Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/cMoBDPKLMdi3419NSAc7Udti2q0.roa
File: cMoBDPKLMdi3419NSAc7Udti2q0.roa (raw, json)
Hash identifier: bOdk7CgxXeU7+NHvS2lfkjdHi17OUR3Tbm84Oi8GDOQ=
Subject key identifier: 70:CA:01:0C:F2:8B:31:D8:B7:E3:5F:4D:48:07:3B:51:DB:62:DA:AD
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 018CC49381E027AA6D85818654DABC5C9C02
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/cMoBDPKLMdi3419NSAc7Udti2q0.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202787
IP address blocks: 185.137.10.0/24 maxlen: 24
185.137.8.0/24 maxlen: 24
185.137.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:81:e0:27:aa:6d:85:81:86:54:da:bc:5c:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ca010cf28b31d8b7e35f4d48073b51db62daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:87:59:39:f4:1f:99:da:92:7c:b6:66:f7:
68:a5:50:d9:4e:6d:22:4a:5b:bb:01:be:2a:14:58:
e1:d4:d7:fc:eb:0f:3b:af:06:a8:df:77:b8:d3:3e:
b1:01:a7:72:cd:74:90:38:f9:35:c4:78:ee:00:51:
dc:ca:d4:b6:64:57:ec:58:29:ad:5e:86:49:ae:4b:
7f:3a:66:c2:22:bd:50:fe:8e:51:fd:22:cc:bf:34:
a5:8e:5a:c6:62:e5:17:a8:e8:8a:f5:45:de:81:d8:
62:ae:71:96:11:0f:93:e0:14:7e:c5:f6:b9:d6:06:
9f:3f:14:12:e5:3b:b2:94:a1:cf:6c:53:42:47:34:
1a:88:20:ec:51:bf:51:4d:1f:85:31:11:0d:7b:8a:
9d:57:bf:bd:fa:db:6f:7f:78:2b:2d:c6:32:cf:2d:
b9:4b:22:a4:3e:34:e1:ea:c7:52:c3:2e:84:09:4e:
44:76:90:15:15:f1:a9:c6:c0:20:bc:00:e1:2f:4e:
26:46:a7:2e:c5:62:6f:7c:07:24:4d:82:a8:bb:93:
e3:6d:bd:84:b0:a3:8e:18:db:a3:e1:c5:a6:0b:bd:
ed:9d:b8:f8:81:2b:bd:ad:08:fe:42:27:ae:76:79:
7a:c4:c1:a6:76:7a:1e:db:75:2e:c1:12:2d:e8:ba:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:01:0C:F2:8B:31:D8:B7:E3:5F:4D:48:07:3B:51:DB:62:DA:AD
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/cMoBDPKLMdi3419NSAc7Udti2q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.8.0-185.137.10.255
Signature Algorithm: sha256WithRSAEncryption
4a:1f:fa:ec:da:92:5d:76:c6:f2:84:93:df:66:2d:1b:76:af:
25:f1:74:63:2a:2d:b3:29:c8:66:5e:ee:13:66:62:a0:f2:f1:
3a:79:3e:79:fe:f9:57:ed:a9:1b:1c:19:ad:25:b7:be:f5:2b:
40:b9:a0:18:03:7e:53:61:8e:f5:56:07:15:e5:c4:6a:27:ea:
49:d6:ca:a5:ef:11:4a:2a:55:0a:d3:12:77:51:8a:f8:2b:80:
91:f2:27:78:a8:49:b4:4f:dd:de:57:ac:1b:c9:ed:c9:e0:4a:
da:83:81:64:93:66:78:eb:b8:8b:0f:85:c6:0b:11:08:64:37:
ad:34:a8:5c:60:93:10:35:c5:6a:e2:38:b8:63:34:44:22:58:
18:22:48:98:ab:ef:fd:a9:38:b0:9d:80:fb:fe:b7:7b:e3:8b:
5b:02:6b:bb:e9:66:e2:f5:44:a6:c6:89:da:cb:df:e4:09:fa:
33:39:15:9c:ac:d4:32:61:11:f1:a1:7c:a7:8a:c8:c4:db:a6:
e3:c0:0a:f8:4f:f5:e7:2d:90:1e:66:24:91:28:fa:25:6a:fc:
90:5e:90:24:0d:22:db:a5:88:b7:d9:93:c9:15:a7:25:79:e4:
fb:0a:08:27:f2:8b:6d:d4:f0:b3:28:c7:16:78:3f:72:12:a7:
e1:42:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:35:55 2024 by rpki-client on console-ams.rpki-client.org