Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/RMJbck06ozASWXzXp8RVohpaoSU.roa
File: RMJbck06ozASWXzXp8RVohpaoSU.roa (raw, json)
Hash identifier: 28NO88DEEDhVOi2hTTKtu4HfAKkRJVzcGjWUuRkCNN0=
Subject key identifier: 44:C2:5B:72:4D:3A:A3:30:12:59:7C:D7:A7:C4:55:A2:1A:5A:A1:25
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018DD03AA854805570EFBA8B3131C5F683F6
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/RMJbck06ozASWXzXp8RVohpaoSU.roa
Signing time: Thu 22 Feb 2024 09:52:01 +0000
ROA not before: Thu 22 Feb 2024 09:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197628
IP address blocks: 185.92.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:3a:a8:54:80:55:70:ef:ba:8b:31:31:c5:f6:83:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Feb 22 09:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44c25b724d3aa33012597cd7a7c455a21a5aa125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:77:90:7a:78:37:3b:19:dc:33:a9:e8:5e:
cc:15:05:15:73:8a:b1:94:85:f7:9e:45:9d:45:a9:
4a:fa:ac:2c:d4:f4:4e:bc:5c:aa:06:3e:7e:1f:b6:
23:e7:41:8d:77:4c:02:0c:d6:b9:d2:24:9f:e1:5f:
60:98:a3:2b:98:d8:72:63:d4:24:28:64:27:79:20:
7c:80:d8:a9:61:89:c8:d8:62:06:f4:37:fd:51:a6:
6d:db:b2:37:68:6e:97:d0:18:f8:a7:04:69:63:1e:
c9:a2:4e:d8:ab:3e:87:18:23:d3:78:d1:a5:1e:48:
33:c8:b6:b9:a9:96:af:83:19:d8:ce:f1:85:1b:c4:
6c:0b:d0:dd:f1:4a:00:0d:9a:3c:86:66:d2:3d:ba:
54:d8:14:1e:ba:b7:a3:c4:29:a5:04:2c:04:fd:92:
c4:5f:ca:4c:73:80:75:c8:e9:07:ca:42:18:15:5d:
ea:88:02:78:61:47:83:23:da:8d:00:b4:66:ce:61:
3c:87:a5:4a:98:da:b6:f9:8b:fc:7d:03:17:e3:3d:
39:ce:6f:bf:37:a7:45:85:7f:c2:9c:be:a5:7f:26:
2f:50:45:25:47:43:dc:a1:87:bc:a2:f2:36:3d:5a:
a5:10:35:db:b1:6c:12:f6:ba:58:8d:b2:9b:62:96:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:5B:72:4D:3A:A3:30:12:59:7C:D7:A7:C4:55:A2:1A:5A:A1:25
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/RMJbck06ozASWXzXp8RVohpaoSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.144.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2f:8b:ff:96:c7:74:4a:e1:f8:b3:9a:56:41:55:57:cd:8b:
51:51:b9:ed:6d:ed:08:6b:dc:eb:61:75:79:80:9f:d5:8a:bc:
4b:66:91:40:46:c6:65:f8:71:55:8e:18:e3:ab:1a:0b:3a:ed:
e9:7a:2e:ea:88:19:9e:a2:0b:5e:4b:fe:e7:19:3f:86:e4:42:
ae:4a:b7:8f:7a:63:a8:f7:5b:55:9d:2c:64:0a:2c:5f:e1:4b:
e0:ac:48:15:7c:18:cb:fd:73:28:cd:de:5a:4d:96:d7:7b:87:
e8:ee:51:9b:f3:2d:3c:fa:2b:aa:ef:41:48:61:fe:65:01:40:
96:f9:be:52:7c:fb:96:98:c7:ff:aa:79:ed:23:67:ba:fa:2c:
d6:7d:b5:e6:a6:83:86:f3:a2:69:05:fd:ea:52:30:7c:99:4d:
d5:fd:c5:b2:1d:b2:4c:d5:0d:17:71:f3:16:81:f8:11:6f:a1:
d6:c0:6f:f8:b5:80:0b:08:5a:d5:5e:95:3f:49:39:91:a9:70:
12:05:05:61:30:65:94:7a:23:e1:cc:b1:f4:fa:d8:9f:3d:d4:
f8:8e:d8:1c:79:1a:3d:e5:c8:b1:e6:23:9c:a0:92:1a:75:c3:
5e:c2:dc:7c:ad:b0:0d:13:61:81:17:23:61:53:6a:f6:f3:ba:
1a:df:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:05:03 2024 by rpki-client on console-fra.rpki-client.org