Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/mBndtjISTFqlWDikolGRav8t160.roa
File: mBndtjISTFqlWDikolGRav8t160.roa (raw, json)
Hash identifier: PaFvMmKwijkVg7eLYTZRZP7sapX1PvumrouSl3L+g4s=
Subject key identifier: 98:19:DD:B6:32:12:4C:5A:A5:58:38:A4:A2:51:91:6A:FF:2D:D7:AD
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 018CC8DE9C3D8EE679ED8EDCDF5E37E39AFB
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/mBndtjISTFqlWDikolGRav8t160.roa
Signing time: Tue 02 Jan 2024 06:31:21 +0000
ROA not before: Tue 02 Jan 2024 06:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:9c:3d:8e:e6:79:ed:8e:dc:df:5e:37:e3:9a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jan 2 06:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9819ddb632124c5aa55838a4a251916aff2dd7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:fa:b5:72:38:9e:d7:bd:bb:e5:57:5e:e5:
2a:51:22:e2:68:0d:8a:da:8d:4e:ee:fc:5b:91:d9:
47:6a:ce:d9:2a:f2:13:1c:fe:2a:76:d8:aa:21:14:
f3:f1:50:03:38:52:56:d0:a9:10:3a:71:72:5a:fa:
6d:9d:e1:db:9a:8a:db:4a:cd:29:53:e6:ab:48:bd:
7b:4a:fa:fa:42:4e:fb:b8:85:4c:68:46:06:17:44:
79:68:75:4e:07:9e:4f:cd:5f:bb:1a:77:4e:e0:84:
84:22:a9:34:4f:13:8b:88:d5:3e:e4:62:b1:a0:61:
98:84:2e:de:5e:aa:ca:24:f8:17:5c:cd:e3:f8:e7:
25:e5:48:c8:60:c0:27:1f:67:d5:d2:70:15:c4:29:
01:68:a9:51:f8:82:d6:8d:5c:4b:53:1c:31:60:3d:
4f:c0:eb:0b:39:cd:7e:03:fa:e2:1b:60:1a:c9:f7:
ec:c8:5e:51:ec:33:4d:3b:f0:c7:ee:81:53:2a:ee:
7d:37:e6:b2:e8:ce:78:20:a4:43:35:fd:cf:d7:77:
3f:e0:f1:76:e5:2a:bb:3a:40:fc:97:2d:82:ab:69:
7d:e0:e3:85:f1:e2:72:22:39:60:2d:51:8a:f5:03:
90:3d:31:4f:79:19:7e:0b:e5:66:c8:cc:bb:3e:67:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:DD:B6:32:12:4C:5A:A5:58:38:A4:A2:51:91:6A:FF:2D:D7:AD
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/mBndtjISTFqlWDikolGRav8t160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
06:87:20:e8:f1:c8:49:5a:22:48:22:3d:31:c9:da:09:b3:80:
67:66:3a:de:fa:c6:45:34:a3:01:5a:2d:92:d7:21:0e:08:c2:
31:92:e3:6a:e1:78:dd:2e:a0:e4:2f:1f:ad:27:91:71:62:ea:
99:1d:83:01:67:07:dc:3c:8a:20:45:d4:78:a9:f5:08:cd:23:
19:7e:47:ac:77:b1:b3:5c:d5:59:0b:dc:eb:9f:a9:24:8e:4f:
bb:73:b9:3e:a9:f4:16:89:9c:6b:d2:6c:13:6d:3d:cd:fa:1d:
b0:47:16:29:28:db:e1:d4:1a:33:aa:5a:03:07:76:cb:de:4c:
b2:1c:58:b2:8b:6d:fe:2b:6f:25:ca:4c:5e:fd:4e:89:46:3d:
e4:59:c3:ee:4a:51:d7:63:8d:6d:f6:52:f9:50:41:24:aa:2c:
c5:39:88:1d:2e:6f:de:0f:86:12:28:dc:5f:ad:14:26:13:65:
4f:9d:52:d4:df:9d:1c:8e:b4:c3:a4:6b:92:0d:b7:87:03:28:
09:0f:1e:f1:5c:91:49:ff:3c:47:d4:87:f7:ff:ac:77:da:ab:
d1:d8:46:00:66:48:39:ea:5f:3d:30:a7:2a:77:73:c2:00:bc:
e0:bd:d0:0d:f4:63:96:2e:a1:67:af:86:c4:f7:a4:06:2d:7c:
d4:85:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:44 2024 by rpki-client on console-fra.rpki-client.org