Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A7wTony0OQuoJBAZ6jVILL4fEkM.roa
File: A7wTony0OQuoJBAZ6jVILL4fEkM.roa (raw, json)
Hash identifier: 781tWmgoDoSlYX9wq95lYTCH70ry+AAPN6dq3z1Fttg=
Subject key identifier: 03:BC:13:A2:7C:B4:39:0B:A8:24:10:19:EA:35:48:2C:BE:1F:12:43
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019233582AB8E731D39A406BAEBA41BD3D2F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A7wTony0OQuoJBAZ6jVILL4fEkM.roa
Signing time: Fri 27 Sep 2024 11:57:49 +0000
ROA not before: Fri 27 Sep 2024 11:57:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36231
IP address blocks: 185.228.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:58:2a:b8:e7:31:d3:9a:40:6b:ae:ba:41:bd:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 27 11:57:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03bc13a27cb4390ba8241019ea35482cbe1f1243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:15:68:51:9d:5b:75:8d:74:02:f2:10:2d:
11:b0:ae:9a:ed:3b:c4:fe:6c:4c:a3:04:61:7e:ce:
a9:06:62:79:41:7b:d9:f9:a7:86:54:dd:3f:3d:8a:
98:0d:9d:19:b4:4d:a3:2c:ba:84:fe:16:5e:1c:d8:
43:20:bc:ea:ba:9d:66:14:60:a5:9a:46:f2:9b:a6:
df:0a:e3:a7:42:60:c2:d8:2c:22:fe:26:14:dc:a0:
09:3f:ed:43:a1:0e:fb:ac:fb:f7:b8:f8:d6:1a:17:
e4:c1:7f:2c:c7:38:9d:af:61:d2:1c:92:b9:1d:27:
6e:9f:c5:b3:fc:a3:76:28:8c:ad:26:f9:44:d0:fe:
bf:52:a9:41:2d:03:bf:b0:3c:5f:af:f5:28:d8:38:
a2:bf:b6:ae:d7:5f:4d:9d:c1:71:b2:6e:43:e2:26:
02:6f:84:56:bd:85:f4:95:7d:72:74:85:a7:c1:ee:
76:c8:65:0b:61:9b:21:a6:40:4d:95:d5:dd:08:a3:
66:45:fe:e7:80:00:ba:d7:de:ab:13:10:dc:7c:58:
c2:50:45:ed:74:07:ef:0f:08:84:50:38:aa:9a:76:
05:e2:d2:21:79:f4:cd:a8:fd:45:45:9c:50:d2:dc:
cd:78:41:80:f0:10:8d:3a:58:e1:ff:cd:73:53:32:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BC:13:A2:7C:B4:39:0B:A8:24:10:19:EA:35:48:2C:BE:1F:12:43
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A7wTony0OQuoJBAZ6jVILL4fEkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0f:93:29:6e:eb:1e:76:0a:28:de:3c:49:c0:e7:2f:54:be:
3e:c3:e9:67:06:90:21:86:af:51:99:86:15:bb:26:a7:c1:ef:
63:7c:22:60:59:6f:d2:85:69:58:74:b5:4d:4c:b7:a7:98:80:
9a:58:c0:3f:1a:dd:73:52:c3:3b:40:16:36:7a:3c:b4:81:43:
b5:68:40:09:bb:35:fc:49:2b:72:f9:95:0f:b2:d5:37:f1:56:
7b:18:e6:33:0a:aa:9b:d2:92:c3:17:65:f3:59:c9:7e:ec:6c:
a9:01:f7:59:0e:3e:5b:e8:bc:a0:5c:9c:1a:6e:4d:08:bb:eb:
ed:d4:e1:fa:f5:73:ae:3d:04:66:79:81:0f:95:19:b0:a1:6e:
e5:a8:84:30:7a:c9:6c:58:48:6a:39:a0:b5:45:55:6f:07:47:
27:aa:0a:0f:59:6d:70:bf:5e:de:ff:22:9c:d1:59:58:5c:3f:
8b:40:80:ae:82:17:34:e7:d3:fa:a1:32:24:20:97:74:1b:ac:
1b:aa:4b:45:90:01:b3:36:5c:57:1d:fc:0e:00:4b:3b:07:91:
7a:bc:61:cc:33:9e:a9:37:59:89:1c:4a:fd:ce:47:3d:66:fe:
23:3f:18:f9:bc:24:08:58:4b:08:e6:cd:a9:00:e0:39:2f:ca:
79:c5:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org