Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/io4wdCRfEoltjJlS55OCRO39VaY.roa
File: io4wdCRfEoltjJlS55OCRO39VaY.roa (raw, json)
Hash identifier: of5zdEsNXsVZ/neVFXW7+CuegUZIK1xVhSw42YrxI7o=
Subject key identifier: 8A:8E:30:74:24:5F:12:89:6D:8C:99:52:E7:93:82:44:ED:FD:55:A6
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8921695C21533B30DCC02F2180B9
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/io4wdCRfEoltjJlS55OCRO39VaY.roa
Signing time: Tue 02 Jan 2024 08:32:30 +0000
ROA not before: Tue 02 Jan 2024 08:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61091
IP address blocks: 185.11.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:89:21:69:5c:21:53:3b:30:dc:c0:2f:21:80:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a8e3074245f12896d8c9952e7938244edfd55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:d4:ac:e3:02:ff:ab:6b:a8:c6:61:65:42:
f1:89:fd:42:c8:fb:bc:20:ff:e9:64:c9:36:3b:a1:
e9:e5:18:40:02:0d:65:93:c1:69:e4:12:3b:77:e9:
71:1d:57:cd:16:0c:bd:68:5b:7a:90:6f:3f:f8:74:
e0:7c:2c:97:7d:b4:e9:19:d5:70:ea:5a:45:9d:40:
0f:d8:00:38:e3:02:67:df:cb:e1:0e:76:e5:fe:80:
a5:37:e0:14:98:fb:0c:20:7d:6b:ad:3a:22:d1:36:
60:ad:de:1b:7b:f1:6c:9c:fe:ee:c8:f3:17:9d:58:
48:b2:ef:a2:db:0d:0f:47:f5:d0:66:13:a7:60:91:
1c:04:8b:64:f4:2e:5b:f3:3d:9a:52:21:10:1b:36:
b9:2b:cf:d4:87:8f:62:5b:ab:f8:0e:0f:08:9b:84:
38:85:d4:c5:57:bd:ca:e5:ef:f3:ad:e0:c6:a7:d9:
4a:89:8d:fd:dc:b6:32:90:30:8c:cf:ea:37:43:68:
09:cb:7b:70:a7:be:11:74:f7:e9:33:2e:52:e5:57:
2d:be:e8:70:50:dd:bc:15:1a:9a:2d:61:49:2c:b8:
a9:06:0c:fd:69:d8:51:76:02:43:4a:36:42:cf:ed:
01:b5:5b:6e:a0:10:fd:91:02:40:96:95:67:5a:46:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:30:74:24:5F:12:89:6D:8C:99:52:E7:93:82:44:ED:FD:55:A6
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/io4wdCRfEoltjJlS55OCRO39VaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b6:57:d6:83:c8:92:e1:12:59:96:da:ce:04:18:bf:36:4c:
2e:68:6a:f5:5d:58:3a:9d:dc:18:94:37:ec:4f:e0:37:6a:cb:
27:98:f9:3f:bc:e3:13:df:32:30:6a:61:e3:4b:80:26:67:84:
c5:14:04:6b:f4:b3:fd:4c:e2:57:d3:8c:bb:b8:07:cf:cc:11:
18:9d:c9:08:e3:c7:f6:8e:a9:8e:3f:0e:87:0a:ef:6e:09:ff:
f3:46:42:3e:7f:45:e8:e9:75:ef:4b:47:4d:f5:0a:07:ba:42:
2f:d3:ed:a6:0b:4f:7b:bf:9d:22:22:82:d4:cb:ad:60:37:3d:
d1:e3:6f:36:e1:51:f8:8c:67:3c:ad:30:7b:6f:c8:ea:77:7b:
95:e1:61:51:e6:08:e3:ee:ae:90:dd:fe:b5:bb:e6:ca:9d:1d:
60:41:51:4a:fc:cf:32:e6:ef:bc:af:8d:b2:03:bb:c0:3a:5a:
85:6e:df:a4:a1:6e:8f:39:f3:e2:7c:c9:5c:43:8e:d6:ad:37:
92:f3:a5:c3:ea:84:b7:b7:79:cb:a1:f4:c4:94:54:6d:01:4e:
e3:96:55:0f:de:85:50:a6:f2:c2:07:99:d9:36:66:76:34:78:
49:9f:62:42:88:63:ea:87:b0:3f:e1:39:7c:db:18:89:9f:a3:
f8:ed:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:06:13 2024 by rpki-client on console-ams.rpki-client.org