Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8R95lcDJnPdrrHbHVP-O7ML_mOk.roa
File: 8R95lcDJnPdrrHbHVP-O7ML_mOk.roa (raw, json)
Hash identifier: 1ZqdtB0G2r1LisSbQ3mnv+/eyTsq/6PUyrtC50Yvo7M=
Subject key identifier: F1:1F:79:95:C0:C9:9C:F7:6B:AC:76:C7:54:FF:8E:EC:C2:FF:98:E9
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EC248C4B8B23D335DE9633510FFE14173
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8R95lcDJnPdrrHbHVP-O7ML_mOk.roa
Signing time: Tue 09 Apr 2024 09:55:32 +0000
ROA not before: Tue 09 Apr 2024 09:55:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.233.63.0/24 maxlen: 24
104.238.26.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.49.0/24 maxlen: 24
104.239.50.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:48:c4:b8:b2:3d:33:5d:e9:63:35:10:ff:e1:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 9 09:55:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f11f7995c0c99cf76bac76c754ff8eecc2ff98e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:a7:4a:9f:25:30:e1:48:cb:90:34:45:09:
f2:fd:72:51:0f:06:30:20:14:54:aa:ed:15:d6:80:
70:50:33:eb:bb:fe:0d:89:74:fb:7c:e9:aa:63:5d:
b0:f7:10:57:df:d3:3b:bf:37:f4:46:88:a6:82:0b:
f2:9b:ce:93:16:a3:82:04:e2:23:f2:18:47:9e:7a:
ba:49:50:17:62:74:2a:5e:60:ea:f3:34:1f:7c:91:
00:23:18:9c:d1:31:bc:c7:a0:c5:06:f4:d6:44:47:
44:b2:45:dd:45:94:5f:62:53:cc:56:d2:ce:75:91:
5f:db:3f:7c:f8:ab:9c:8f:ab:73:23:0e:26:2e:83:
ec:13:6f:ba:7e:7d:d1:28:0e:5e:09:15:c8:d0:f8:
90:9e:6d:96:59:36:d0:85:35:61:f2:2c:30:e3:85:
98:47:15:0f:c2:f9:bb:ae:2a:88:28:a7:e3:ae:ae:
52:82:33:1c:32:01:e8:89:3f:7f:75:d1:6d:e5:01:
1e:5e:fd:39:76:5d:16:80:b7:4f:53:15:aa:2f:90:
68:04:3e:49:b5:a5:3c:05:86:72:90:d2:ca:bf:a9:
32:11:52:08:fe:c7:e4:ee:cc:63:e9:c1:b8:8b:f5:
b3:57:b7:96:d8:88:c9:9d:b4:3e:8f:31:27:1d:b7:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:79:95:C0:C9:9C:F7:6B:AC:76:C7:54:FF:8E:EC:C2:FF:98:E9
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8R95lcDJnPdrrHbHVP-O7ML_mOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.60.0/22
104.238.26.0/24
104.238.29.0/24
104.239.47.0/24
104.239.49.0-104.239.51.255
Signature Algorithm: sha256WithRSAEncryption
9a:da:14:b2:f3:1d:18:28:57:29:60:83:54:8e:d7:8f:de:b8:
b0:c7:f7:3d:02:c2:79:cc:df:61:4e:90:ae:57:11:48:4b:56:
60:bb:76:1b:7b:2c:08:74:d9:40:21:22:fb:9d:b9:2b:63:75:
e9:65:e1:2e:fd:5d:00:2f:c1:df:89:5a:75:8e:aa:43:29:0f:
80:42:a4:23:1d:31:d3:e2:45:5d:97:fd:48:8b:a4:36:d9:49:
4d:da:fc:f2:4a:67:1b:b4:09:15:b4:3d:1b:5a:db:b0:a8:13:
6c:49:b2:66:a7:2b:d1:5c:b6:26:67:2d:80:bd:76:df:c4:30:
7b:02:d0:ca:70:09:96:25:71:27:96:07:b1:90:47:65:41:c3:
d0:7b:3a:9e:55:60:19:ce:a0:ae:16:9d:9e:45:43:e3:77:a7:
d2:0b:b5:45:f7:c6:9f:51:b6:85:44:7c:fb:98:f4:ba:0f:2d:
f3:1f:d0:2f:bd:0d:b2:5b:92:cd:27:c0:ee:bd:ec:91:a4:95:
68:a0:24:c8:83:28:e8:70:bf:0c:1e:2b:4c:80:24:b2:66:fd:
97:db:de:c1:47:73:3c:17:54:94:af:9b:4a:a6:37:1c:34:52:
49:b8:77:ea:4a:25:93:82:e8:e2:45:1e:45:98:ce:53:c4:9a:
47:63:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:31:47 2024 by rpki-client on console-fra.rpki-client.org