Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/I06TYaNlwm4t87b-dzPbjyDNyTs.roa
File: I06TYaNlwm4t87b-dzPbjyDNyTs.roa (raw, json)
Hash identifier: 1gKt5Lk9VT552ahKoTvnNCIT+U86Uy+At5jNT//CW7M=
Subject key identifier: 23:4E:93:61:A3:65:C2:6E:2D:F3:B6:FE:77:33:DB:8F:20:CD:C9:3B
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 018FC578D9212A01F98D5BD5C86BF16BFB20
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/I06TYaNlwm4t87b-dzPbjyDNyTs.roa
Signing time: Wed 29 May 2024 17:49:42 +0000
ROA not before: Wed 29 May 2024 17:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 185.231.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:78:d9:21:2a:01:f9:8d:5b:d5:c8:6b:f1:6b:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: May 29 17:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234e9361a365c26e2df3b6fe7733db8f20cdc93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:4b:d1:40:d2:8a:08:c2:4f:3f:91:b8:bf:
99:f0:9e:cc:96:1c:c5:17:d4:e6:08:b3:a3:cb:76:
91:e0:bb:7a:5f:04:c8:3d:cd:09:35:e9:41:c2:08:
6e:3b:2f:1c:c2:8a:b7:8e:00:92:a7:00:5e:b5:ff:
46:4f:d9:40:08:a3:e4:da:f6:de:26:58:e5:c6:81:
e3:6a:1d:03:cb:cc:1f:74:55:4c:53:09:2a:75:56:
a9:00:53:54:9f:07:f8:77:93:22:8a:e3:5d:f5:07:
6f:b3:e5:17:d0:e8:ea:e5:47:e9:dd:1c:13:1d:25:
f9:b9:0d:1a:52:49:56:03:4a:e3:08:d6:85:47:35:
3c:7a:9e:c0:f1:66:75:af:8c:4f:35:6f:85:b3:8f:
e3:37:1e:5a:a1:48:36:66:07:6c:01:00:2c:83:89:
c0:8e:51:79:88:36:27:17:d5:42:54:81:ab:eb:d3:
01:3b:51:de:7a:95:81:57:f6:44:3d:6f:ce:21:c8:
41:e0:0d:8b:83:2f:9c:2b:2d:52:40:4a:3d:8e:ae:
8c:95:3b:ec:b4:1e:2b:80:3b:eb:21:de:31:97:39:
8b:36:da:e0:d0:44:1c:c3:45:06:51:66:3b:9c:8c:
93:6c:9d:3f:8f:48:26:18:e0:6a:62:67:81:80:46:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:93:61:A3:65:C2:6E:2D:F3:B6:FE:77:33:DB:8F:20:CD:C9:3B
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/I06TYaNlwm4t87b-dzPbjyDNyTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.233.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fe:bf:b2:91:c0:18:4c:91:3b:22:2a:11:f5:02:17:4e:25:
fb:61:ed:65:4d:92:70:c2:88:a7:bd:39:d0:45:a9:3b:08:83:
7b:39:0e:98:f5:ac:86:98:b7:0b:32:0e:95:e1:7e:b1:4a:c3:
3b:ac:cf:37:f2:68:b3:0e:3f:09:56:e8:97:8a:44:6e:3f:24:
7d:42:fb:f3:3b:aa:be:01:46:b1:59:03:a1:05:59:99:1c:6f:
86:67:36:bb:c9:8e:6a:af:b2:f5:d8:9d:61:7f:53:c3:e2:0b:
3a:f8:e1:5e:63:42:71:2a:60:43:e4:1b:ba:8d:37:80:44:9c:
bd:4c:d9:cc:ba:5c:08:d7:9e:7b:e0:2d:43:e9:43:77:80:81:
5d:0e:44:9b:1f:ef:bf:20:c3:41:a7:bb:6a:86:85:96:bc:3a:
84:96:85:92:e2:99:f6:14:88:55:17:5d:d6:1c:1e:a7:f6:75:
ff:04:18:91:0a:37:83:b7:1c:8f:6c:6e:09:e4:13:97:5e:4d:
fd:13:1f:7b:10:c6:a6:e1:46:0f:9c:66:bd:16:71:db:a6:39:
50:90:b4:31:71:9f:1f:43:bc:9e:4a:5a:f1:a3:30:67:0d:f7:
c6:8b:91:d5:0c:ec:d1:cf:26:05:a7:43:9c:51:13:ac:aa:38:
5d:84:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:04 2024 by rpki-client on console-ams.rpki-client.org