Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/mf6lbFxmfNJZGO9LD453AtgsXLE.roa
File: mf6lbFxmfNJZGO9LD453AtgsXLE.roa (raw, json)
Hash identifier: /akBcF8p+qqDnXIQl/LmDRlrY4kwlyHQnCYkz1JZQ2o=
Subject key identifier: 99:FE:A5:6C:5C:66:7C:D2:59:18:EF:4B:0F:8E:77:02:D8:2C:5C:B1
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 018CC3B69C5088A0B20736CDB4A547EF1963
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/mf6lbFxmfNJZGO9LD453AtgsXLE.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204280
IP address blocks: 185.107.186.0/24 maxlen: 24
185.107.186.0/23 maxlen: 23
185.107.184.0/22 maxlen: 22
185.107.184.0/23 maxlen: 23
185.107.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9c:50:88:a0:b2:07:36:cd:b4:a5:47:ef:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99fea56c5c667cd25918ef4b0f8e7702d82c5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:23:26:81:be:57:d7:91:ac:ae:14:b6:bc:
8e:47:24:b1:26:cb:63:42:61:36:e2:9e:6c:ae:d9:
54:22:ca:3f:55:b3:8a:8f:50:28:0d:dd:4a:b7:7e:
4e:59:55:09:89:df:55:9f:b0:0a:f3:0b:15:43:b1:
03:95:c1:5e:d9:a7:c3:77:dd:de:4a:7f:99:74:f4:
45:c5:a1:89:11:17:c0:83:51:71:c6:9f:5e:82:f5:
37:68:c6:8e:39:59:1b:99:7a:69:57:ff:b7:9e:f9:
cc:57:20:94:6e:15:d6:d0:20:2b:eb:2d:ec:59:33:
bb:46:14:97:c8:af:5f:17:10:2a:0f:1b:8c:3d:cc:
37:7e:53:42:63:14:12:5b:f7:6e:75:8c:63:47:85:
74:85:12:28:a4:f7:32:4d:66:29:6e:9e:c7:14:7f:
7f:21:ae:bc:49:47:76:91:22:1e:e0:80:68:47:6d:
32:24:96:2f:e0:53:d5:31:62:bb:4c:d8:7f:16:43:
de:ec:b0:01:a0:cf:2a:ff:50:91:f4:a5:2a:13:ed:
69:06:c3:69:aa:dc:07:b8:16:34:4e:f2:e9:6d:ac:
67:78:d4:6b:e9:b5:5c:df:1a:28:46:80:97:f1:4a:
50:7f:d9:a5:3b:62:bb:5a:01:20:65:aa:22:f7:28:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:A5:6C:5C:66:7C:D2:59:18:EF:4B:0F:8E:77:02:D8:2C:5C:B1
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/mf6lbFxmfNJZGO9LD453AtgsXLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:e9:60:0e:7f:5e:80:d1:b6:19:0f:6f:61:03:86:ed:5b:17:
bc:e6:cb:1e:a9:af:21:2d:f9:5e:4f:72:94:70:bb:f6:f0:d2:
bc:ef:39:94:15:68:1f:c7:49:e8:0b:76:9e:31:80:e7:71:cc:
8f:cf:0b:90:76:05:83:03:c2:03:27:e3:53:f6:0f:65:06:4a:
59:14:86:a2:d7:aa:f7:e6:40:db:a5:98:f9:8e:99:7a:5f:43:
4d:93:c6:42:d0:0d:a8:82:27:49:73:7e:09:6d:dd:de:70:9a:
dc:8f:5f:bf:d1:a5:94:8f:3f:fc:0b:f2:8c:00:98:77:1d:78:
99:d8:49:c1:7c:da:ff:d3:76:ba:b7:d5:7c:29:89:a3:2e:af:
65:fc:17:f5:ac:3a:5c:a8:0c:fd:9e:c7:1a:b2:25:49:66:de:
2d:80:41:40:c0:1b:41:eb:74:61:c8:0f:30:a8:c2:6f:80:02:
9c:75:bf:b9:a0:dd:72:04:83:4c:14:e3:23:12:33:42:b5:65:
cb:72:71:5f:f5:23:4d:e2:34:13:a9:9b:4d:e5:da:09:2d:be:
06:c9:30:78:46:45:e5:12:16:bf:ff:98:9b:b6:85:75:68:0f:
ec:18:74:b2:74:c3:cf:36:46:ca:97:4c:78:4a:a4:1f:0f:6c:
82:fa:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:05:43 2024 by rpki-client on console-fra.rpki-client.org