Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FH9oaQud_iJJcBfJjcRClNnLE5E.roa
File: FH9oaQud_iJJcBfJjcRClNnLE5E.roa (raw, json)
Hash identifier: wMuUm4IvEsAdmUuTUffgcKtj5eJNadGLTgGUi7rCcwc=
Subject key identifier: 14:7F:68:69:0B:9D:FE:22:49:70:17:C9:8D:C4:42:94:D9:CB:13:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E1505BDC848F827DC8E4C9F3C5928EF44
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FH9oaQud_iJJcBfJjcRClNnLE5E.roa
Signing time: Wed 06 Mar 2024 18:28:01 +0000
ROA not before: Wed 06 Mar 2024 18:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 185.209.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:05:bd:c8:48:f8:27:dc:8e:4c:9f:3c:59:28:ef:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 6 18:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=147f68690b9dfe22497017c98dc44294d9cb1391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:de:ca:ab:5e:c5:b4:af:74:ed:93:eb:e2:
d4:4f:d0:78:e9:82:a2:70:7a:6d:fd:2a:79:04:2d:
fb:d8:1f:f9:85:9e:1e:34:c6:9b:ff:1b:af:cc:f1:
04:85:11:50:fc:44:5e:f6:8b:ce:74:36:12:0c:d0:
08:9f:d8:87:75:bf:b1:1f:d0:80:52:62:ee:33:ca:
08:79:2c:bf:41:00:aa:f8:48:35:de:b5:50:ec:68:
57:87:3e:54:31:54:ad:e9:b2:14:c3:3b:3c:25:89:
04:ee:72:62:83:4f:5a:82:4b:37:39:47:fb:e7:22:
47:81:85:2d:29:6f:e5:49:4b:e2:59:5f:d0:a3:35:
28:92:5f:9a:7f:87:0d:1b:3f:dc:f3:ae:00:ae:df:
59:97:c3:10:34:da:b2:03:66:76:e1:6c:45:34:6a:
fa:3f:9f:d2:6d:9e:4f:47:17:cc:ff:c9:e0:9f:13:
c4:63:0b:d4:5f:da:77:6a:6e:96:97:0a:73:e2:0d:
74:3a:b6:91:0e:b9:cc:64:88:84:68:a4:4c:fe:9c:
75:da:f6:6a:d8:e5:dc:21:d0:8e:9a:e4:c7:cb:1a:
0f:81:da:d3:02:69:6c:58:5c:be:56:4f:08:9e:9c:
c5:3e:a6:45:5b:aa:32:68:cc:4f:d2:c2:d4:d2:69:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:68:69:0B:9D:FE:22:49:70:17:C9:8D:C4:42:94:D9:CB:13:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FH9oaQud_iJJcBfJjcRClNnLE5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:ee:3a:73:e1:65:05:c9:6b:ab:6e:c7:de:85:f7:a9:d4:
61:9b:36:d2:38:fb:be:18:f1:92:dc:b8:2a:ba:3c:e9:95:69:
2e:9e:11:87:21:6a:70:da:5d:e1:43:ae:ff:20:1d:09:ae:ce:
a2:c5:84:10:aa:c2:5f:eb:da:54:2c:d0:aa:d7:03:df:52:32:
e7:9e:7a:a0:af:21:b9:8d:02:f9:f9:cb:25:96:59:71:97:fe:
98:64:e3:58:3c:81:95:44:d2:10:cc:66:79:32:d4:79:5b:4d:
f0:65:cc:1a:3f:aa:c0:df:c6:e9:ec:30:93:9c:72:16:f6:4a:
7b:32:75:b7:e5:01:2f:8d:b1:c1:4a:35:8f:cf:ae:21:e8:b0:
ba:33:2e:73:5b:37:08:eb:92:2c:7f:26:d4:93:b1:04:d2:71:
68:0c:c0:f0:49:aa:81:76:f9:15:1a:34:ac:63:f9:96:48:5e:
eb:57:e8:15:09:e1:7b:ea:5b:95:f4:20:b4:36:72:5e:9e:cd:
f9:d7:7b:9b:b5:2a:42:d8:71:a8:f3:31:7a:6a:59:a7:8c:19:
4c:23:3f:4c:ce:91:8a:c3:e2:17:c2:75:dd:98:9c:3c:b2:e1:
f0:81:78:bf:bd:48:17:fd:7d:6c:db:20:fd:b8:0e:1b:82:d6:
b5:60:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:40:03 2024 by rpki-client on console-ams.rpki-client.org