Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V2lK0AGL9mezx7bxHGivyX84IlM.roa
File: V2lK0AGL9mezx7bxHGivyX84IlM.roa (raw, json)
Hash identifier: 7fZ+TjjZP+h0K6U5X78cL6fqZ/i6CQmD37jbUtu6bVI=
Subject key identifier: 57:69:4A:D0:01:8B:F6:67:B3:C7:B6:F1:1C:68:AF:C9:7F:38:22:53
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E9E98EA3B768CE752642B06DE77311F0B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V2lK0AGL9mezx7bxHGivyX84IlM.roa
Signing time: Tue 02 Apr 2024 11:36:45 +0000
ROA not before: Tue 02 Apr 2024 11:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 185.223.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:98:ea:3b:76:8c:e7:52:64:2b:06:de:77:31:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 2 11:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57694ad0018bf667b3c7b6f11c68afc97f382253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:5f:84:94:a9:d9:65:f4:9c:69:ed:fc:ee:
07:e7:d5:52:40:48:5c:40:7e:b5:26:f0:97:a8:09:
c6:7b:75:e6:f4:57:39:8b:38:b5:20:3b:bd:7f:f3:
f6:27:83:d8:ec:da:8b:d5:a9:32:8d:03:b6:71:65:
7f:0b:e6:c9:f6:28:bd:79:58:80:c5:8b:33:a4:52:
ba:cb:8d:1f:fe:fc:fc:d3:6a:95:de:a5:da:16:b3:
9c:07:19:6e:09:8d:9d:7e:91:28:78:3a:24:18:c6:
6a:01:9b:05:9f:b0:4c:86:ae:f0:3c:23:6b:61:fa:
7c:50:83:10:61:5b:59:51:ea:c3:a5:5c:3b:cf:f2:
29:c2:f7:b6:ef:ac:d0:08:66:d3:8e:47:fe:29:00:
39:f4:98:d9:8b:09:cd:a1:17:87:08:c3:7f:af:fc:
43:26:b6:6a:4c:08:a7:e3:e8:0e:43:05:e7:88:70:
56:7c:17:a9:f9:99:05:87:46:f2:f1:9f:f3:30:e4:
04:bc:c2:34:13:97:6d:b3:e5:7a:0a:37:06:35:47:
88:d6:2a:ab:6f:ee:a6:27:45:0c:8b:26:3b:27:5e:
ec:ca:86:16:a3:e6:03:a5:5b:a2:cb:4c:d0:3d:f5:
22:84:20:d6:f8:33:f1:d0:dc:86:a6:78:d0:97:1b:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:4A:D0:01:8B:F6:67:B3:C7:B6:F1:1C:68:AF:C9:7F:38:22:53
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V2lK0AGL9mezx7bxHGivyX84IlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a1:ee:28:cd:3a:3d:17:4f:a2:32:23:8e:bf:f9:76:79:3e:
8a:97:71:3e:3f:7d:1a:28:1c:39:5c:32:97:b0:ee:96:9a:81:
84:2e:44:78:66:8e:79:77:ee:56:f7:eb:48:42:5a:27:ab:b1:
7b:ae:a0:da:34:36:d2:9f:22:27:5e:dd:52:f1:50:ae:38:50:
1a:a8:f9:f5:36:65:b0:ba:10:7b:7d:fa:86:ca:56:58:71:97:
65:17:c3:e2:41:f9:93:e9:ce:5e:ec:3f:e5:23:01:fd:5f:c1:
1f:e8:0b:00:81:74:5c:4e:c7:50:71:e6:c0:5c:2a:1e:17:ab:
e8:5f:05:dd:f5:9e:48:d5:af:0f:80:e3:ac:c8:35:3f:73:b1:
a0:84:bb:b7:f9:99:95:0d:20:97:80:90:f6:c1:22:da:92:68:
48:33:5a:50:7c:0e:b6:68:e7:7a:78:45:2c:92:88:9e:10:61:
84:c4:05:73:f3:9d:59:8e:ae:e5:65:bc:2a:3f:84:d1:ee:ca:
15:9e:70:5d:bf:d1:9c:66:bc:e6:4c:c0:01:4d:35:f5:ac:6c:
da:ee:0e:6f:45:75:13:4e:7d:30:3b:8f:29:40:63:ed:d0:17:
55:c0:0b:37:d7:43:af:08:95:64:15:3e:3a:56:c5:13:14:75:
89:1f:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org