Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa
File: FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa (raw, json)
Hash identifier: 7diYIRYqOdZqVTBQGJdSL67U0vPdSmOYxoC+X7HUfRA=
Subject key identifier: 14:0B:68:6B:75:A8:0B:25:BC:9A:16:CB:0C:3F:8D:3F:61:90:37:EB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018F24C024AB3419CDA1731607423578F78F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa
Signing time: Sun 28 Apr 2024 12:48:43 +0000
ROA not before: Sun 28 Apr 2024 12:48:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 104.243.199.0/24 maxlen: 24
104.243.200.0/24 maxlen: 24
104.243.201.0/24 maxlen: 24
104.243.202.0/24 maxlen: 24
104.243.204.0/24 maxlen: 24
216.173.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:c0:24:ab:34:19:cd:a1:73:16:07:42:35:78:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 28 12:48:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=140b686b75a80b25bc9a16cb0c3f8d3f619037eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:34:19:1e:b0:08:e8:07:ad:15:13:4b:9a:
81:9d:86:52:d8:82:63:62:b6:ad:a9:43:4d:4f:ef:
24:cb:f1:98:4d:75:96:e5:4f:06:95:99:ea:06:9e:
5c:f2:84:ff:53:0f:f6:4f:60:cb:05:07:5a:ec:05:
a4:ae:ec:fb:b9:af:f5:da:0b:98:11:7d:65:d3:a9:
bc:33:82:bf:49:6a:77:56:01:87:1f:94:ef:72:21:
36:f0:2e:f4:26:bd:bd:b8:02:24:ef:4b:28:7f:c2:
9e:c3:08:18:a0:58:60:cd:dd:94:8c:6f:ea:7c:3c:
dc:92:ac:d0:85:9b:43:30:05:c5:ff:d8:3a:c5:e5:
8d:75:85:d8:41:ef:3c:28:a5:74:59:82:78:17:0e:
bf:f2:71:d5:c4:b2:13:e9:6a:fe:e2:2d:72:38:87:
81:e8:88:c1:77:63:e5:9c:33:84:ac:31:62:63:cf:
b8:a5:76:04:b4:de:f4:6c:7f:4e:03:d7:f6:55:59:
e1:f6:f1:42:2e:b9:0e:85:6f:af:8e:78:9d:d0:a0:
4f:b9:30:4f:c4:13:ce:68:0e:c9:0d:6c:0d:f4:ad:
71:36:46:a6:0f:2d:3e:f0:e1:49:1e:c4:6a:0f:5b:
0b:8f:ba:40:df:d0:87:22:61:17:bd:91:02:45:c1:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:68:6B:75:A8:0B:25:BC:9A:16:CB:0C:3F:8D:3F:61:90:37:EB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/FAtoa3WoCyW8mhbLDD-NP2GQN-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.243.199.0-104.243.202.255
104.243.204.0/24
216.173.87.0/24
Signature Algorithm: sha256WithRSAEncryption
11:26:9e:dd:52:e7:6b:e9:cd:9c:1e:7a:bf:94:83:74:07:cb:
7b:19:70:bb:1b:28:f1:e1:cc:73:35:db:30:64:6e:95:e8:a8:
ae:3b:66:cf:9f:90:9a:d8:06:04:bc:8d:a1:42:e6:ec:2e:24:
5c:3b:e3:7e:36:c3:57:f8:76:51:d2:3d:cd:cf:f8:9d:c2:0e:
c5:5e:25:56:b9:76:ce:6c:aa:f1:84:7d:b2:91:93:8e:2c:39:
95:dd:93:5f:1b:52:cf:42:b4:37:bb:cf:1b:e1:a7:19:47:5c:
39:09:2c:ba:d8:e8:37:ce:ca:c3:a4:d4:57:17:31:39:4c:82:
00:af:82:b0:c3:7e:8d:76:dc:71:19:3e:c0:bf:87:30:84:11:
e2:a8:31:b3:93:7c:6f:0d:00:47:29:d2:51:bb:b6:ed:63:61:
70:0d:20:79:98:4d:2a:63:c2:6e:e3:b0:b9:13:37:d8:e4:83:
8f:49:93:a0:d1:78:ec:9a:9c:3a:10:6c:dc:b3:bf:25:75:46:
d7:ae:fc:d6:87:ed:2c:8c:48:a1:b7:cb:cf:c2:6b:73:91:a0:
fe:00:f1:a8:bf:2a:76:24:a2:f5:92:ab:ef:02:75:ec:45:c8:
0b:71:b7:06:66:15:a7:a0:84:76:e9:50:4f:07:8c:3b:e0:b8:
32:6b:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:16 2024 by rpki-client on console-ams.rpki-client.org