvwmgWCI0XiW+73w2Ak=
Subject key identifier: 98:7A:33:88:A6:0E:0C:2D:56:0E:BD:EF:B3:5B:F4:50:78:5B:13:9A
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018CC9BCBEB32B53C772B7D41304507A05DC
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/mHoziKYODC1WDr3vs1v0UHhbE5o.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61046
IP address blocks: 91.193.16.0/23 maxlen: 23
188.119.148.0/23 maxlen: 23
193.42.37.0/24 maxlen: 24
5.149.250.0/23 maxlen: 23
185.81.112.0/23 maxlen: 23
79.141.170.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
2a01:8640:7::/48 maxlen: 48
2a01:8640:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:be:b3:2b:53:c7:72:b7:d4:13:04:50:7a:05:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=987a3388a60e0c2d560ebdefb35bf450785b139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:ee:e2:35:74:4e:0f:98:af:ff:25:31:cd:
59:e1:90:f9:ac:94:27:61:ae:19:74:78:9c:55:4e:
65:56:5b:24:97:c2:11:71:e5:72:7b:04:8a:88:8c:
95:3a:04:5f:42:b9:57:f8:f0:d1:21:40:6d:d0:af:
11:a7:87:77:22:16:21:04:a3:c0:d9:4e:d2:04:89:
4c:ee:20:34:5b:85:f7:64:08:06:9b:1b:b4:71:12:
ab:96:4a:07:3a:86:66:cc:d9:87:18:09:17:ac:c7:
d8:04:82:58:ee:fe:61:5d:51:35:42:2f:9f:70:62:
f4:43:8d:7f:7c:f0:e7:35:a8:2c:f6:aa:31:46:f7:
90:6a:01:2a:c6:ba:9f:3d:e6:fd:72:b6:ba:7d:22:
67:86:51:67:ea:e1:11:00:0a:00:8e:fa:cd:92:62:
41:03:4c:b2:24:0f:d3:d0:6e:c2:e4:81:e5:ae:b8:
64:6d:0f:1e:a5:f3:32:d5:5c:58:a4:b4:26:d8:43:
ea:8d:1d:7d:4b:9e:bb:89:9a:9b:82:8e:e7:fd:35:
91:3e:2b:af:b3:59:22:46:8b:db:bd:eb:d9:d1:d5:
f0:e3:5e:7d:3c:10:0b:18:e0:c9:e9:d5:2c:44:67:
db:5a:92:37:5a:de:0a:5a:ff:85:28:14:5e:b3:82:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:33:88:A6:0E:0C:2D:56:0E:BD:EF:B3:5B:F4:50:78:5B:13:9A
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/mHoziKYODC1WDr3vs1v0UHhbE5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.250.0/23
79.141.170.0-79.141.172.255
91.193.16.0/23
185.81.112.0/23
188.119.148.0/23
193.42.37.0/24
IPv6:
2a01:8640:1::/48
2a01:8640:7::/48
Signature Algorithm: sha256WithRSAEncryption
22:52:74:3f:cb:ed:7f:7b:cf:f7:eb:4e:e1:85:d7:b4:46:4d:
05:86:4e:d5:cf:4a:42:ce:16:36:4e:bf:96:8d:9d:eb:62:2a:
ae:49:18:83:0d:0a:17:61:4f:0a:77:a4:f5:ec:b4:2b:bf:cc:
d7:b2:94:cf:29:bb:30:82:3a:77:2b:3c:b2:9f:66:a9:45:ac:
ba:f2:8e:59:51:29:a6:4f:53:74:a1:ee:2a:19:37:eb:1f:01:
25:6f:9b:b6:3a:ee:9c:ee:66:58:d5:31:76:13:5a:5c:68:6a:
67:a2:29:2b:20:ee:c4:8d:17:8d:d7:53:b7:be:5d:e4:d2:32:
4b:b1:47:17:b7:58:21:8b:ac:d3:ac:9c:69:10:cd:0d:9b:ac:
e1:4e:48:a4:27:0a:6c:14:f7:4d:32:1c:9b:79:54:1f:a9:f9:
7e:5a:fb:c3:95:c8:f5:98:e3:3d:66:91:69:fd:49:85:2d:d2:
97:0c:f0:5c:2a:81:96:1e:a6:81:22:be:cb:c3:40:1c:ca:06:
4e:1a:76:80:1d:d3:b0:6e:a3:16:e7:36:7b:1f:fd:02:af:21:
e7:9b:5b:67:a0:c5:3f:35:66:ec:ba:76:43:d2:9c:50:46:73:
89:3d:99:3b:63:f1:f7:05:19:41:f8:f6:4b:2a:61:0b:69:28:
1f:9f:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 08:37:56 2024 by rpki-client on console-fra.rpki-client.org