Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/_MkszxUJMo-EmsLyHghcnfzMLe8.roa
File: _MkszxUJMo-EmsLyHghcnfzMLe8.roa (raw, json)
Hash identifier: odSz1kMq/PQZKdIGOxjVeSYZzWPRnaEYFxJV0Bk6kdY=
Subject key identifier: FC:C9:2C:CF:15:09:32:8F:84:9A:C2:F2:1E:08:5C:9D:FC:CC:2D:EF
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 018CC9BAA838808DEB3A526B82B98FB4EC1A
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/_MkszxUJMo-EmsLyHghcnfzMLe8.roa
Signing time: Tue 02 Jan 2024 10:31:42 +0000
ROA not before: Tue 02 Jan 2024 10:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30936
IP address blocks: 185.39.116.0/22 maxlen: 22
82.116.32.0/19 maxlen: 19
82.116.63.0/24 maxlen: 24
87.238.232.0/21 maxlen: 21
2a01:4420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a8:38:80:8d:eb:3a:52:6b:82:b9:8f:b4:ec:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Jan 2 10:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc92ccf1509328f849ac2f21e085c9dfccc2def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:de:f6:fe:8f:65:b3:6c:a9:c6:c0:ea:03:
0a:0c:3a:2e:15:4b:ea:3b:7b:4d:61:b4:04:8b:0b:
19:a2:8d:bd:39:0e:14:dc:38:71:e7:09:65:d2:b4:
bd:d3:d4:e1:b2:f0:93:ea:04:b9:a9:71:a8:a9:69:
a9:dc:8a:12:1f:11:40:91:41:4a:8b:a7:8e:54:f4:
e9:6d:22:98:44:01:28:8d:e7:a5:99:36:54:22:5d:
68:82:42:11:4d:81:28:c3:83:bb:4a:f7:e3:f1:7a:
20:1f:56:9a:00:25:c8:23:fd:80:32:39:1b:2d:bc:
e7:37:1d:b5:9f:b9:66:d1:74:f9:ce:6b:a2:de:eb:
27:8f:9a:a7:5b:8f:92:18:15:70:79:c8:2e:ac:3c:
d1:12:c2:da:99:46:8c:91:32:3b:1e:e0:2e:f1:ee:
26:c6:4b:d2:14:65:b9:4c:63:ca:c9:0a:0d:63:75:
ff:e1:02:2d:da:cb:5a:d7:99:b4:95:e5:5f:00:c3:
db:cf:40:75:c7:ac:b7:12:0c:58:43:78:ee:11:38:
85:cc:4d:4e:8f:28:5d:0c:b0:47:ea:ec:19:f8:73:
a1:78:95:0b:b0:22:72:23:13:73:4b:e3:29:40:bc:
b7:e4:0e:2a:01:07:b1:9f:7b:e3:11:51:5f:19:cc:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:2C:CF:15:09:32:8F:84:9A:C2:F2:1E:08:5C:9D:FC:CC:2D:EF
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/_MkszxUJMo-EmsLyHghcnfzMLe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.32.0/19
87.238.232.0/21
185.39.116.0/22
IPv6:
2a01:4420::/32
Signature Algorithm: sha256WithRSAEncryption
46:b3:b3:ed:04:16:67:6b:34:bf:97:0a:62:fb:ce:74:97:e0:
bf:0c:70:fb:5f:62:13:e6:ba:d2:3e:cc:a6:aa:dc:83:25:8d:
b6:63:ff:33:d6:3a:31:bf:c1:4b:90:d6:75:4a:ce:18:71:52:
5a:b8:0f:3c:96:53:c2:5d:d8:80:93:34:55:84:fe:30:d3:ab:
8f:ea:05:1a:76:f9:fa:99:a2:66:6c:52:fd:01:15:40:65:3e:
af:c0:c9:11:dc:5c:f5:59:1e:52:67:4a:f2:21:01:a7:70:51:
4a:fd:be:38:3e:42:49:57:c8:b8:7d:d1:46:3f:c1:4b:c1:99:
ce:60:1e:44:49:0b:21:ae:c6:90:61:4d:b5:24:ff:dc:0f:db:
8c:6e:b7:74:99:be:50:1c:cf:c6:ea:54:c6:fe:6c:b0:7d:2d:
0b:2b:80:01:ad:39:58:a3:1f:ae:f7:f5:b6:79:b1:ae:e3:1c:
3e:1a:e7:98:ad:09:a1:3e:f9:3c:37:81:a1:47:72:a7:f8:00:
a4:d6:78:d9:4d:02:ee:45:eb:1e:9e:ec:19:53:c0:28:5e:66:
f3:af:1b:1c:fc:92:31:ec:16:56:8d:16:b4:07:37:1c:d9:fd:
ec:64:e6:de:36:71:51:50:49:db:a2:58:aa:1c:06:50:09:95:
42:16:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----