Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I0w3E723ZKgaLd8Jvfu0rWulCP8.roa
File: I0w3E723ZKgaLd8Jvfu0rWulCP8.roa (raw, json)
Hash identifier: tfq8v7SZDWD7ZjbcQF96LllcUOfiYvrZ/XW7UsWX+cw=
Subject key identifier: 23:4C:37:13:BD:B7:64:A8:1A:2D:DF:09:BD:FB:B4:AD:6B:A5:08:FF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E424867B481B5D7D09818A5F3B3948450
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I0w3E723ZKgaLd8Jvfu0rWulCP8.roa
Signing time: Fri 15 Mar 2024 13:23:45 +0000
ROA not before: Fri 15 Mar 2024 13:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56504
IP address blocks: 185.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:48:67:b4:81:b5:d7:d0:98:18:a5:f3:b3:94:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 15 13:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234c3713bdb764a81a2ddf09bdfbb4ad6ba508ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:0c:77:7b:ff:f5:08:8f:ef:c7:51:77:31:
ed:42:b6:93:f7:11:27:fb:27:df:2b:0f:d2:45:e6:
91:ac:9c:80:60:0e:24:bf:05:01:9c:1d:74:a4:88:
f9:30:e3:6c:87:87:a4:58:21:c1:29:c8:da:20:7a:
2d:5c:e3:b6:bf:ee:58:4e:33:3f:80:cb:56:d4:de:
74:fd:96:28:e1:32:e6:27:e8:2d:13:ca:bc:b6:26:
10:12:d6:05:fa:de:e5:31:0e:d8:cb:ee:7e:25:b1:
38:2c:c0:f4:9b:c5:80:4b:22:2f:60:83:d3:64:3f:
8e:32:75:a8:19:ff:27:cd:a5:ce:85:01:b9:17:dc:
75:e0:3f:83:50:48:96:3b:8d:cc:f2:bc:80:d6:13:
7e:c7:42:a0:9e:96:48:d6:b0:e4:ee:aa:23:8e:65:
68:41:37:d3:78:5c:85:d2:5b:f7:c2:ea:e9:f6:e6:
9d:2d:10:61:25:f4:46:8e:98:3c:64:41:51:6c:bc:
72:d3:82:cc:7b:45:fd:6c:1f:99:9a:76:fa:af:87:
be:42:b6:f5:cf:2a:51:87:6b:b1:b6:cd:c4:27:a0:
4c:71:34:c0:b1:af:43:23:56:d7:b2:e0:9c:e7:e7:
44:b2:bd:34:2a:af:0b:ce:9c:d1:90:91:64:9e:eb:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:37:13:BD:B7:64:A8:1A:2D:DF:09:BD:FB:B4:AD:6B:A5:08:FF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I0w3E723ZKgaLd8Jvfu0rWulCP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2d:94:26:fa:93:b9:02:19:44:ae:4e:35:75:e0:f8:25:46:
c6:d3:13:ec:9b:42:ef:0d:dd:8b:25:df:e9:6f:4f:98:fb:ee:
c6:56:17:a9:6e:ff:c8:9c:fa:57:56:03:2f:2d:cc:46:05:3f:
43:6f:de:18:16:44:29:5f:f7:60:2f:2d:03:ba:0b:3b:31:2f:
58:35:c1:47:df:50:7d:0e:32:fb:8c:38:71:a7:66:8e:4b:74:
91:3e:80:30:44:57:f3:16:dd:67:22:0d:5d:cf:7d:12:e0:1c:
f2:f0:9b:48:78:68:db:68:c1:9a:62:57:f2:a8:7f:f9:37:38:
f7:54:76:ce:d1:df:04:ea:e3:6d:2b:52:80:9c:bc:ca:c2:2f:
f0:6e:f1:ce:d6:84:cc:46:b7:cb:71:c1:3b:09:51:32:81:5b:
4d:b2:e3:e4:e1:f4:09:f8:5c:53:27:eb:d2:ff:c3:e4:ab:59:
a3:a8:dd:f0:c8:43:8e:c9:74:f3:6b:15:0b:03:60:e0:e1:39:
59:6f:34:73:44:52:60:8e:73:60:14:b9:d1:b5:7b:62:11:ed:
0b:47:3f:c9:97:7b:76:ea:ec:6f:1c:60:a9:c2:44:2c:64:74:
89:d9:6e:1c:b9:fe:b7:2e:2b:99:cf:f1:64:1a:3a:ea:75:76:
ed:7e:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:31 2024 by rpki-client on console-fra.rpki-client.org