Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mpK6IQAeoTfvAG-d_pHJs9CU-Xw.roa
File: mpK6IQAeoTfvAG-d_pHJs9CU-Xw.roa (raw, json)
Hash identifier: 0iZUMYld7WJcg0E+iGQ4Qs60tP/Ajdx0sDPMedouu4o=
Subject key identifier: 9A:92:BA:21:00:1E:A1:37:EF:00:6F:9D:FE:91:C9:B3:D0:94:F9:7C
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A907866AD143261F667679EE88F94
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mpK6IQAeoTfvAG-d_pHJs9CU-Xw.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31655
IP address blocks: 83.245.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:90:78:66:ad:14:32:61:f6:67:67:9e:e8:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a92ba21001ea137ef006f9dfe91c9b3d094f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:78:b0:b0:23:12:5b:99:f7:c0:cb:87:98:
ea:d6:f4:7a:59:77:27:62:95:b7:7a:99:05:3c:42:
7e:4e:fb:d4:b8:14:7f:b3:e5:bc:cd:dd:6b:9c:8e:
16:27:78:e0:a0:b9:b5:5b:3f:ee:36:2b:f5:fa:01:
fe:00:4a:c5:d9:96:42:5a:5d:74:71:2c:c5:be:ef:
ec:db:d0:0b:ce:fa:c3:45:d0:c9:ed:23:2a:02:27:
70:6a:d8:67:4d:1a:e6:e6:0d:55:2e:59:d6:3a:18:
0b:7b:c0:9b:02:6b:7e:0f:22:e7:4e:00:b7:8d:ac:
4d:32:df:7e:38:eb:8a:32:8e:6e:e8:bb:6a:34:5b:
a1:ae:5e:d3:43:70:91:22:8d:cf:16:fd:03:d9:62:
70:74:d5:98:ec:af:6e:f1:0e:95:c8:46:d4:f2:07:
85:ab:63:0a:af:9b:b5:b1:e1:29:9c:a1:8a:79:38:
3f:3d:d6:15:27:95:e5:d1:eb:42:ec:dc:de:af:f1:
6c:fb:aa:3f:2c:a0:55:a6:c4:00:08:70:ca:3d:87:
fe:89:f4:0d:f8:ad:0e:e2:97:ab:dd:31:3d:4d:4d:
83:96:4e:80:c9:cd:71:79:22:f0:1b:df:59:03:dc:
1f:c1:74:49:86:60:05:a9:f8:8f:c7:63:b4:fd:57:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:BA:21:00:1E:A1:37:EF:00:6F:9D:FE:91:C9:B3:D0:94:F9:7C
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mpK6IQAeoTfvAG-d_pHJs9CU-Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:70:18:1f:39:f5:eb:53:6c:cd:4a:6c:fe:f2:ad:d7:56:69:
05:c3:23:0d:7b:66:06:71:58:95:2f:58:08:07:83:52:ae:95:
75:d6:ac:c4:3f:60:90:bd:ff:3b:54:d4:ae:1a:c9:76:36:5d:
d0:4f:78:a3:34:ef:9c:bb:5d:57:5d:c4:03:e9:9e:81:0c:1f:
fe:41:1e:c1:c7:5e:12:f3:ce:8b:14:ca:89:b3:5f:35:af:3a:
96:30:61:51:25:c3:dc:31:e1:b7:da:cb:97:31:ed:4b:fe:93:
fd:18:c2:7a:39:37:49:c8:01:4d:b4:19:d2:48:b7:bc:23:7a:
ed:2e:6d:e4:01:58:4e:33:ea:97:eb:e1:4d:46:ef:3c:9c:31:
c3:d1:e2:75:eb:47:c1:ff:49:49:8a:51:eb:c8:a9:47:37:12:
3b:df:02:3d:86:55:1b:cd:7e:e3:8d:df:22:cb:78:68:69:6c:
75:d4:03:28:03:d8:08:b8:fa:e1:0e:40:35:82:0b:de:64:df:
92:7d:98:0f:a7:03:40:fe:02:0d:97:99:bd:44:64:90:43:a6:
f5:95:8c:99:36:75:04:36:3f:95:5c:8a:b4:19:60:17:20:25:
23:e6:7f:51:79:d1:4e:6c:22:69:62:da:40:fb:80:44:32:f5:
9f:7f:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:54:25 2024 by rpki-client on console-fra.rpki-client.org