Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IVYtaow1CC7alBT3FsKLi36xn88.roa
File: IVYtaow1CC7alBT3FsKLi36xn88.roa (raw, json)
Hash identifier: Grj1rCHxV6aDUxBKbv9qfKTK4bYI9A8uvLhqJYdssOg=
Subject key identifier: 21:56:2D:6A:8C:35:08:2E:DA:94:14:F7:16:C2:8B:8B:7E:B1:9F:CF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191BD7BA60EBB581739C35B06AD14B1A3C8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IVYtaow1CC7alBT3FsKLi36xn88.roa
Signing time: Wed 04 Sep 2024 14:41:22 +0000
ROA not before: Wed 04 Sep 2024 14:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137517
IP address blocks: 185.225.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:7b:a6:0e:bb:58:17:39:c3:5b:06:ad:14:b1:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 4 14:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21562d6a8c35082eda9414f716c28b8b7eb19fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:e7:b1:ec:28:49:61:82:60:87:47:23:73:
fd:dc:de:fe:55:9b:62:cc:e8:35:1d:ee:00:d7:82:
5b:b2:f8:eb:db:45:cb:4b:15:e3:e5:20:d5:46:2e:
b4:ed:a2:85:b3:26:d5:72:77:1b:4a:83:25:70:a7:
93:1a:c5:9b:ed:1e:ad:74:9c:1f:8b:2a:a2:9b:76:
02:5f:79:bf:18:cb:f7:f3:6d:d5:06:51:61:6f:5f:
fd:c3:24:90:81:06:27:0e:79:e8:ba:eb:28:62:fe:
37:38:84:c2:e8:da:59:17:10:7b:37:e1:89:6c:97:
c3:96:35:4e:16:41:96:0a:15:8a:5e:3b:9e:49:a2:
9b:86:fc:67:55:da:a8:d1:70:0b:47:bb:1a:b8:5b:
c6:a5:59:ac:78:de:33:cd:0c:2a:35:95:3a:7a:40:
1d:6f:03:00:fd:1b:4e:74:f5:84:70:39:7a:24:9f:
90:dd:53:f2:6c:84:c9:a0:43:86:3d:70:4e:cb:dd:
3c:e3:13:0c:c4:f8:6a:1f:b7:f4:c5:f2:64:98:53:
2e:86:44:43:74:a7:e7:c3:5e:8d:f8:2c:01:ce:21:
ea:06:9d:df:ae:a9:15:f0:3b:11:57:b8:d3:56:92:
45:5f:5e:28:4a:20:d4:91:8c:86:ad:77:3b:34:4e:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:56:2D:6A:8C:35:08:2E:DA:94:14:F7:16:C2:8B:8B:7E:B1:9F:CF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IVYtaow1CC7alBT3FsKLi36xn88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3c:2b:b7:3b:0f:6b:71:6c:29:90:27:85:f2:f9:8d:14:14:
ec:68:50:ff:eb:ae:e4:fb:4f:d5:de:f5:21:63:1f:40:a0:0f:
b9:38:6b:41:82:54:ca:f9:81:f7:ca:95:8f:c4:0e:50:50:9b:
e1:ad:8b:98:a6:dc:8b:ed:9c:4d:86:1b:05:3f:9e:f9:7c:13:
07:c7:aa:bb:51:2b:73:4c:10:f6:45:bb:1d:81:8b:24:a5:03:
0a:4f:eb:01:87:dd:46:5c:39:bb:7c:75:0d:b9:47:ed:eb:64:
5f:39:5d:07:ef:0d:be:c1:9e:69:10:de:84:7f:2d:30:cc:22:
ed:8f:9e:70:a9:43:82:5d:b1:2d:dd:e4:32:96:7b:13:ba:25:
0c:ed:42:95:1b:ef:f8:8e:48:d8:f7:58:55:c2:73:90:d4:e0:
50:b1:e3:e0:95:09:ae:88:d3:fd:71:ab:f1:9c:e3:38:98:27:
ba:dd:af:d7:ce:ac:e1:f8:da:a2:35:90:b6:38:5a:0c:c8:26:
dd:23:15:3d:d6:3c:97:99:cd:40:77:46:0b:a9:f9:bb:09:32:
10:1e:1a:77:f6:98:59:ad:28:4c:de:5a:4e:55:1d:62:d9:b4:
66:06:d9:ce:7b:7c:ec:82:f2:40:66:3c:70:a4:37:85:f2:b2:
58:a6:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org