Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/YNkLywXoRtaOnDZMtXd34ZsOdJw.roa
File: YNkLywXoRtaOnDZMtXd34ZsOdJw.roa (raw, json)
Hash identifier: SkTU0pD+MT77uv/VQXWZIfFu+VWbSU6bQSq2AXb8uqo=
Subject key identifier: 60:D9:0B:CB:05:E8:46:D6:8E:9C:36:4C:B5:77:77:E1:9B:0E:74:9C
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 018DD5B161BC74981F71D7E6E39E18E364EF
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/YNkLywXoRtaOnDZMtXd34ZsOdJw.roa
Signing time: Fri 23 Feb 2024 11:19:48 +0000
ROA not before: Fri 23 Feb 2024 11:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:b1:61:bc:74:98:1f:71:d7:e6:e3:9e:18:e3:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Feb 23 11:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d90bcb05e846d68e9c364cb57777e19b0e749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:1f:13:f4:ed:d3:c1:8a:ab:39:9b:de:bc:
c4:30:86:0e:8d:30:a1:1e:ae:50:1c:04:1b:16:6c:
d6:9e:47:ac:71:f1:af:dd:6f:4e:94:b3:c5:f0:8e:
b3:f1:4f:25:1b:64:d1:75:e1:e4:9a:b1:81:ec:0f:
a5:83:7a:d8:bf:31:0c:08:d5:72:cb:82:3d:65:67:
2a:bf:69:e5:01:24:6a:03:1a:c6:e3:16:ae:50:38:
3d:d3:6f:23:bc:27:43:02:d7:bb:d0:2a:a5:94:28:
a3:f6:7a:26:59:99:8f:30:30:c6:8b:d3:3e:9c:32:
99:bf:60:a3:40:1f:dc:b2:48:3a:d7:00:ea:58:06:
4c:d9:9f:f0:cc:3e:14:51:1e:0b:dc:79:77:ff:d3:
3f:f5:bf:4b:02:e8:4d:4b:1a:f5:1b:71:35:d3:de:
a0:c8:74:c4:a5:af:21:b7:07:44:77:9b:ea:3d:d7:
cc:68:5a:42:e4:d3:ea:0c:2c:e6:23:27:7c:eb:ef:
93:b7:28:2f:c3:91:92:a9:09:5a:00:32:0c:c5:30:
3a:52:2a:bd:d9:c9:5a:1d:a2:e0:ec:5c:2e:27:c4:
e2:40:ab:df:83:29:52:6e:57:96:24:14:4c:54:6c:
11:88:82:e5:0b:4d:92:42:fa:13:55:07:30:6c:88:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:0B:CB:05:E8:46:D6:8E:9C:36:4C:B5:77:77:E1:9B:0E:74:9C
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/YNkLywXoRtaOnDZMtXd34ZsOdJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2f:a0:35:bf:30:c3:27:a6:31:09:3f:46:75:ec:fa:e0:e8:
0b:e0:29:25:8d:7b:d7:aa:c2:60:4a:96:79:18:6d:67:b9:d1:
1a:e3:5c:c7:1f:0f:0b:94:af:9b:42:ac:dd:2e:d6:b0:a3:16:
fe:93:bc:86:be:90:c2:86:97:f5:16:8d:22:93:4d:86:2d:77:
92:0e:19:af:c9:44:00:29:7f:1d:b0:08:56:37:79:45:66:e9:
6c:32:dd:62:ab:57:f8:99:c8:ef:1a:b0:4e:e4:b0:c2:35:3e:
a1:f4:25:0f:4b:4e:1f:24:46:6b:47:d6:f1:e2:b3:28:fc:6c:
9a:fc:dc:c1:08:f5:a5:18:94:60:db:76:e7:1a:93:20:58:63:
f9:84:d3:5e:e4:51:52:1e:27:65:25:f2:1b:48:23:99:f7:60:
43:b3:36:1f:89:76:8d:db:19:54:e7:f0:ab:97:fd:be:51:f6:
e5:08:69:8e:84:d4:33:6b:7d:1d:f6:7d:bc:21:a0:c2:9d:78:
7c:a8:d7:cb:bd:2b:71:13:de:fa:0d:29:8d:f8:52:14:7a:6b:
1e:f7:75:d5:12:7e:2e:c3:2f:b0:51:35:e0:d9:f6:da:0d:da:
b6:b1:ba:61:ad:68:c3:37:c2:b9:11:6e:87:e4:3e:12:37:ad:
7c:c9:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:27:34 2024 by rpki-client on console-ams.rpki-client.org