Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/oE6VgKM6gEPtNzrDZoSVjXWrKWU.roa
File: oE6VgKM6gEPtNzrDZoSVjXWrKWU.roa (raw, json)
Hash identifier: vcPfvnauYsYgwUVoZEf+z774d/rEE63nX0bYruykmT0=
Subject key identifier: A0:4E:95:80:A3:3A:80:43:ED:37:3A:C3:66:84:95:8D:75:AB:29:65
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 018CC56E561882FEC21EA3D0DF4692EDD6EB
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/oE6VgKM6gEPtNzrDZoSVjXWrKWU.roa
Signing time: Mon 01 Jan 2024 14:29:51 +0000
ROA not before: Mon 01 Jan 2024 14:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20860
IP address blocks: 185.201.60.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 15:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:56:18:82:fe:c2:1e:a3:d0:df:46:92:ed:d6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jan 1 14:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04e9580a33a8043ed373ac36684958d75ab2965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:8c:4a:0f:02:47:06:f3:99:24:1a:b4:3c:
39:16:6a:c3:80:d3:97:de:62:f4:5a:2c:de:65:dc:
a3:46:44:c5:68:b4:5e:6f:ca:58:a5:61:21:d9:b2:
00:3f:6a:78:d8:09:39:1b:ba:99:48:ee:e6:19:93:
59:3c:e2:9e:3f:e5:ed:9b:f8:bf:ec:d5:25:92:a1:
38:5a:96:f8:69:fd:7e:85:2f:ea:2f:0a:09:48:03:
87:a0:ac:83:37:69:7b:6e:26:a3:ac:97:d3:33:f0:
d3:18:5a:d4:a6:fd:c8:c1:2e:83:e6:a0:b2:63:5a:
9a:89:20:b8:40:3a:fa:65:76:7e:bb:9a:32:39:af:
99:f6:8b:b4:3b:c3:76:fe:76:de:33:38:3c:02:c8:
e3:09:79:bc:c4:1e:e6:c7:bc:86:c5:57:fa:30:3a:
cc:3a:84:c6:a8:f9:22:b2:ee:c0:a3:36:88:e2:48:
9c:dc:6b:a1:5f:2f:18:7a:c1:46:79:08:b1:4a:6d:
cf:29:4a:7b:20:b1:36:ae:ea:24:e1:7e:55:d5:ef:
95:ed:2d:d9:bf:b1:0f:e4:fc:6a:4b:e3:9c:93:43:
95:22:9c:95:e5:f4:7a:33:e7:16:18:44:2f:8c:d2:
0e:66:81:20:df:96:dc:77:c4:98:d6:86:da:ef:21:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:95:80:A3:3A:80:43:ED:37:3A:C3:66:84:95:8D:75:AB:29:65
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/oE6VgKM6gEPtNzrDZoSVjXWrKWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.60.0/22
Signature Algorithm: sha256WithRSAEncryption
34:7b:fd:a0:80:4d:f1:57:26:ee:ea:da:b4:24:b1:f6:91:47:
6c:a1:d6:79:ce:e2:71:fa:1d:30:e9:1b:27:09:df:29:ec:92:
58:a1:f5:05:fc:29:ad:23:fd:02:c1:f6:ba:8c:f6:0f:7c:e5:
ca:02:24:07:59:eb:3d:9d:8c:be:fa:ae:12:90:19:75:ac:b2:
d6:aa:c2:5a:91:b8:ac:56:2c:7f:3e:ee:86:db:6c:cf:d0:fe:
3e:68:82:af:75:86:2d:c5:d5:ab:e4:16:08:13:cf:c9:63:6a:
5d:2f:5d:9c:ea:de:cb:e7:12:18:a6:62:f0:b8:d7:5c:7c:1c:
02:e0:8e:9a:15:40:4d:fb:8c:b3:28:ab:f9:8b:b9:5c:7d:db:
c6:59:84:50:28:ce:2b:89:65:59:ea:20:ab:83:20:19:ad:08:
02:ab:14:36:3b:3b:17:d4:d3:be:d3:18:83:48:9d:53:f2:0f:
98:e2:b4:b1:bd:19:f6:38:28:fc:8e:5b:7c:8b:7f:6b:4e:3c:
9c:b7:5c:e4:c1:6f:ba:03:41:7b:8d:9e:b7:15:1f:f8:c2:84:
38:0c:a3:ec:af:6a:d4:4e:ec:31:a1:af:b9:29:19:a8:b9:43:
54:fe:19:3a:26:6e:63:c7:ac:74:41:fa:44:37:18:c9:53:bc:
05:45:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:05:11 2024 by rpki-client on console-ams.rpki-client.org