Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M8y_N6CM4TBfDDERGbz23hokSbo.roa
File: M8y_N6CM4TBfDDERGbz23hokSbo.roa (raw, json)
Hash identifier: cf1EMPAFRFCW1NdD9/w1dkFm5EtoTBzQahmaaWF3D/I=
Subject key identifier: 33:CC:BF:37:A0:8C:E1:30:5F:0C:31:11:19:BC:F6:DE:1A:24:49:BA
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAC039B7AD2D2DFFE6E4FADFE31CD7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M8y_N6CM4TBfDDERGbz23hokSbo.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42006
IP address blocks: 185.210.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c0:39:b7:ad:2d:2d:ff:e6:e4:fa:df:e3:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33ccbf37a08ce1305f0c311119bcf6de1a2449ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:a0:57:de:c0:7f:56:16:c4:e6:25:ef:41:
d0:85:b8:0e:93:9b:c5:20:19:b4:8e:87:74:5a:0a:
d3:0d:5c:4c:3a:ed:52:05:d6:7e:26:48:e7:5b:a2:
3a:20:ff:58:ab:b7:f6:d6:b1:2f:92:c9:ed:ca:c7:
37:1c:f4:73:8a:78:8a:dc:06:3c:f3:d9:15:88:97:
1b:b8:18:c3:60:ea:56:1b:55:98:b1:ec:d1:f6:7c:
90:e4:3e:29:a3:20:b4:d0:ed:c9:a7:03:b1:5d:aa:
e5:ec:a8:62:f0:3f:c0:4d:03:ca:1f:85:6f:65:e1:
03:77:4e:cc:17:76:34:39:b0:1a:f3:e6:f6:5b:3f:
ff:ae:60:83:a0:14:7c:1b:04:03:7f:aa:d0:a2:e1:
cb:e5:e6:07:da:8e:c9:8a:1b:63:c0:3e:34:d1:5a:
03:0b:3a:5c:fd:b4:22:0e:06:f7:4a:63:16:bf:38:
08:86:92:f8:60:1c:da:8a:0d:b2:49:42:9d:40:56:
dd:c0:b8:d9:f4:b1:ee:15:80:c6:c1:32:8b:46:1f:
92:9a:60:b1:1a:62:37:30:f6:06:47:33:70:69:8d:
f2:f7:18:3b:a2:3d:e2:78:71:04:f0:3d:9f:0a:e4:
4d:2c:60:47:0f:91:b0:78:09:3a:14:0e:a2:d9:d6:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CC:BF:37:A0:8C:E1:30:5F:0C:31:11:19:BC:F6:DE:1A:24:49:BA
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/M8y_N6CM4TBfDDERGbz23hokSbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f4:06:c1:f1:c8:92:19:93:21:08:45:84:3d:84:4f:ce:2a:
04:00:93:ed:c9:94:10:f1:dd:60:1e:4e:6a:05:8c:8f:5b:b7:
b0:ba:0b:19:c7:7f:4f:59:2b:ba:f3:bf:35:dc:37:6a:e8:ab:
f6:c9:97:b7:51:a2:17:64:ba:c2:52:f4:db:b8:6c:ef:ca:76:
0b:95:7e:3e:7c:db:71:05:77:05:4b:d1:52:5a:0b:fd:2e:44:
04:74:8d:d5:6d:0f:c2:00:29:af:e5:a6:94:71:60:3a:bf:b1:
fc:d9:33:e8:3f:b3:62:d4:9d:2d:cd:d7:95:a8:af:11:e8:51:
00:ab:ba:e7:8c:86:ff:46:4d:9a:92:7a:c7:a1:05:dc:43:77:
cf:4c:b8:32:4e:24:f7:98:a1:74:32:06:e8:c1:bf:0a:d8:a0:
06:9f:29:75:1a:67:37:cb:c0:a9:52:af:d3:ca:90:96:b8:53:
04:d4:77:85:b1:80:d8:fb:44:83:bc:b4:81:88:44:ea:0a:37:
4d:a1:d1:fd:81:da:69:64:e3:c5:56:51:9f:41:34:02:e8:0a:
51:09:e0:27:54:63:fd:33:79:bc:7a:5a:67:4e:8c:4d:15:26:
71:62:54:82:10:af:ae:b9:0f:41:ef:99:0d:8d:51:8f:8c:55:
9a:30:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:28:13 2024 by rpki-client on console-ams.rpki-client.org