Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BiS8ZrK4cNqnjIvhf-X6EtJU6sg.roa
File: BiS8ZrK4cNqnjIvhf-X6EtJU6sg.roa (raw, json)
Hash identifier: buYjX20cimZlm7gOdJgAZjKOgJj8k3ZwgrLqaCnoO/Q=
Subject key identifier: 06:24:BC:66:B2:B8:70:DA:A7:8C:8B:E1:7F:E5:FA:12:D2:54:EA:C8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018DD000C88824CDA96FC75E615D24806354
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BiS8ZrK4cNqnjIvhf-X6EtJU6sg.roa
Signing time: Thu 22 Feb 2024 08:48:48 +0000
ROA not before: Thu 22 Feb 2024 08:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140641
IP address blocks: 185.209.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:00:c8:88:24:cd:a9:6f:c7:5e:61:5d:24:80:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 22 08:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0624bc66b2b870daa78c8be17fe5fa12d254eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:e1:92:ec:5a:20:b3:ad:bd:3a:ce:6c:42:
71:57:23:2f:f7:9d:55:16:b7:10:a7:14:f9:e6:b0:
84:e0:d0:e1:97:80:b8:da:d7:17:e8:35:67:4b:dd:
c9:cd:ca:b4:9b:97:7c:fe:43:d9:b7:88:b1:fe:1b:
f9:98:00:62:fb:c4:0c:dc:d5:6f:8a:da:a2:e0:c2:
b1:65:13:3b:e7:d8:cc:63:6b:66:a5:b6:f0:28:27:
21:70:d5:27:db:aa:20:42:a0:f3:cc:5d:ee:6c:d4:
0d:7f:4a:91:88:80:b0:0a:e4:ef:24:62:1c:9b:af:
76:45:a5:ae:d4:2e:a9:00:86:08:64:8b:16:48:6e:
4f:9f:64:51:17:fe:47:d2:40:c5:a5:5f:4b:c3:da:
91:fa:f9:d7:d3:52:7e:07:44:2a:e7:04:e5:0f:3c:
f5:3b:5f:6e:87:12:8f:f7:0b:3b:b0:dc:76:ec:99:
c2:6f:a1:b3:de:7f:69:b9:9e:9d:87:f4:d1:b2:6d:
39:01:4a:14:27:d1:d2:5e:34:93:41:de:61:cc:d0:
b2:3f:9a:ff:5f:e9:91:57:a1:a9:ea:4c:53:b6:cb:
09:04:05:f0:0b:50:3e:20:5e:e5:65:35:f7:89:c4:
c0:ca:ba:d8:9d:5c:01:8c:10:b3:6f:37:0f:38:45:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:BC:66:B2:B8:70:DA:A7:8C:8B:E1:7F:E5:FA:12:D2:54:EA:C8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BiS8ZrK4cNqnjIvhf-X6EtJU6sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3a:0a:a7:c7:b0:32:dc:07:c9:e9:ef:cf:cd:d8:f3:09:fd:
46:fd:54:b8:dd:6c:2b:0c:6b:fb:d6:1c:f5:e8:e2:9d:0e:a8:
9e:73:d6:77:eb:e2:8b:df:8a:27:6b:f2:9e:58:76:2a:ad:d2:
29:60:0e:ab:51:60:5c:f1:00:fe:cb:98:18:76:3f:c5:ba:30:
cb:0a:1d:f4:f0:f2:54:4c:20:a9:16:8a:e7:5d:b3:c5:db:e4:
47:de:63:6a:b8:b0:09:cd:fe:ba:7c:2f:fe:3d:24:15:72:40:
68:b5:67:33:f7:e3:d7:8c:22:49:66:d1:b9:34:bc:ea:95:07:
04:ed:81:9e:b0:22:45:35:9c:bb:f4:10:c3:03:fb:bb:f1:c2:
ec:8c:6e:d9:69:97:71:de:61:c3:9d:9f:e3:76:97:c6:ee:d5:
0b:d2:df:16:de:13:6e:29:26:78:a9:5d:f3:f3:8b:82:e9:6a:
e8:a7:f4:13:8d:48:2e:7b:77:4d:6e:6f:60:b5:60:c7:0d:22:
7b:6f:60:c0:c7:d5:5a:c7:50:1e:76:24:23:cf:97:31:f0:01:
af:8d:32:2c:ac:a4:29:3f:3b:c0:68:f1:d0:6b:f8:aa:37:8a:
7d:6e:66:a4:27:06:fb:f7:d5:2f:17:ce:c0:22:e3:1f:fc:76:
a4:48:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org