Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/mGk61MDA9rOPNmdyRo4ER7fN9UM.roa
File: mGk61MDA9rOPNmdyRo4ER7fN9UM.roa (raw, json)
Hash identifier: wzW8Yhm5aRxm70zHbOwVs8OXdJPhuPk/ePt9QTGN/hU=
Subject key identifier: 98:69:3A:D4:C0:C0:F6:B3:8F:36:67:72:46:8E:04:47:B7:CD:F5:43
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0191237DAE8C98282854DAD1F3B6B3155D8E
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/mGk61MDA9rOPNmdyRo4ER7fN9UM.roa
Signing time: Mon 05 Aug 2024 17:02:04 +0000
ROA not before: Mon 05 Aug 2024 17:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49363
IP address blocks: 185.13.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:7d:ae:8c:98:28:28:54:da:d1:f3:b6:b3:15:5d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Aug 5 17:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98693ad4c0c0f6b38f366772468e0447b7cdf543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:6f:34:95:cd:af:6b:27:97:03:e8:bc:04:
75:96:31:41:05:53:c2:17:32:3c:98:f0:c0:32:db:
78:bd:35:69:fd:30:47:68:b5:3f:53:76:06:24:97:
19:62:09:0a:17:d2:96:7e:49:72:bb:77:cf:db:63:
6a:2e:6f:0f:a1:47:ea:be:9d:64:a1:d4:d3:a4:7e:
99:fa:1b:b2:ff:eb:03:5a:bc:fb:ae:e8:aa:2d:2b:
ce:b9:82:2a:99:c9:3b:8a:96:c3:c5:e2:9e:51:fa:
ba:23:e5:4f:9e:58:3a:58:51:eb:cd:48:2f:c6:ee:
61:5a:20:56:ca:3b:40:c9:05:1f:ca:b6:bc:ac:02:
06:76:e9:53:ca:9e:21:a7:eb:13:b7:e5:40:64:c5:
c4:6f:79:d0:d1:bd:dc:5f:30:f0:ff:e5:ed:df:61:
1d:2a:28:6b:bd:27:4c:31:10:d3:68:78:0f:71:64:
0a:61:de:6e:2d:4f:8b:3b:92:98:12:f2:37:70:8e:
af:07:79:f6:12:68:bc:f5:c0:35:6c:91:6e:93:90:
45:7a:8a:3d:03:e3:69:18:9c:00:ad:30:58:93:95:
7b:0e:08:8c:77:93:48:ec:c7:8b:ce:06:1c:11:fd:
97:06:66:02:89:07:db:41:58:2a:6c:78:50:83:7f:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:3A:D4:C0:C0:F6:B3:8F:36:67:72:46:8E:04:47:B7:CD:F5:43
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/mGk61MDA9rOPNmdyRo4ER7fN9UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:7e:88:4c:2e:2f:00:6c:1e:97:40:d2:b1:e0:09:08:c1:6d:
1f:b1:08:4f:53:92:21:99:79:9b:c7:28:88:00:e3:70:4a:d3:
3f:8d:f3:7c:5f:cd:aa:a7:3e:7e:79:d0:32:99:08:b9:c7:fb:
18:8b:8d:b6:79:fc:ec:e9:ee:f7:c5:65:2e:dd:a3:ac:b0:1f:
c6:e9:1d:bb:71:83:6b:44:62:41:ff:d7:f6:6a:87:11:cc:8f:
9a:ff:a2:28:74:c1:c3:31:71:35:a5:2c:7b:dd:28:5f:48:8d:
95:f9:f4:45:79:a2:b6:b6:93:ca:b5:d8:51:23:ee:01:ff:40:
05:67:99:3e:fe:7e:5d:07:f6:0c:a5:14:f1:db:7b:43:b5:9b:
83:38:22:c1:85:e5:d9:ad:4c:b1:b3:5a:9d:70:7b:b0:57:bd:
32:63:d6:f6:d7:6b:94:79:0a:a1:74:b7:cf:d6:4d:a3:aa:c3:
3b:57:e8:2a:e0:b3:8e:76:99:b3:ad:fd:d0:b2:eb:00:7f:10:
5f:5e:53:e5:20:e3:7f:98:d5:8e:93:10:66:1e:f6:3e:a7:3a:
1e:0b:f1:67:05:ae:8a:ee:2d:e4:27:cb:8b:e4:6b:fd:ae:e5:
08:4d:ef:bb:2e:e9:95:89:ce:39:08:3e:eb:5a:ff:74:e6:96:
01:75:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:34 2024 by rpki-client on console-ams.rpki-client.org