Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ewO0kF6IroMWUBBfgE2L_ThOtU.roa
File: 8ewO0kF6IroMWUBBfgE2L_ThOtU.roa (raw, json)
Hash identifier: DHZBkahLIu3ewR/elK0J5xiW6qQYR65gwPc6punju18=
Subject key identifier: F1:EC:0E:D2:41:7A:22:BA:0C:59:40:41:7E:01:36:2F:F4:E1:3A:D5
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794CFA847B2AB45F3ED84EE4AA4979F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ewO0kF6IroMWUBBfgE2L_ThOtU.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149428
IP address blocks: 104.239.96.0/23 maxlen: 23
64.137.28.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.239.84.0/23 maxlen: 23
138.128.159.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cf:a8:47:b2:ab:45:f3:ed:84:ee:4a:a4:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ec0ed2417a22ba0c5940417e01362ff4e13ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:bd:63:8c:83:50:c7:70:ff:39:85:ff:ef:
b2:a5:96:71:50:20:ad:15:31:fa:90:8c:a6:a6:67:
ed:63:ca:84:13:b3:d9:f7:e8:b0:62:0f:32:10:05:
bb:e2:29:b9:4b:b2:35:6a:4b:40:4d:1a:6b:51:3a:
0e:80:b0:9f:bc:d6:05:19:2e:70:90:0c:c7:56:ac:
1d:60:e6:6f:c6:b2:c4:3a:5e:ca:26:dd:1c:8a:b3:
99:80:50:da:c6:9b:91:a0:e6:c8:58:35:9d:4a:0e:
19:06:f5:65:a8:89:21:ae:fe:68:87:06:ad:0c:97:
d5:a2:7f:bc:9c:7d:98:09:e9:e2:a3:b1:3e:87:8e:
76:95:8d:5b:bc:cf:c2:80:47:a6:3b:99:d0:e3:42:
aa:41:5c:d1:92:2c:3d:2e:0a:24:eb:35:f9:09:05:
79:a1:8d:a6:b9:83:ba:84:90:b3:27:71:70:93:b1:
5b:5e:7b:e8:b2:1f:e3:32:5e:0e:b2:24:24:76:02:
96:f9:b4:84:25:a1:4b:37:6b:17:25:e9:ed:c5:9f:
c6:4e:f6:d9:d8:d4:e9:c3:32:d8:eb:53:99:0f:32:
ba:de:b2:50:4e:d1:47:31:ef:73:bb:1f:00:fa:c1:
69:c1:ee:cc:3f:d3:6d:83:e2:19:1a:0e:6d:6e:6b:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:0E:D2:41:7A:22:BA:0C:59:40:41:7E:01:36:2F:F4:E1:3A:D5
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8ewO0kF6IroMWUBBfgE2L_ThOtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.28.0/24
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.84.0/23
104.239.96.0/23
138.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3a:03:7f:60:1a:2c:f0:1a:f7:ca:b2:f3:8a:a9:e6:24:b4:
94:c2:6a:d5:ac:0e:15:34:09:17:3f:cd:c3:af:ad:86:b5:0a:
40:73:bf:8b:d2:32:f7:5e:e5:af:52:d6:02:a2:6d:4f:b9:20:
7c:e0:c3:13:c9:1b:8a:ba:1e:f7:db:cd:ff:12:d6:7d:44:62:
d8:2d:7c:32:1b:8e:f4:4b:5d:b2:12:4f:c9:e9:9c:71:40:b8:
23:2a:53:ba:07:db:50:98:45:a1:2b:21:e2:76:07:cb:35:90:
f2:60:ef:3b:67:bf:03:b8:66:8e:07:6c:bf:46:6b:53:ce:a6:
38:f3:18:7f:1e:b9:84:18:8c:4c:9e:f8:49:3a:cd:31:5a:67:
68:03:8e:b5:f4:d7:db:d7:3d:a2:2c:ef:05:57:c8:d6:cb:f4:
56:49:9f:58:cc:8a:75:5a:49:0c:59:e2:f6:e9:cb:3c:34:07:
85:4b:78:7a:ca:8e:33:84:25:f9:70:40:54:94:7f:15:07:f0:
72:ec:bb:df:11:2f:ce:a4:42:c4:07:39:f2:83:f7:ee:67:fb:
6f:dd:4e:92:b9:66:53:e7:70:5a:ba:37:ed:02:e0:dd:14:91:
55:78:60:65:b6:36:10:34:f6:d1:93:1c:22:39:90:0e:06:e2:
e3:46:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:03:36 2024 by rpki-client on console-ams.rpki-client.org