Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/mzTjLAaVTR7KPgbdh9yp62rwrek.roa
File: mzTjLAaVTR7KPgbdh9yp62rwrek.roa (raw, json)
Hash identifier: yPrlnv+3IpvC0lSpjxCUsjTL5uafrf6XFD1HIDIfa28=
Subject key identifier: 9B:34:E3:2C:06:95:4D:1E:CA:3E:06:DD:87:DC:A9:EB:6A:F0:AD:E9
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 018F0F2C3E1F4CF9BE52AAC410BE36CEA436
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/mzTjLAaVTR7KPgbdh9yp62rwrek.roa
Signing time: Wed 24 Apr 2024 08:15:08 +0000
ROA not before: Wed 24 Apr 2024 08:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:2c:3e:1f:4c:f9:be:52:aa:c4:10:be:36:ce:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Apr 24 08:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b34e32c06954d1eca3e06dd87dca9eb6af0ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:56:fd:f4:56:a9:93:04:87:23:c6:df:da:
50:00:9d:2a:68:1a:6a:c6:97:2e:f3:6d:c7:08:df:
fc:f4:7a:1d:8b:66:33:f4:f7:bd:08:1e:ec:87:80:
79:d4:10:80:d0:1e:6a:50:a8:db:d7:9a:a3:1d:b0:
4f:66:4a:af:03:6d:c6:16:87:2f:9a:9b:01:d4:38:
1c:6c:ed:f0:34:cf:f8:89:b7:d7:f5:05:4c:f9:95:
d9:56:29:e9:ff:df:55:15:01:a4:03:90:3b:90:f3:
00:c6:46:bc:63:28:b7:e8:0b:79:99:e9:c9:6c:c7:
7f:59:84:24:57:0f:ef:74:34:5a:9d:41:8d:0b:99:
6e:09:e7:d5:5d:01:b0:c8:c6:71:cc:f2:fb:48:1e:
b7:f1:83:a6:da:bc:e2:ae:9b:6d:b5:ff:57:37:8d:
9e:7d:c4:b3:74:ed:ad:27:51:65:ba:68:29:bb:dd:
c8:d8:de:f3:b6:19:c8:16:d4:e1:8b:63:f5:dd:4a:
4b:ce:a8:2c:d8:2a:46:ab:67:5e:36:12:19:f9:55:
88:cb:de:4a:1f:08:06:90:14:79:d6:ae:dc:af:21:
d2:43:e2:90:5e:2b:6b:eb:af:74:0f:f8:09:ce:39:
7d:79:4a:fe:70:bf:7f:61:dc:35:cf:a0:b5:75:f6:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:E3:2C:06:95:4D:1E:CA:3E:06:DD:87:DC:A9:EB:6A:F0:AD:E9
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/mzTjLAaVTR7KPgbdh9yp62rwrek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c3:9d:27:bc:e2:00:02:00:f2:68:c9:e0:b4:22:48:5d:39:
fc:7c:60:f7:b2:09:95:d9:65:a9:8e:35:c7:6d:5a:c7:ab:8d:
2e:b9:cb:d6:4c:30:99:a8:bf:80:b2:fc:64:40:86:1e:d2:88:
6e:34:60:e1:62:9e:21:c9:6c:70:08:2d:e9:7f:74:f1:24:43:
62:94:b7:14:af:26:2e:be:be:da:51:10:5e:a8:15:21:e0:9f:
8f:54:09:40:2f:65:1c:c4:35:f4:c5:0b:5d:b1:f3:f0:c4:73:
d2:68:2f:76:bc:5c:f4:23:07:16:b1:b8:2e:b1:3c:76:bf:73:
15:46:2e:8e:aa:ab:94:b9:93:c7:70:84:22:cb:1a:fc:13:cd:
7e:05:fa:ec:74:1f:e9:2c:7c:47:6d:9d:96:92:f6:03:2a:72:
12:cf:f5:ec:65:a9:09:eb:48:2f:31:40:39:c0:0b:16:8a:4b:
17:fe:f0:7e:d5:4a:36:bc:68:96:71:ba:0b:f2:12:79:fe:fe:
87:b6:8a:e2:1a:12:ad:3f:df:a1:dd:f3:03:b4:4d:d4:90:50:
3b:71:8a:e9:e2:9a:01:ca:da:7a:8e:2d:5d:fc:80:7e:e1:fb:
b4:cd:8f:24:96:89:61:cb:93:0e:81:09:08:ef:51:32:15:89:
2b:a1:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 12:36:38 2024 by rpki-client on console-ams.rpki-client.org