Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IAsYaLwkHNW_vFcN8FOHTOPqSok.roa
File: IAsYaLwkHNW_vFcN8FOHTOPqSok.roa (raw, json)
Hash identifier: 6eMIhbTmVBlDftQLRHM+gWQDgle+gqAwNTNVa5H2yrs=
Subject key identifier: 20:0B:18:68:BC:24:1C:D5:BF:BC:57:0D:F0:53:87:4C:E3:EA:4A:89
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027E536D1757E2DA5B7531CC46203D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IAsYaLwkHNW_vFcN8FOHTOPqSok.roa
Signing time: Tue 02 Jan 2024 02:30:55 +0000
ROA not before: Tue 02 Jan 2024 02:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50666
IP address blocks: 185.228.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7e:53:6d:17:57:e2:da:5b:75:31:cc:46:20:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=200b1868bc241cd5bfbc570df053874ce3ea4a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:66:68:8f:22:e0:ae:ad:f1:f1:d8:a3:0c:df:
07:46:c0:b6:73:3a:c8:b2:cc:22:cf:58:5d:6b:42:
1c:3b:85:e3:3a:b0:8a:9f:5f:71:e6:70:90:0c:70:
a3:a5:f8:c4:7b:df:d2:b3:c4:f0:18:93:43:46:c2:
ba:5b:60:e5:a7:f9:3f:eb:ff:41:02:c9:eb:26:e2:
a7:13:27:7d:d8:b4:58:8d:91:54:78:64:b1:8d:5c:
7e:df:f2:93:ea:60:e0:ce:bf:86:f3:6d:fd:c2:c5:
48:d5:94:d0:21:ed:da:49:3c:41:7d:6b:08:51:55:
4c:ed:ec:e4:48:4a:56:44:b8:1b:f6:cb:96:c0:10:
fc:11:2b:5b:1b:b2:77:99:89:75:d6:24:a8:a6:b6:
ab:9c:e3:4f:22:ca:5f:47:7a:05:e2:8d:07:93:9c:
8e:56:6f:b8:c6:27:5b:37:ed:74:d5:6f:d8:4f:e7:
bb:19:bd:01:6a:9a:ba:2d:5c:be:3a:54:89:78:ea:
69:68:a0:18:b7:02:da:0d:4b:5e:46:88:31:69:53:
6b:7a:da:09:36:62:f3:4d:98:00:25:26:f4:14:9a:
ed:0b:18:79:40:9a:8a:09:47:94:56:9a:dc:8d:d6:
c5:bb:fa:6c:35:80:23:0d:cf:f4:a2:f9:65:36:40:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:18:68:BC:24:1C:D5:BF:BC:57:0D:F0:53:87:4C:E3:EA:4A:89
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IAsYaLwkHNW_vFcN8FOHTOPqSok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:47:98:a5:d9:b0:7e:8b:24:d3:02:a7:d9:61:41:88:64:2f:
71:e7:7a:e2:fb:60:da:98:31:35:4f:e8:b7:75:2e:f1:e9:e2:
81:a8:fa:c4:6d:4d:be:3a:4b:28:f9:e3:31:da:d4:48:e6:34:
30:75:7a:a4:b2:5b:72:bf:c2:4d:30:60:b3:10:3c:a1:88:36:
af:dc:6c:52:52:a3:30:15:cd:ba:61:88:ce:70:5e:10:6c:c5:
ee:ae:d3:73:2c:87:72:77:88:ea:9b:67:92:7e:32:50:03:7a:
af:01:2c:c7:54:58:a1:f7:06:6f:ff:62:6d:25:ab:ed:54:ab:
3c:24:72:17:b7:55:e8:a1:39:42:61:95:4e:27:f5:0b:1f:44:
e0:8b:f0:bb:60:14:d8:9e:c4:4a:32:86:23:ab:a7:a5:16:15:
33:3b:7e:42:78:a3:39:22:a4:7b:6b:4c:36:22:d2:25:ea:d8:
a7:de:30:cf:0c:8d:81:ad:ec:ac:f9:49:86:bb:5e:fd:bc:76:
72:e5:44:42:82:72:51:32:b7:81:9a:f1:d4:4f:82:1e:5b:5d:
60:18:7f:fa:e1:c8:92:b9:7b:46:7f:07:59:67:0f:ae:78:47:
27:e2:9b:41:d6:3d:c1:02:1d:a1:60:a3:7a:c4:4f:37:89:67:
34:64:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org