Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mNbj4VLZg3w_9ywCj2zl7s4MhA8.roa
File: mNbj4VLZg3w_9ywCj2zl7s4MhA8.roa (raw, json)
Hash identifier: RfSDKqCcOAj6H0UOUxEwmgsHBGbc3iRiZZRc/rcoV7k=
Subject key identifier: 98:D6:E3:E1:52:D9:83:7C:3F:F7:2C:02:8F:6C:E5:EE:CE:0C:84:0F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E42477DC8E65CEC574E416BEF21CFE4DA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mNbj4VLZg3w_9ywCj2zl7s4MhA8.roa
Signing time: Fri 15 Mar 2024 13:22:45 +0000
ROA not before: Fri 15 Mar 2024 13:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 193.58.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:47:7d:c8:e6:5c:ec:57:4e:41:6b:ef:21:cf:e4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 15 13:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98d6e3e152d9837c3ff72c028f6ce5eece0c840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:5a:77:df:53:45:ba:21:05:b6:27:53:4b:
ae:46:cd:33:5d:a4:e1:1c:87:fd:1f:67:d8:50:47:
e2:de:9e:d9:67:28:81:1b:f8:eb:c6:bf:98:33:d2:
6f:84:92:2f:e5:18:7c:d8:ad:b6:36:3e:11:cc:2f:
e5:58:f4:d3:0f:53:91:84:67:69:47:f0:29:74:ff:
ea:73:7f:ee:fb:f4:b0:56:9a:f3:96:cc:16:c8:5e:
be:8d:8f:ed:69:8a:bf:3d:6a:59:0c:68:a2:37:40:
6c:04:28:e3:bf:ba:00:67:ea:f4:f9:c9:69:da:6a:
fa:4d:5a:ca:75:58:aa:16:c0:30:a6:93:b5:94:54:
f0:51:43:d1:2f:65:02:33:10:77:e5:91:18:83:23:
a7:8a:a1:d0:1a:47:69:84:ad:43:72:ae:4f:41:2a:
bf:f0:24:fa:3b:4d:47:a5:92:1c:f1:49:fb:69:14:
5a:0f:f8:b2:87:46:bb:6c:d6:74:71:7b:1a:5d:85:
57:77:82:46:10:96:c0:aa:17:3b:97:d3:aa:07:26:
1a:37:c1:0d:e7:35:21:6b:d5:97:1a:6e:ff:ac:a3:
56:b6:e1:c7:80:76:8f:8e:41:69:9e:a8:3e:ed:67:
64:c0:5a:b4:8c:b9:ca:76:dc:52:b3:e8:51:b7:e4:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:E3:E1:52:D9:83:7C:3F:F7:2C:02:8F:6C:E5:EE:CE:0C:84:0F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/mNbj4VLZg3w_9ywCj2zl7s4MhA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
92:de:ea:87:0a:e5:fe:92:b8:3c:df:80:d5:d1:09:62:dc:56:
35:c1:04:ed:28:a3:06:7d:88:78:00:3a:e0:42:2a:39:e9:ec:
9a:70:4f:48:50:a9:17:f0:44:ff:20:ab:99:29:71:0a:2d:40:
c4:1c:cd:42:fb:18:88:10:cb:24:1a:42:a3:ae:a5:71:0a:6f:
6d:f2:d0:a9:02:cd:d6:df:e4:35:87:67:50:b6:f4:6e:da:7d:
77:a5:47:0a:ab:37:40:73:6b:12:74:66:3c:c2:68:d4:ee:b7:
e2:f3:7d:a6:5e:eb:20:02:04:ed:f2:d9:7d:0c:05:33:b9:cb:
e1:75:c7:ab:78:0b:32:cf:6a:96:20:fc:ef:31:d5:09:b7:09:
16:48:57:1a:50:5e:33:27:cf:66:54:df:f3:0a:b8:05:06:43:
ab:3c:ad:86:82:a9:71:73:be:41:fb:3b:ac:cd:d3:34:a6:39:
4b:99:0d:f3:35:50:c2:e2:09:db:94:5f:b4:78:7c:aa:33:45:
86:7a:30:6b:7c:9a:34:bc:00:8f:4d:d0:75:3f:18:2e:dc:4f:
37:1a:19:67:ed:4f:8d:42:20:e3:d4:20:68:f1:a9:98:f0:5e:
1f:85:ae:76:72:55:c6:1f:09:16:e8:b5:cc:7c:2e:09:d9:15:
be:29:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:53:08 2024 by rpki-client on console-ams.rpki-client.org