Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4TXO-c6b5Cj4x6TrjodtqDILxI.roa
File: E4TXO-c6b5Cj4x6TrjodtqDILxI.roa (raw, json)
Hash identifier: NfJXZvppP+/TVXRHe4W8W0nuAhmn1v8l+myssdIuq5k=
Subject key identifier: 13:84:D7:3B:E7:3A:6F:90:A3:E3:1E:93:AE:3A:1D:B6:A0:C8:2F:12
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028D5CA52A5ADBCADDB6DDB2082576
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4TXO-c6b5Cj4x6TrjodtqDILxI.roa
Signing time: Tue 02 Jan 2024 02:30:59 +0000
ROA not before: Tue 02 Jan 2024 02:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206501
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8d:5c:a5:2a:5a:db:ca:dd:b6:dd:b2:08:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1384d73be73a6f90a3e31e93ae3a1db6a0c82f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:59:f0:f4:ab:99:1a:00:1c:59:d5:6b:d1:
b4:ba:be:89:94:77:bf:05:27:2c:bf:5b:76:24:83:
ac:a3:4a:fa:45:ae:28:5c:d0:73:d2:af:40:ae:0b:
06:c4:8d:1f:b7:48:90:02:8f:80:17:ba:ef:f8:fe:
70:6d:19:d2:81:65:b2:84:a8:b8:71:8a:94:d8:bf:
77:e4:5a:01:28:18:34:c0:d9:fa:4b:52:63:e0:20:
f6:ac:6b:d6:bd:0e:6d:66:44:6c:12:a8:76:a2:93:
6e:9a:76:bc:86:39:20:aa:7c:02:9e:84:54:14:f5:
2c:e5:37:77:e2:2b:77:da:29:31:da:f0:8c:e4:af:
9c:ce:76:37:8a:10:4e:05:47:c8:a8:03:cf:f3:9f:
65:ef:20:17:96:3a:51:4d:3e:ca:8a:52:21:23:1e:
63:9d:f8:0a:35:2c:fb:50:32:2d:64:bf:da:f3:70:
d9:48:00:5a:0a:e8:a5:72:57:ee:52:6c:81:02:5d:
16:fb:a6:8a:2b:af:68:bf:d5:dc:68:4f:db:47:d7:
e4:28:3f:67:2a:d8:be:b4:3f:a3:f7:c2:49:a6:0a:
42:21:88:83:f1:42:ee:81:8d:79:dc:46:0b:8c:6d:
bf:79:29:66:c8:af:a6:04:0c:56:5f:ea:c0:c7:f0:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:D7:3B:E7:3A:6F:90:A3:E3:1E:93:AE:3A:1D:B6:A0:C8:2F:12
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E4TXO-c6b5Cj4x6TrjodtqDILxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ab:80:a8:6b:b5:d2:a8:6b:02:72:e2:85:c3:eb:0e:4f:66:
75:16:2d:b4:68:8b:22:73:da:7e:3f:0f:0b:88:9e:37:4a:a8:
af:7a:2f:8a:a3:67:4c:61:10:25:ae:f8:a6:da:dc:03:de:83:
e6:a3:c1:2d:92:7a:4b:a1:21:20:da:ca:86:c1:9c:87:d5:1c:
87:8b:05:f2:61:6f:e2:96:3e:95:4d:5f:b6:61:80:0c:90:8d:
6d:e0:68:b1:8b:57:01:c4:7b:b0:e7:b7:44:e5:fd:a4:05:38:
bb:77:f0:1e:4a:81:75:62:fe:62:8c:09:04:1c:69:b9:f3:a1:
25:d6:9d:7f:bf:0f:61:0b:0f:ea:79:47:8d:0d:c9:21:f7:0a:
75:5c:25:4e:47:fa:22:a6:91:f4:50:ba:af:5e:c5:bf:57:ec:
28:ad:ed:87:36:f8:4e:31:7c:a3:99:0d:fa:16:28:80:45:8d:
34:d0:89:72:cb:63:a0:99:32:17:a0:60:c8:02:2c:9f:71:3c:
7a:a3:47:f3:13:9e:54:6e:9d:ef:3e:2e:69:d6:f1:3c:a4:4e:
ab:f7:41:6f:41:99:c7:55:5e:92:85:94:6e:68:71:08:43:6a:
7b:fc:91:6e:47:71:2a:f5:a7:ec:58:e9:eb:52:b4:37:51:b1:
f5:e5:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:53:07 2024 by rpki-client on console-ams.rpki-client.org