Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/M2nikU2_ob3TrfT3Z_qEa6Q0Zjk.roa
File: M2nikU2_ob3TrfT3Z_qEa6Q0Zjk.roa (raw, json)
Hash identifier: ek9XbmqurInmRsAPTOcM9IeC2920xB9u8RngH9w1FvY=
Subject key identifier: 33:69:E2:91:4D:BF:A1:BD:D3:AD:F4:F7:67:FA:84:6B:A4:34:66:39
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 018CCA29B564E65BB8FE433E7E6FE47D58DD
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/M2nikU2_ob3TrfT3Z_qEa6Q0Zjk.roa
Signing time: Tue 02 Jan 2024 12:33:00 +0000
ROA not before: Tue 02 Jan 2024 12:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57717
IP address blocks: 185.173.235.0/24 maxlen: 24
185.216.140.0/23 maxlen: 23
185.216.143.0/24 maxlen: 24
2a0b:b7c0::/30 maxlen: 30
2a0b:b7c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b5:64:e6:5b:b8:fe:43:3e:7e:6f:e4:7d:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 2 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3369e2914dbfa1bdd3adf4f767fa846ba4346639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:43:e4:5f:54:80:4e:c4:09:5b:10:9c:3e:
a2:c8:17:4d:24:c5:33:11:70:39:ea:54:23:89:0d:
48:ec:4e:8c:ab:cb:30:a5:d9:b2:76:d2:86:64:56:
cc:f2:52:b2:a8:88:4f:e9:e2:e1:47:18:47:1e:f9:
d2:62:30:34:64:3b:9f:5e:5a:26:bd:77:93:78:4d:
c9:fb:3b:36:b1:2e:7d:56:46:48:40:a8:ae:42:19:
c0:d9:ac:3e:32:ca:4b:fc:59:50:b7:2c:49:0e:36:
a3:02:18:d4:60:84:a6:f3:5b:64:6c:c9:b5:f0:34:
89:55:41:ab:96:ab:45:92:c0:7d:42:19:4e:56:fd:
c2:6c:1a:0c:7c:b4:ff:9c:12:9b:f7:2b:83:ed:64:
28:dd:d0:23:2b:99:64:95:da:72:85:81:2e:6e:ed:
89:ac:9b:03:ee:12:32:02:72:c4:86:4d:23:cf:94:
60:35:35:ed:1e:07:d5:6d:32:26:0c:d6:4f:79:d5:
7e:72:c0:a0:f0:80:fa:d7:3f:18:e4:7b:d7:cb:50:
d3:69:62:d3:a0:a0:ca:7d:e0:4e:a6:02:bc:18:07:
2c:9c:5c:26:40:66:8b:a7:97:80:a8:a4:47:75:e1:
86:74:64:de:b2:a1:69:8d:33:be:53:2d:60:a6:d6:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:E2:91:4D:BF:A1:BD:D3:AD:F4:F7:67:FA:84:6B:A4:34:66:39
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/M2nikU2_ob3TrfT3Z_qEa6Q0Zjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.235.0/24
185.216.140.0/23
185.216.143.0/24
IPv6:
2a0b:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:98:ed:2d:3e:27:94:bf:49:ed:30:89:e2:6a:f9:3e:14:cf:
6e:60:a8:3a:40:16:40:42:75:ac:3a:5f:bc:79:0e:f7:b9:77:
57:5a:9f:76:48:5d:b6:3c:d8:af:0e:81:80:3d:4b:e8:06:8f:
51:ee:96:5a:2f:35:ab:64:be:f4:c5:df:46:b2:c5:7d:5c:0d:
e0:1a:03:cd:b8:03:22:2a:a0:2f:af:d3:30:26:39:dc:e6:16:
87:61:3e:87:33:ea:01:60:bd:a5:e7:1d:46:37:94:91:62:f7:
1c:2a:da:2b:36:a6:8d:33:8c:e9:ee:b2:ac:77:5a:2c:eb:c9:
29:a9:c8:6f:e7:27:45:24:77:31:3f:98:14:e1:17:de:75:d1:
2e:aa:ff:81:d9:1e:e4:37:6a:52:6c:e1:7d:85:0a:a5:80:c5:
4a:66:01:37:d9:80:0c:64:35:67:54:c4:2f:ff:e1:ba:e6:9c:
51:02:09:c8:0d:46:1c:5c:e3:d7:dd:1f:97:4a:a8:34:7b:61:
30:4b:d7:cc:75:0d:e8:8a:8c:2d:bc:a8:d8:99:c7:02:43:d0:
56:4c:87:56:12:b1:c1:34:73:61:05:cc:28:c6:50:f4:98:57:
78:05:13:95:de:36:e1:1f:63:5a:23:f2:d2:cf:92:ef:1d:3b:
5d:0d:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 08:12:15 2024 by rpki-client on console-fra.rpki-client.org