Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/SoaYqMlwnnuW7P3r2VTCzGav3Ok.roa
File: SoaYqMlwnnuW7P3r2VTCzGav3Ok.roa (raw, json)
Hash identifier: dyG1vdq16Z9wbNSxap7zpcNhnmavbisZYD/afBpR1h0=
Subject key identifier: 4A:86:98:A8:C9:70:9E:7B:96:EC:FD:EB:D9:54:C2:CC:66:AF:DC:E9
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 018CC348D197683FE31FC2F36839D15F331B
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/SoaYqMlwnnuW7P3r2VTCzGav3Ok.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198518
IP address blocks: 185.238.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d1:97:68:3f:e3:1f:c2:f3:68:39:d1:5f:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a8698a8c9709e7b96ecfdebd954c2cc66afdce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:86:25:3d:d5:4a:be:60:f3:8e:74:65:f7:
7d:de:50:68:6a:88:59:47:93:67:e4:fd:78:15:90:
c9:09:d3:64:b4:54:25:0e:2a:f4:38:a0:88:7b:67:
eb:38:26:84:17:42:9a:3b:cf:67:93:ef:ee:7c:ea:
b6:b0:c9:39:98:b6:68:b8:c0:f2:cb:7f:01:68:b7:
95:d0:2a:7c:85:38:ab:f8:65:24:13:ff:dc:6d:9a:
6b:97:3d:4f:51:6d:b7:4f:d6:bf:c8:4c:c5:e5:e7:
9f:6d:5c:9c:ad:8b:3f:7e:f6:82:d9:a8:e6:13:98:
7e:51:4a:49:b4:d8:c5:ef:98:2f:ed:f1:d9:04:b7:
b7:65:7d:52:8e:1c:80:6a:c9:74:74:9c:0c:c4:d5:
aa:91:7e:42:68:42:0d:96:74:15:d1:ad:93:2e:e0:
b6:be:84:be:37:51:37:c8:eb:d8:20:7f:5c:8d:8f:
d2:63:ab:2a:56:34:80:f5:7d:0e:6e:42:1b:5d:a6:
6e:b9:b3:f7:b4:fd:59:c0:5b:e8:98:54:f2:3b:72:
14:76:1b:56:b0:bd:ba:91:41:8a:c4:92:20:48:b1:
e0:fc:94:c6:ab:e2:9e:b2:6d:22:2a:74:9c:4c:28:
14:fa:ac:4e:d8:f8:1b:04:04:32:bc:1f:aa:c1:53:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:98:A8:C9:70:9E:7B:96:EC:FD:EB:D9:54:C2:CC:66:AF:DC:E9
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/SoaYqMlwnnuW7P3r2VTCzGav3Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.60.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f0:c5:72:53:08:d7:b1:d2:e0:b5:d5:e0:50:5c:6e:be:af:
b2:40:4f:b4:32:d2:c8:ec:be:00:a4:61:4f:be:59:93:fc:66:
25:24:c9:53:c2:a3:ec:3b:86:9b:15:e8:57:90:d6:1c:79:fa:
34:f2:56:50:2f:5c:15:61:a9:7b:38:36:9a:3d:58:51:75:58:
d7:29:c9:96:b1:92:96:e3:c3:5c:a7:f8:47:2f:26:98:7f:34:
c1:03:51:3a:75:b1:12:37:0a:a0:cf:af:68:f8:31:2a:33:d1:
89:6f:c2:0a:eb:7f:0d:6c:db:38:a3:e3:2f:39:3c:c2:4d:0a:
2e:2b:da:c6:04:ef:10:d1:7d:20:8e:70:5a:84:82:1c:26:b2:
92:00:d3:45:a7:fb:10:88:b6:8d:90:7c:ec:df:ed:5f:df:f7:
a7:e3:b0:66:ca:11:4e:2c:09:dd:a2:29:fa:84:b6:37:ed:fa:
a5:6c:fa:62:da:39:78:a5:39:31:01:40:49:8d:16:f9:16:32:
2d:8f:d2:df:55:3e:20:c3:dd:ce:f5:d5:83:ec:9c:cf:4b:03:
80:7c:21:d2:94:b2:f0:d8:3a:fd:f2:83:7f:11:e2:6d:a6:d0:
7c:f5:b3:62:66:e4:f2:b2:eb:d9:50:b8:c8:70:14:2f:3f:d0:
31:8c:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:56 2024 by rpki-client on console-ams.rpki-client.org