Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/mqnhS2G6f9cuAHJGo_YWrriL86g.roa
File: mqnhS2G6f9cuAHJGo_YWrriL86g.roa (raw, json)
Hash identifier: 4HKZzljGfF+4Oqx/OvhnvmG7ASXJCuY2xLPr/n2qm/U=
Subject key identifier: 9A:A9:E1:4B:61:BA:7F:D7:2E:00:72:46:A3:F6:16:AE:B8:8B:F3:A8
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938464C1C3D3E5761E85B79745115A
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/mqnhS2G6f9cuAHJGo_YWrriL86g.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16247
IP address blocks: 185.201.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 17:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:64:c1:c3:d3:e5:76:1e:85:b7:97:45:11:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa9e14b61ba7fd72e007246a3f616aeb88bf3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:9c:4d:8e:9d:d5:f3:3e:e3:a1:23:fd:54:
3b:dd:b4:76:fb:42:53:7a:8e:2a:3e:19:a9:72:e5:
82:87:79:77:cd:de:0f:e4:ef:52:30:d6:8b:fe:ea:
58:c2:96:b3:92:f4:bb:cd:b0:c8:e6:ae:b9:55:79:
db:bb:33:f3:df:48:61:98:52:89:88:d9:5c:62:c1:
0a:b0:3b:42:f0:37:50:03:db:72:72:30:ac:42:7d:
33:1f:b8:3e:0d:c4:91:96:57:85:2a:bb:97:7f:bc:
bf:b6:23:dd:7d:19:06:f0:13:c8:48:04:c4:5a:2c:
9e:fc:c5:89:33:3f:1d:0c:b9:6d:e6:1b:12:e2:8c:
f5:6e:7d:35:95:70:bf:f5:d1:46:37:09:5b:4f:22:
c6:c3:81:27:30:f5:54:e1:1b:a9:6f:cf:67:7e:96:
ee:ef:f7:d1:11:f0:a6:1b:3d:f9:5c:25:c5:56:67:
18:9f:b9:58:4d:4d:12:01:18:b5:07:35:02:0f:ac:
95:4d:12:f1:c0:cb:39:50:d1:3f:51:9a:24:7c:67:
a7:a1:ab:47:3a:d2:af:75:23:29:fe:c9:9a:16:03:
ee:fe:89:68:ba:ba:b2:10:67:73:e1:4c:33:cf:51:
55:a4:ba:eb:ea:8c:f9:af:d8:0d:4d:fa:16:52:93:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:E1:4B:61:BA:7F:D7:2E:00:72:46:A3:F6:16:AE:B8:8B:F3:A8
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/mqnhS2G6f9cuAHJGo_YWrriL86g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.42.0/24
Signature Algorithm: sha256WithRSAEncryption
80:55:52:d2:8d:eb:fa:97:b4:43:70:1a:89:e3:cc:7a:af:fd:
75:8e:1e:31:15:0d:c8:d9:a4:bc:31:1b:89:a0:40:7c:ea:78:
1f:73:d6:08:a3:2e:fa:24:8e:b3:df:ac:fe:25:89:59:f6:4c:
be:91:dc:0e:2b:db:07:55:70:db:f2:3e:0c:8e:f8:a3:42:34:
6a:df:3e:9c:71:3a:97:be:01:d5:3d:25:20:88:4d:4b:4c:85:
bd:8c:23:e4:f0:3c:ae:7c:d2:8b:f5:85:bb:99:9b:2f:c6:2c:
93:0d:82:61:90:af:82:45:11:cd:d7:a4:27:77:a5:a0:96:f6:
a7:a3:8b:6f:2b:ee:c2:ef:33:61:aa:e2:c3:35:22:c0:0d:c2:
d9:19:8d:fe:8a:16:ce:23:e1:5a:0f:37:3c:77:d8:de:63:58:
b9:f9:76:19:24:f9:92:1d:77:73:b8:b1:d3:2c:d4:34:0e:a1:
ee:57:df:db:3b:4c:5a:34:6c:13:0c:33:6c:3c:1f:19:d2:44:
d7:fa:c7:16:1f:8f:40:d6:7a:86:c6:05:9e:b3:fe:87:e7:9b:
bd:f7:06:46:ff:d4:3b:44:4f:02:99:5d:ae:5e:ea:10:5d:0f:
f6:e0:7c:63:f4:04:3d:13:84:7c:aa:64:d6:09:85:9e:ee:33:
a9:89:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 01:03:54 2024 by rpki-client on console-fra.rpki-client.org