Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/mrsik_gKF2ShV2XSPkjnBiQ20X0.roa
File: mrsik_gKF2ShV2XSPkjnBiQ20X0.roa (raw, json)
Hash identifier: h5L0nV1CwKh7Jb3n+IufBQpBQNlcreT2RyaBruF0nE0=
Subject key identifier: 9A:BB:22:93:F8:0A:17:64:A1:57:65:D2:3E:48:E7:06:24:36:D1:7D
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01903CE4EE93A0B519BA496E6618261F86B7
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/mrsik_gKF2ShV2XSPkjnBiQ20X0.roa
Signing time: Fri 21 Jun 2024 22:22:34 +0000
ROA not before: Fri 21 Jun 2024 22:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.157.50.0/24 maxlen: 24
185.157.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:e4:ee:93:a0:b5:19:ba:49:6e:66:18:26:1f:86:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jun 21 22:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9abb2293f80a1764a15765d23e48e7062436d17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:e3:8e:41:74:7c:07:be:4e:f4:99:17:05:
9f:47:69:ff:f1:a9:b8:43:64:45:98:88:57:8c:07:
59:5a:92:bf:de:f8:97:0f:53:39:cd:79:7b:0b:93:
c6:a2:6a:4b:34:9b:55:36:23:0b:9e:b9:3e:e3:5b:
7f:ff:3c:38:f3:76:95:e5:76:0b:6c:ee:52:14:d2:
4f:6e:da:04:80:1d:ab:62:0c:8d:d8:52:3f:9c:8f:
8a:b2:db:90:d9:3f:54:7f:da:af:9f:31:94:24:59:
cd:95:fa:ea:86:ef:8b:bd:fc:ec:f3:61:24:ef:44:
2c:10:b9:61:f3:60:1a:cf:08:4d:73:f4:7d:2d:f3:
7c:90:45:d4:43:03:ed:b2:dc:1d:d7:ce:48:2d:ae:
70:bf:84:c8:94:9f:d4:44:0d:ce:a6:82:e6:ca:57:
fd:a2:9a:d7:02:9e:44:07:84:46:9c:5f:71:e1:f4:
2a:18:00:c8:ad:d1:dc:ad:ee:e6:1a:44:3d:ee:e7:
5a:03:27:dc:8f:75:8f:eb:4e:a2:ef:85:cb:17:a2:
c4:20:fb:07:49:02:1e:9d:aa:d4:da:c1:5b:85:65:
09:e3:89:97:e0:10:ad:4d:16:90:d7:dd:f3:03:29:
6a:9b:9e:e8:32:25:b5:14:67:53:28:bb:dd:be:04:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:22:93:F8:0A:17:64:A1:57:65:D2:3E:48:E7:06:24:36:D1:7D
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/mrsik_gKF2ShV2XSPkjnBiQ20X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.50.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c5:f6:fc:11:2c:11:a6:da:25:44:01:b5:ec:02:b0:8f:33:
fa:d8:70:52:85:42:3b:78:16:e7:ea:46:45:8f:7d:04:0e:f5:
2a:a9:34:fe:91:3d:ce:0c:cf:30:7f:94:df:e1:cf:98:6d:ac:
a5:ce:d5:0c:0d:63:9e:b2:66:73:02:89:af:a4:b6:a0:54:75:
e9:1a:bf:1f:e1:a3:18:ca:93:16:9f:98:f1:54:f7:f6:dd:31:
6d:04:00:bb:89:e2:ca:2b:9b:f9:85:81:ba:6d:71:7b:c1:00:
d8:bc:db:18:08:18:2a:b6:e4:7d:e9:12:01:7f:af:1b:77:23:
35:cc:7e:f7:ee:1c:f3:91:9e:84:ee:3f:6a:8a:85:79:50:71:
02:e0:95:a5:e6:b7:77:3e:d3:2f:7e:79:8d:3b:80:b3:18:9a:
21:61:7e:82:c9:3e:6c:e7:5a:69:03:21:37:4d:79:a5:d2:ce:
dd:e2:d1:11:46:bc:fa:0f:be:2d:bd:ea:46:97:45:5b:97:44:
5f:71:a1:01:cd:7f:a5:81:70:e0:1c:b2:d5:dc:62:d0:d9:e2:
22:ef:5f:15:af:28:e1:44:a9:af:ba:bd:a4:86:5a:fa:96:61:
5e:04:4b:dd:61:5c:dd:ee:65:36:43:2b:98:00:d5:2a:09:05:
ea:41:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:52:56 2024 by rpki-client on console.sobornost.net