Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/mVqfLSeXNFTNgsB8QlVskliaadk.roa
File: mVqfLSeXNFTNgsB8QlVskliaadk.roa (raw, json)
Hash identifier: C1OdYvdglyNVKJZ+m5M1K0PF32XhxTCuv1j4Sas7lTY=
Subject key identifier: 99:5A:9F:2D:27:97:34:54:CD:82:C0:7C:42:55:6C:92:58:9A:69:D9
Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial: 018CC34915D11099F6A031B3AE638D1B75E5
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/mVqfLSeXNFTNgsB8QlVskliaadk.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 185.18.92.0/22 maxlen: 22
89.107.184.0/21 maxlen: 21
2a01:50c0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:15:d1:10:99:f6:a0:31:b3:ae:63:8d:1b:75:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995a9f2d27973454cd82c07c42556c92589a69d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:59:a5:b0:6e:03:e7:e2:45:69:7f:76:4a:
d6:89:9f:76:de:9a:8e:d9:2b:b2:d9:ed:11:a3:ac:
9e:4d:06:79:d4:12:fb:2b:5a:f1:79:82:f2:b1:e6:
55:bf:50:60:5f:9a:4b:d0:d0:e9:1d:50:2e:13:ba:
41:ac:26:c7:19:60:32:84:88:e0:c2:0e:22:bb:cf:
94:2e:71:1a:eb:88:e6:34:6e:53:e4:15:a9:5b:5e:
d2:e3:30:59:85:ee:72:84:87:fd:0f:9f:95:d9:68:
a8:b3:10:18:3e:87:03:89:40:ab:ee:a3:cd:bb:44:
04:a4:cf:f8:70:14:a8:b4:3e:f9:c9:63:e4:ce:0f:
e1:c9:47:70:b7:ef:93:fa:d8:01:09:01:fc:f3:01:
c8:2e:e7:22:a9:af:b9:fa:70:e1:5f:e5:e1:38:c6:
2e:2b:58:d7:a5:51:74:f5:09:4c:3a:a1:9b:b4:d7:
06:0f:88:07:ef:fe:f4:fa:75:47:58:72:42:53:3f:
f0:ae:23:13:97:62:0a:55:b8:94:a7:9d:d4:0a:5c:
a4:7e:88:92:9f:d4:38:31:50:bd:cf:e0:6b:13:0c:
3d:cd:67:05:91:0b:75:f4:49:24:18:05:2c:2e:71:
f8:1a:eb:6d:de:86:c7:f3:98:43:7e:26:a8:39:5f:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:9F:2D:27:97:34:54:CD:82:C0:7C:42:55:6C:92:58:9A:69:D9
X509v3 Authority Key Identifier:
keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/mVqfLSeXNFTNgsB8QlVskliaadk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.184.0/21
185.18.92.0/22
IPv6:
2a01:50c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
48:66:7d:47:f3:0b:0b:26:21:53:5a:9a:4e:0e:bf:f9:cd:6d:
c3:0b:d4:f2:c9:92:82:eb:9e:7b:bc:d8:25:1c:82:da:da:85:
81:9b:21:bc:93:6b:88:54:e3:79:10:fc:31:73:d5:a2:bb:3b:
f7:3e:48:91:fe:5f:51:b3:d3:86:ed:dc:c4:17:68:2e:54:43:
11:98:a1:d4:6a:82:f8:93:83:6b:ea:80:0e:85:7d:46:49:6c:
88:a5:32:f2:47:bf:75:2e:11:16:0c:12:00:a9:06:3c:74:98:
83:80:6b:14:b1:4a:44:e9:e1:4d:7e:68:36:77:62:b7:b6:27:
89:e8:77:75:f4:77:fe:ca:df:59:ef:c6:4a:b3:b0:7f:66:f4:
7c:50:28:6e:ac:2a:7b:f5:66:9b:a9:41:48:4b:82:12:cf:bc:
66:99:45:db:f0:3f:ff:79:47:58:03:31:3f:df:c0:84:a4:89:
a4:db:a4:b0:2c:b9:36:eb:b8:20:0c:9a:c3:11:56:e9:ab:d3:
06:c6:72:5e:7d:5e:62:75:71:a0:9d:8c:99:5c:18:b8:a1:82:
0e:8d:1c:e3:d8:1d:b3:2e:9d:de:c3:f5:54:45:47:24:65:64:
25:fc:d9:a7:bb:66:d9:e2:c2:46:07:85:2a:91:74:a8:a4:d7:
46:3a:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:29 2024 by rpki-client on console-fra.rpki-client.org