Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/81FYAaFNh0CHNBB62jh1yjMInjY.roa
File: 81FYAaFNh0CHNBB62jh1yjMInjY.roa (raw, json)
Hash identifier: 986recn8QEQEAF1R3gbB2CK85BkZOQFEF2X4axarc1g=
Subject key identifier: F3:51:58:01:A1:4D:87:40:87:34:10:7A:DA:38:75:CA:33:08:9E:36
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80279967FC471030D1159F4FF5C074B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/81FYAaFNh0CHNBB62jh1yjMInjY.roa
Signing time: Tue 02 Jan 2024 02:30:54 +0000
ROA not before: Tue 02 Jan 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 185.230.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:79:96:7f:c4:71:03:0d:11:59:f4:ff:5c:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3515801a14d87408734107ada3875ca33089e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:1e:ee:7e:a9:9b:23:7a:fb:74:03:ee:9e:
5f:c8:05:4c:a7:34:a3:86:1d:ae:fc:b6:2c:09:05:
ad:93:e4:1d:93:ee:36:07:ff:c5:0e:e7:b0:6c:9c:
b7:ca:43:67:9b:a7:12:e2:01:53:be:78:c1:d5:51:
be:e3:27:47:87:6d:57:35:de:fe:1b:42:65:4f:82:
53:af:fd:03:15:57:22:6c:88:0a:aa:63:5e:1c:c8:
d5:ac:e1:99:2e:d8:92:a4:37:53:35:91:6e:18:da:
b1:cd:d7:64:e9:c2:5f:d0:3a:dd:0e:df:5e:9d:cf:
ed:cd:e4:79:e5:fd:5e:2c:f4:d4:37:0c:a3:4f:47:
54:71:ab:f4:6e:26:ca:4a:7f:cc:70:aa:52:41:9f:
01:e0:bb:13:6e:d7:db:93:5d:8e:2e:1c:a3:06:3d:
55:a1:61:ce:b3:c2:55:63:03:30:6d:6c:7a:a4:31:
0d:6c:84:61:0a:20:58:71:66:f9:fa:30:64:53:f8:
c7:cf:b0:1f:60:1c:11:a1:87:b7:39:44:29:8a:c7:
41:3f:c8:88:d3:e4:0e:06:59:62:39:e3:30:39:b3:
ce:b5:02:e5:e8:f4:6c:e3:ee:cb:2e:a5:0a:c7:96:
9f:49:37:5e:92:bd:e8:21:6c:99:c5:9f:c6:58:1c:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:58:01:A1:4D:87:40:87:34:10:7A:DA:38:75:CA:33:08:9E:36
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/81FYAaFNh0CHNBB62jh1yjMInjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:55:ae:f1:2c:29:c2:d5:e6:86:1a:44:b2:32:f8:d4:a8:1c:
98:cd:64:c7:97:87:45:c3:54:99:d3:8a:d8:1b:94:6f:87:1e:
2d:b2:8b:38:e4:48:6b:e5:d0:6d:56:94:d7:39:3e:f2:d5:23:
8a:70:4e:ae:ac:03:77:95:03:1b:97:99:46:e0:03:b6:4a:18:
9c:fb:93:5d:e4:20:e7:f4:9c:d2:50:18:ab:1e:ad:11:91:92:
00:8a:28:30:4e:4e:ce:40:e5:c2:a1:cc:76:df:e1:28:5e:23:
21:9b:ac:1f:fa:11:02:2f:c5:6c:f1:18:aa:57:2a:71:c9:4c:
25:79:21:7b:33:d2:86:85:09:39:e0:42:14:a1:14:4c:a1:a3:
ff:7b:03:23:55:af:a0:c4:49:55:29:80:c4:44:2d:5e:2a:40:
94:70:41:e5:02:b6:d2:31:ad:e9:c8:f1:03:10:b8:80:b4:4d:
a9:09:a6:4f:74:63:5b:d5:d6:0f:70:fb:aa:43:23:82:f4:44:
56:36:06:4d:58:6e:0d:06:09:59:79:79:67:53:93:df:24:bb:
ef:cf:d4:42:d9:28:01:cb:d0:97:ed:d2:41:d8:f9:7d:61:41:
2d:5c:b4:1f:51:b1:9e:23:20:cf:d7:38:1c:70:48:c8:66:2c:
ae:58:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:41:48 2024 by rpki-client on console-fra.rpki-client.org