Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A9JLvFTZvcST9u0AGiq0tpuppzk.roa
File: A9JLvFTZvcST9u0AGiq0tpuppzk.roa (raw, json)
Hash identifier: Fzf4dbUyd9LNajLkviBujP9mOC8cbTlXnUus8NhcsT4=
Subject key identifier: 03:D2:4B:BC:54:D9:BD:C4:93:F6:ED:00:1A:2A:B4:B6:9B:A9:A7:39
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190E032BA713720DB78780D082605AACAC6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A9JLvFTZvcST9u0AGiq0tpuppzk.roa
Signing time: Tue 23 Jul 2024 15:25:39 +0000
ROA not before: Tue 23 Jul 2024 15:25:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138156
IP address blocks: 185.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:32:ba:71:37:20:db:78:78:0d:08:26:05:aa:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 23 15:25:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d24bbc54d9bdc493f6ed001a2ab4b69ba9a739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:51:f2:01:ee:60:f5:df:33:dd:5f:c0:97:
9c:1f:1e:e8:99:b4:ae:69:93:da:88:cd:74:56:76:
5d:54:af:e2:f0:05:dc:b4:6a:a5:1a:f1:df:e0:34:
0e:e8:42:98:36:06:c5:e4:a2:87:1d:57:b4:05:87:
0a:2d:27:63:0b:ca:34:ee:65:59:2d:f8:79:99:8b:
6b:33:33:89:f3:70:06:af:53:a8:df:e8:44:41:35:
1b:d8:6b:d4:70:a2:07:59:9a:53:b1:f0:9f:1c:f1:
1b:29:e2:32:11:a6:14:57:f3:85:5d:92:51:99:5b:
e5:bb:1b:f0:84:e4:d6:8a:79:c3:f5:f2:54:b1:12:
a7:5a:46:87:05:99:f6:5c:07:26:3e:3a:2b:11:e3:
f8:23:99:94:af:0f:50:f8:d6:f8:7b:74:a6:84:80:
fe:8a:f7:2a:14:d7:c1:b1:a3:6d:90:a2:bd:09:d6:
fd:07:39:b0:9d:b9:8a:c8:8f:69:03:d4:6b:5b:69:
b4:61:d3:24:49:f5:9f:da:75:d1:8c:94:de:74:a7:
87:69:88:4e:31:41:83:95:c4:78:3e:cb:03:4b:a7:
c1:58:e8:7d:a9:c3:6c:64:a2:eb:7e:56:93:b9:7c:
70:12:1e:11:88:27:30:d5:98:c4:fa:68:d5:19:98:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:4B:BC:54:D9:BD:C4:93:F6:ED:00:1A:2A:B4:B6:9B:A9:A7:39
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/A9JLvFTZvcST9u0AGiq0tpuppzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2c:b7:62:66:9a:f0:94:43:62:91:55:fe:7d:2f:56:9b:69:
8a:95:75:b3:1c:c3:62:aa:00:b5:a3:b2:28:2e:d6:71:55:ea:
fd:67:1a:c6:15:a8:e6:75:ab:a9:1f:8d:2d:ea:4f:1f:4c:01:
cd:28:6c:b0:b1:f0:3e:bb:15:31:d8:d7:2a:8a:e4:e4:b8:31:
de:35:68:73:72:1d:c6:a2:fb:d4:07:a8:6c:bd:1d:43:16:e3:
25:04:bb:59:ab:66:7d:95:79:3e:0c:9d:26:d7:5a:76:9c:1d:
b3:63:b5:c8:43:a9:e9:11:89:87:f2:44:92:f4:ec:5d:f3:c2:
97:9f:b8:dc:21:a6:25:56:17:02:a7:9a:47:f9:c3:53:fe:b1:
88:22:51:2b:85:83:61:d3:d6:72:cf:cf:f2:ad:90:bd:2a:52:
28:a8:da:c5:ca:d1:0b:46:96:0c:cf:79:da:24:96:1a:9a:25:
80:9e:29:fb:8d:3d:a6:14:42:3e:7c:3f:f9:b4:dc:53:7a:2e:
6c:75:0d:68:dc:e4:59:d5:ef:1e:a0:a8:48:c9:1e:0d:02:14:
d9:40:b0:87:09:0d:0b:b9:34:7c:58:83:82:9c:58:54:b3:72:
b1:63:b7:2e:2b:e6:33:7c:bd:b7:62:8d:26:aa:fb:c6:93:f0:
40:a0:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:41:48 2024 by rpki-client on console-fra.rpki-client.org