Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ul_LG86Mi55T12_OiGi95JDVkc.roa
File: 1-ul_LG86Mi55T12_OiGi95JDVkc.roa (raw, json)
Hash identifier: A1W3+eUNigOmi/69gGKJFPy3C5PX74s5009e/xglLGc=
Subject key identifier: FA:E9:7F:2C:6F:3A:32:2E:79:4F:5D:BF:3A:21:A2:F7:92:43:56:47
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CDAF3F0406A57A38F82C9D14CBA48095D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ul_LG86Mi55T12_OiGi95JDVkc.roa
Signing time: Fri 05 Jan 2024 18:47:48 +0000
ROA not before: Fri 05 Jan 2024 18:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 270564
IP address blocks: 185.228.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:f3:f0:40:6a:57:a3:8f:82:c9:d1:4c:ba:48:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 5 18:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae97f2c6f3a322e794f5dbf3a21a2f792435647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:2e:a8:e7:a3:55:c2:5e:0f:a0:fb:75:ef:
dd:3b:8e:2b:cf:b9:64:8e:3c:4d:18:bf:84:93:25:
8d:1d:59:64:e7:31:02:ef:cd:5f:41:ed:cc:3a:20:
a2:a9:0f:77:91:d6:ef:25:fc:69:8e:16:af:98:26:
f5:84:62:c8:69:cb:df:14:87:98:42:7c:7b:cc:b8:
e3:4d:03:ae:7e:20:66:5f:1d:fa:1f:3f:4c:46:80:
a2:18:f0:d1:a4:7e:2c:80:a2:4a:af:f9:b4:e7:dd:
b1:95:2b:fa:62:3b:7f:ab:da:ed:21:aa:ea:8a:85:
e7:29:3d:cd:9b:7b:b6:63:55:73:62:3b:df:5b:3b:
a8:10:0a:ae:84:2e:10:87:70:1d:07:da:a0:a4:3b:
0d:d3:5c:5a:bc:ed:ca:b7:d1:b9:72:d5:41:b6:f6:
9c:de:48:80:ff:96:8f:9e:9c:eb:fe:f7:13:c4:b0:
60:d2:71:7f:5f:2b:fe:12:da:c5:54:f5:9d:02:85:
47:0a:4a:b8:4a:3e:7f:12:1b:86:4d:f2:c6:f9:47:
2a:95:29:c2:1a:e3:62:31:33:4d:02:7c:b6:04:d0:
a5:e8:bd:85:b6:b6:ea:c4:9b:4b:51:fd:eb:fb:a7:
ec:d5:4d:75:70:36:42:1a:91:62:d1:14:9f:bb:09:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:7F:2C:6F:3A:32:2E:79:4F:5D:BF:3A:21:A2:F7:92:43:56:47
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ul_LG86Mi55T12_OiGi95JDVkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.72.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:79:0b:9a:74:b0:4a:19:44:b3:fe:57:b2:8c:e1:ab:e2:
85:73:32:90:fa:8a:b0:9c:24:88:b8:03:9d:55:2c:d2:ad:ea:
c4:49:9c:02:f8:50:51:52:59:c8:83:21:af:65:34:a8:63:70:
07:a3:47:9c:49:74:0f:9c:8f:37:2b:35:3a:58:9b:14:80:39:
ac:62:55:af:a7:9b:67:20:75:cc:c2:a9:34:c5:8e:3e:12:cc:
95:3b:d7:c4:14:c7:2e:90:f0:66:21:14:97:c8:7d:0d:64:cc:
fb:a2:c7:e0:c2:cf:6a:fd:2b:dd:b1:32:ad:8d:ae:8e:7f:9a:
2f:30:36:8c:70:f8:84:d8:08:5e:78:60:52:31:3f:48:48:42:
6f:23:af:7d:21:f9:3d:d9:97:60:db:e9:4b:95:83:b5:71:07:
3a:fe:28:5b:12:f6:cf:82:55:c3:f9:e3:17:36:c9:a2:6b:2e:
5b:89:56:ec:b9:fb:ea:42:38:e1:cc:1d:6c:b7:56:ce:bb:4e:
c3:81:48:17:4a:a4:fc:e6:71:6c:4c:d9:8c:73:eb:ee:41:31:
53:a3:c6:d1:a8:5f:7d:cf:86:31:24:f3:21:49:d5:1c:1a:27:
75:ed:1e:2d:f8:a3:4f:29:00:f9:61:3d:49:fa:80:c5:f8:9a:
86:5a:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:25:54 2024 by rpki-client on console-fra.rpki-client.org