Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/MLdJw-0YukUdL0-UR2h4D7d_ebU.roa
File: MLdJw-0YukUdL0-UR2h4D7d_ebU.roa (raw, json)
Hash identifier: iJnK4GGgr6ooGCOj6iZYSfxWdcAdmNf14OKpff/2+QU=
Subject key identifier: 30:B7:49:C3:ED:18:BA:45:1D:2F:4F:94:47:68:78:0F:B7:7F:79:B5
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 018E192381E50EBB24EE3BDDA4BA804B3F7D
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/MLdJw-0YukUdL0-UR2h4D7d_ebU.roa
Signing time: Thu 07 Mar 2024 13:39:01 +0000
ROA not before: Thu 07 Mar 2024 13:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19994
IP address blocks: 185.194.86.0/24 maxlen: 24
185.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:23:81:e5:0e:bb:24:ee:3b:dd:a4:ba:80:4b:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Mar 7 13:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30b749c3ed18ba451d2f4f944768780fb77f79b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:34:88:c1:81:9c:5f:ff:eb:d6:91:2f:ac:
5b:0f:21:73:ea:86:0f:ad:0f:5c:d1:4a:68:d4:bf:
0e:4f:ad:b0:b7:95:32:40:65:b9:50:fc:59:5b:f2:
7c:ef:ed:da:3b:b8:74:5a:9a:bb:9a:9e:bb:81:5a:
20:55:14:e4:fd:0d:44:ce:4e:66:0b:4e:14:19:16:
7e:44:9d:df:fc:83:fd:bc:42:6c:68:61:36:a3:a4:
c6:6c:a9:10:65:3d:6f:d0:64:83:df:31:21:5e:07:
dc:0b:67:ad:4f:49:88:00:98:05:b6:ca:ec:b0:28:
91:04:69:bb:3f:e7:55:7f:ef:ec:01:28:ab:6d:4e:
0c:00:8e:4b:43:7a:ff:42:b8:0e:16:e2:87:a1:05:
5a:d8:73:92:6f:26:78:9c:e8:e1:3a:1e:15:58:35:
6b:06:62:71:ac:a8:82:4d:25:e4:77:97:23:cf:16:
31:38:5f:dd:7a:b2:03:ec:db:97:19:f3:18:59:83:
a9:66:e0:c6:eb:fc:81:d6:eb:aa:a9:f1:8d:a4:e0:
90:78:55:87:c2:23:ae:46:da:30:db:5d:de:ac:6c:
32:67:35:c5:0b:49:f8:26:59:d0:e2:c0:78:29:35:
d1:b9:22:1f:bb:b9:e3:9c:da:6b:a7:30:65:72:5e:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B7:49:C3:ED:18:BA:45:1D:2F:4F:94:47:68:78:0F:B7:7F:79:B5
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/MLdJw-0YukUdL0-UR2h4D7d_ebU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.86.0/23
Signature Algorithm: sha256WithRSAEncryption
51:67:55:2a:fe:a9:8c:10:55:e7:a7:03:d3:02:d5:49:14:a9:
b0:81:65:64:0b:91:58:a8:00:c5:9e:96:41:60:d3:e9:29:0f:
8d:4a:1b:52:72:4b:47:61:eb:c1:a3:30:9b:fc:6d:b8:36:e7:
1e:34:30:56:86:dd:6e:ef:5a:4f:73:9b:a5:73:bd:42:09:aa:
dd:ca:b8:67:3b:16:72:82:97:11:65:aa:0e:3b:c3:95:35:9c:
2b:e2:05:ae:86:33:30:7a:62:29:4a:9c:ed:ce:56:bb:b8:69:
05:28:89:53:ed:0a:c7:c1:ca:ba:c2:2c:01:b3:47:cb:fd:34:
7e:70:96:22:9b:1a:c2:24:52:17:09:1e:2f:b2:f7:76:f9:60:
22:ae:e9:99:39:c9:0a:3d:fa:73:51:48:3b:28:dc:d3:7a:96:
12:4b:a3:ec:5b:d4:d7:00:57:77:e0:9c:f1:fa:c9:ae:66:09:
36:18:6b:16:09:70:8f:d2:30:4b:c1:f5:ff:d1:dc:8b:bf:73:
fd:d4:ad:be:7f:75:f4:5c:3a:dc:b0:10:37:a0:52:dd:58:99:
e3:2c:43:7a:6c:3a:3a:4a:ac:2d:53:92:1b:24:36:5d:0c:bb:
3f:03:fb:94:7e:5c:cc:64:e5:78:03:c5:c2:a7:b2:ef:a5:0c:
a7:57:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:40:50 2024 by rpki-client on console-ams.rpki-client.org