Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa
File: xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa (raw, json)
Hash identifier: 313JR6HKaqGfGycK3Og3ltlYxw5auPIqKS4jsqVgjvk=
Subject key identifier: C4:9F:ED:69:FA:20:0C:7A:87:9F:99:61:B8:59:C9:48:B1:66:84:54
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E18FEE2A7B85F0FFB9E47EEB270E3846C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa
Signing time: Thu 07 Mar 2024 12:59:01 +0000
ROA not before: Thu 07 Mar 2024 12:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 104.222.160.0/24 maxlen: 24
104.222.161.0/24 maxlen: 24
104.222.163.0/24 maxlen: 24
104.222.164.0/24 maxlen: 24
104.222.165.0/24 maxlen: 24
104.222.166.0/24 maxlen: 24
104.222.167.0/24 maxlen: 24
104.222.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:fe:e2:a7:b8:5f:0f:fb:9e:47:ee:b2:70:e3:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 7 12:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c49fed69fa200c7a879f9961b859c948b1668454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:67:9b:14:17:be:40:26:19:89:e6:23:19:
21:63:3f:fa:48:e7:de:12:02:be:77:b1:2a:79:23:
98:45:e4:a5:50:a0:83:de:e3:25:0b:93:ec:f5:bd:
4e:59:5b:ee:d5:84:09:7e:15:30:6a:cd:e8:fa:e7:
ba:43:97:34:10:d9:68:b0:41:2f:8b:53:07:6f:37:
a8:e8:4a:b6:1d:99:80:2f:94:6e:23:c4:54:4c:f3:
10:53:37:f3:9a:9e:50:dd:e5:d5:92:e8:4b:10:b8:
2f:f3:90:70:3e:08:38:93:83:4c:eb:b1:c7:db:ed:
80:41:7c:bd:5e:0c:ce:e7:ff:54:8e:d5:4e:b8:e5:
9d:9a:61:1a:86:56:86:8b:1e:93:22:ac:48:c1:b2:
18:94:8f:9d:d5:0a:dd:87:6a:10:8a:02:29:7e:ab:
26:cd:a7:8e:79:34:47:a0:ce:22:60:20:cc:43:1c:
a5:75:3a:95:f7:7e:c9:62:a1:4d:6f:e2:dd:11:3d:
4f:69:cf:79:78:35:f8:e8:ee:cd:09:47:48:f7:b1:
5e:28:40:fc:37:1d:c1:c4:fb:8c:f1:af:18:75:bf:
e1:94:41:37:02:8c:1a:30:de:60:86:9d:5d:41:d3:
5b:49:26:71:e3:e0:cd:6b:71:53:ea:f1:84:2d:af:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:ED:69:FA:20:0C:7A:87:9F:99:61:B8:59:C9:48:B1:66:84:54
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.160.0/23
104.222.163.0-104.222.168.255
Signature Algorithm: sha256WithRSAEncryption
8a:c2:7a:b3:3c:56:fe:09:58:8e:d7:eb:23:18:14:1d:9d:00:
fd:95:2c:e2:79:99:cf:cc:7c:ac:19:24:de:fa:5e:af:0a:77:
e0:90:bc:08:59:86:95:84:4e:fc:a6:47:e9:87:b6:92:6a:83:
f3:92:cc:a9:fa:7d:da:6e:32:17:a2:88:39:4a:48:ea:c8:fa:
33:d1:ec:2d:cf:4c:10:8f:93:f2:e5:f5:0c:35:76:90:79:1f:
bb:d2:79:74:8a:b0:91:a9:08:39:8f:7b:d7:b6:a6:e0:10:dc:
d4:d5:ad:40:7b:0d:91:77:78:c6:d2:3e:c8:cb:71:13:55:a5:
e6:de:6a:ef:d6:85:0e:19:a0:7d:f7:d0:46:06:32:d7:73:ce:
23:ca:d9:19:f3:55:4c:eb:36:1d:e5:8d:57:25:c7:cb:de:a2:
c2:5e:50:91:a5:36:8e:8e:1c:28:80:9d:4e:c9:1c:36:b8:90:
60:ce:99:75:42:e4:1a:02:84:51:b4:19:55:c8:28:ad:bd:bf:
41:98:8e:c7:22:d6:10:ca:ba:f6:aa:71:0a:a9:b7:e7:30:93:
a4:51:4a:3f:ae:c1:5c:a6:c5:99:71:3e:49:c7:5c:7e:90:d8:
fd:15:b1:a6:c1:00:47:b1:fc:7d:64:9e:2c:58:6b:bf:7e:3b:
e2:79:94:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:45:15 2024 by rpki-client on console-ams.rpki-client.org