Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/_ldtQwl9y-HwmTDYrO_es-0h4ag.roa
File: _ldtQwl9y-HwmTDYrO_es-0h4ag.roa (raw, json)
Hash identifier: iKh9dvgnlfWnRVzp8h65Yqc58F7EYGuJ4m+MDsB5ruw=
Subject key identifier: FE:57:6D:43:09:7D:CB:E1:F0:99:30:D8:AC:EF:DE:B3:ED:21:E1:A8
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 018CC80235DB4AA40055494F603B3AE0EFDA
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/_ldtQwl9y-HwmTDYrO_es-0h4ag.roa
Signing time: Tue 02 Jan 2024 02:30:37 +0000
ROA not before: Tue 02 Jan 2024 02:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60933
IP address blocks: 185.23.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:35:db:4a:a4:00:55:49:4f:60:3b:3a:e0:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 2 02:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe576d43097dcbe1f09930d8acefdeb3ed21e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:26:f2:3f:61:7a:fb:b4:51:70:d9:9b:3e:fb:
a3:73:70:e4:7d:92:39:2d:3b:57:e3:d8:69:7c:72:
98:e8:30:98:5e:8e:40:e1:d0:1a:e0:e9:3e:50:3d:
8b:76:d6:3c:b1:cc:47:45:b8:87:b7:4c:2c:6a:ff:
01:c2:0f:50:fe:e2:96:17:6d:67:9e:19:ab:7c:12:
f8:7d:11:8d:cd:fa:9d:a7:93:f7:65:84:1d:1e:0e:
57:83:c5:88:0d:d8:6b:17:24:8f:df:58:1d:8e:75:
61:cd:a1:5a:81:02:43:dd:de:f1:0c:5a:ff:d0:9b:
89:2b:8c:dd:eb:d8:42:55:87:e4:36:54:55:36:db:
54:cf:72:29:be:44:3b:c0:64:a4:2b:8f:ea:36:74:
10:31:65:6f:2f:2e:ab:69:b6:47:be:24:c4:07:93:
c5:64:af:6e:cf:93:d8:78:ea:ea:44:53:fd:0d:b7:
99:fe:36:cb:55:3e:04:11:3a:50:d9:17:08:b2:43:
fb:c8:26:a2:41:cb:8e:6c:b7:ea:b2:d2:03:59:cc:
83:fa:82:68:22:11:c7:21:22:83:3e:ae:a8:32:4a:
ef:81:a9:07:e1:3f:ec:b5:7b:d9:47:02:89:f3:c0:
66:72:72:b1:fa:2e:7a:5a:7d:3e:7c:f0:f5:91:26:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:6D:43:09:7D:CB:E1:F0:99:30:D8:AC:EF:DE:B3:ED:21:E1:A8
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/_ldtQwl9y-HwmTDYrO_es-0h4ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b0:6e:e0:59:a9:b6:30:e8:65:af:10:5f:17:bf:ca:25:79:
51:2b:0c:db:bf:6c:06:cc:6c:2d:1a:d6:37:f4:f7:a9:c9:f0:
c0:dd:ea:fc:48:52:f4:98:19:da:2e:fd:d7:fe:52:ef:90:2c:
db:39:5c:fb:33:57:f2:41:ac:12:ed:89:c2:27:0f:82:b9:18:
6e:5b:b9:97:0d:89:ee:2a:cb:92:47:9b:e6:0e:5d:85:8a:85:
7b:8f:ae:e6:15:4b:9c:83:1c:b7:0a:4c:1e:94:f6:55:aa:de:
f2:06:7e:b0:b4:f7:db:e0:ee:e5:cc:f8:ad:81:ee:49:99:84:
16:42:1d:be:14:1e:bc:aa:23:30:cd:54:f9:3a:0a:57:db:11:
ed:aa:46:b8:d2:ca:84:5c:3d:fc:ed:de:77:cd:78:e7:ea:13:
82:05:c5:1e:35:7d:5b:21:d1:58:37:45:d9:b9:62:a4:19:6f:
42:fa:f9:f6:52:10:0f:34:db:e1:63:e2:20:77:93:9a:85:19:
2f:a4:8a:54:01:c2:bb:83:7b:ef:f8:91:2d:84:eb:fe:ae:29:
5c:e5:2b:e4:8d:63:e0:57:59:6e:97:f9:16:f8:84:08:bc:4c:
90:2e:e6:be:30:2f:7b:9a:0e:31:90:68:1e:c4:ae:c1:e0:a6:
58:47:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:54:09 2024 by rpki-client on console-fra.rpki-client.org