Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/mBMlHPxXW6uZp0Ukz9_Swem0Gn0.roa
File: mBMlHPxXW6uZp0Ukz9_Swem0Gn0.roa (raw, json)
Hash identifier: T7b22UQ4uqhnLDmV+wY+yk8P7DR3G4McgEHOFnnPb7c=
Subject key identifier: 98:13:25:1C:FC:57:5B:AB:99:A7:45:24:CF:DF:D2:C1:E9:B4:1A:7D
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 018CC9BC2CC001F9B946E2082B0C23748C21
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/mBMlHPxXW6uZp0Ukz9_Swem0Gn0.roa
Signing time: Tue 02 Jan 2024 10:33:21 +0000
ROA not before: Tue 02 Jan 2024 10:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60395
IP address blocks: 195.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2c:c0:01:f9:b9:46:e2:08:2b:0c:23:74:8c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9813251cfc575bab99a74524cfdfd2c1e9b41a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:f4:35:57:66:4e:fa:94:c3:5d:48:4a:c5:
72:b3:4e:f0:80:06:55:05:d0:1d:31:cf:24:e1:88:
6c:34:f7:30:82:6f:18:9f:7f:ec:08:b4:48:6a:b1:
37:2b:ef:8a:72:c6:16:ea:e5:83:d9:bb:56:cc:fd:
28:14:a8:08:e5:86:f6:74:13:f7:77:6c:15:a5:0c:
9e:d3:17:56:46:7e:ad:8f:e9:90:6c:ac:61:ba:10:
5a:17:22:a0:44:d8:8b:44:fa:db:62:ee:f4:a3:9b:
52:58:d9:5e:60:9e:30:13:50:6c:17:79:e5:ce:a1:
f0:8e:a0:a7:fc:ef:db:38:03:ce:81:6c:58:53:71:
46:ca:47:f0:ad:ae:a9:f7:a4:bc:c8:05:7c:f6:2d:
b6:5e:28:1c:20:0d:de:42:48:7b:03:ca:12:3c:8c:
8a:c6:ca:e8:7e:09:07:f7:aa:79:23:9f:05:d7:c6:
2a:5f:b2:fd:b4:89:33:60:c8:d7:d4:1e:00:56:7e:
74:a8:da:a1:9d:8b:a0:88:fe:17:16:65:43:0a:43:
c4:c1:01:42:1d:ec:3d:7d:97:04:40:e5:19:68:55:
29:39:28:f1:3c:e9:9f:c1:cc:77:69:8b:29:82:b0:
12:5e:87:12:76:cf:1e:b0:95:34:67:77:65:62:1b:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:25:1C:FC:57:5B:AB:99:A7:45:24:CF:DF:D2:C1:E9:B4:1A:7D
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/mBMlHPxXW6uZp0Ukz9_Swem0Gn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c1:01:e5:c1:7b:5d:91:d2:c5:17:b8:e1:8f:85:22:50:f0:
4b:7a:92:26:fb:c1:92:0c:90:0b:9c:b1:c2:62:7b:a1:32:c9:
08:cc:ab:e1:9d:78:ac:b3:87:9e:9b:b8:e8:e0:52:1e:89:b9:
55:6e:92:f5:54:94:9e:a1:d8:27:ce:14:56:76:44:08:82:17:
b6:3e:3a:30:a5:97:10:b3:fd:eb:4d:d6:19:0a:c4:ae:a8:48:
07:43:f9:0b:64:31:3c:ee:c4:07:d8:7f:92:a9:9a:57:6e:6f:
bd:c1:55:e1:70:46:8c:d7:01:b6:7f:5c:c0:d4:2b:2c:36:ec:
47:df:2d:2d:9c:a5:ae:31:87:a4:0d:a3:c0:5e:9d:c9:96:88:
43:36:f1:91:9c:aa:16:17:35:90:f6:26:0d:87:c9:ef:c1:8c:
2a:17:fd:d4:0b:69:19:1c:94:fe:1a:e9:3b:6a:c5:ac:81:ca:
b3:c5:d9:86:28:82:ec:d9:0c:4b:8d:94:75:b7:29:e2:d8:46:
0a:f4:50:8c:f5:7b:6e:e9:45:0d:31:4c:f9:80:25:31:49:00:
2d:b7:3b:ec:3c:c6:9d:c0:78:97:0a:5b:74:a1:20:0a:ee:fe:
c9:ed:84:08:0f:a5:58:9c:d0:b3:bf:da:f7:cd:97:0c:34:7b:
52:22:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:59:37 2024 by rpki-client on console-ams.rpki-client.org