Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RIax74QrouYR3G8EuZnS6CBVrMU.roa
File: RIax74QrouYR3G8EuZnS6CBVrMU.roa (raw, json)
Hash identifier: M6s6tTvytpsTedCvBb5V+tEJLg5OsfuQe9dSglOp/j4=
Subject key identifier: 44:86:B1:EF:84:2B:A2:E6:11:DC:6F:04:B9:99:D2:E8:20:55:AC:C5
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018F05661AF54C127724CEB10B9A502017FF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RIax74QrouYR3G8EuZnS6CBVrMU.roa
Signing time: Mon 22 Apr 2024 10:42:08 +0000
ROA not before: Mon 22 Apr 2024 10:42:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 104.239.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:66:1a:f5:4c:12:77:24:ce:b1:0b:9a:50:20:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 22 10:42:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4486b1ef842ba2e611dc6f04b999d2e82055acc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:ae:6c:39:5a:87:be:fc:c0:c2:f6:ed:1b:
3d:10:7d:df:0c:33:a5:7c:7f:97:ee:00:e5:f8:98:
2d:96:1c:00:d2:6c:b1:73:58:27:25:78:b8:92:5e:
09:73:57:a2:26:94:4a:f3:2c:9a:f4:6e:d1:13:a0:
fa:ed:f2:cf:05:6f:05:67:8c:38:87:38:78:f4:2e:
0e:58:1d:2f:88:1a:4c:08:d8:b2:4c:26:64:0d:da:
68:ae:51:b2:89:f6:93:1b:8c:52:40:61:3a:e9:9d:
76:63:d2:87:52:c7:21:13:be:70:6e:76:1a:90:ec:
f3:ab:16:91:be:09:7e:90:66:a8:3b:92:70:1c:21:
bf:5f:42:d1:fc:d8:ee:12:ab:20:cd:91:dc:b9:61:
da:86:dc:b8:67:00:43:83:d3:15:02:8d:ad:a2:4c:
e6:b7:0e:2f:c5:d8:90:7f:6a:b6:67:4e:32:77:13:
55:49:b4:c2:b3:fb:b4:aa:e0:8e:95:4d:5d:d5:2b:
eb:bf:3e:8d:3d:f8:7a:fa:58:80:29:55:71:ff:8b:
24:76:15:a6:21:60:49:da:c6:5b:66:06:01:d7:36:
a0:6e:b9:5e:dc:7d:ba:41:30:d1:9d:2d:5f:27:96:
59:2e:1d:a5:3e:64:46:75:ec:27:a6:e8:91:39:86:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:B1:EF:84:2B:A2:E6:11:DC:6F:04:B9:99:D2:E8:20:55:AC:C5
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/RIax74QrouYR3G8EuZnS6CBVrMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.72.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:1f:47:5c:30:ee:3c:44:43:32:41:af:b9:eb:35:76:a9:
fc:2a:73:6a:33:50:3a:d2:69:a8:8d:68:a6:64:a5:d3:1d:08:
d9:3c:6c:1f:7d:6a:5b:c7:6e:7c:6d:ba:50:72:50:ee:87:90:
0c:9c:f3:96:8e:64:f0:a4:f3:68:57:3c:cf:c3:af:8f:ac:f6:
22:8f:49:d1:ff:13:98:ef:66:8f:6f:4e:45:b3:ee:78:1c:e2:
0c:54:86:da:7a:b3:bb:d3:20:09:36:65:67:d5:f0:2f:23:74:
2f:9d:6e:42:32:db:60:df:03:5a:a0:34:a0:bf:52:27:1f:b5:
1c:71:8c:0a:dd:70:9e:c5:be:37:f7:be:d9:8d:26:9e:b9:7c:
6a:6a:af:0d:7f:5b:ad:ae:b3:4d:06:04:40:28:61:de:39:bf:
78:a3:81:4b:a6:f7:38:1b:37:71:51:08:80:c8:10:ec:39:7e:
fd:7e:59:81:e8:1c:64:45:5e:3b:04:8a:bb:f4:68:a1:d5:66:
d8:c1:1b:dc:f9:8a:a8:bb:20:09:df:5d:22:f5:3d:97:3b:45:
21:01:d0:5f:f5:4e:5f:63:fa:e8:09:b7:57:29:3f:6a:8f:20:
52:b8:4f:bb:43:99:6f:ef:47:e0:3d:34:4d:8a:8d:44:32:06:
a9:a8:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:32:30 2024 by rpki-client on console-ams.rpki-client.org