Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VFsh8UrRD-YTgG0aGMFgfHrE7sg.roa
File: VFsh8UrRD-YTgG0aGMFgfHrE7sg.roa (raw, json)
Hash identifier: NC6qTRSo85/NhgZhhxUpCVXGolwwf7mX8WUpeYbyDVk=
Subject key identifier: 54:5B:21:F1:4A:D1:0F:E6:13:80:6D:1A:18:C1:60:7C:7A:C4:EE:C8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028B72E5667A2A86CF201B7237830F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VFsh8UrRD-YTgG0aGMFgfHrE7sg.roa
Signing time: Tue 02 Jan 2024 02:30:59 +0000
ROA not before: Tue 02 Jan 2024 02:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202673
IP address blocks: 185.221.20.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8b:72:e5:66:7a:2a:86:cf:20:1b:72:37:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=545b21f14ad10fe613806d1a18c1607c7ac4eec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:e8:55:02:e2:0e:3a:91:3f:83:6c:e5:94:
23:b7:ab:c0:81:eb:ab:d9:32:4b:cf:41:13:8b:e0:
ce:5b:ad:79:a7:6c:16:93:53:d9:31:01:ac:1f:48:
33:41:7b:44:f0:48:06:9a:4f:7c:a9:d8:ed:a5:0e:
2c:c8:13:63:fb:c8:12:f3:f3:1a:ef:71:49:25:f0:
50:a1:c5:3b:3a:51:fa:c3:24:9d:9b:98:7c:03:1a:
e7:91:18:54:12:b8:8f:01:20:0d:0a:75:0c:88:e8:
f6:51:fd:07:ba:fa:e8:14:76:2a:d8:4e:a0:61:3f:
ca:c7:2f:bc:77:c7:2d:d1:a9:c8:2e:b2:ae:c3:36:
65:c3:40:1c:54:05:a6:7d:63:92:64:ad:95:ee:76:
0a:a0:d5:e0:6d:55:fd:f3:88:fd:a5:2e:7e:57:a9:
30:24:22:d7:e1:b6:e7:4f:48:e3:8e:6b:5e:ab:8f:
16:98:1f:04:b8:77:c2:43:31:74:71:10:2f:2b:1a:
21:8b:30:6c:d6:97:40:c4:ba:26:47:38:70:38:4d:
22:9c:74:90:4f:42:e3:e2:6d:04:44:99:31:4d:2c:
b4:36:ef:13:ee:f1:0e:a0:d9:35:40:92:da:f4:25:
98:ae:e0:56:19:bf:82:7a:cc:13:30:94:15:bb:9a:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:21:F1:4A:D1:0F:E6:13:80:6D:1A:18:C1:60:7C:7A:C4:EE:C8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VFsh8UrRD-YTgG0aGMFgfHrE7sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.20.0/24
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4a:5c:86:ab:15:91:2a:9e:56:72:c4:2d:ca:2b:c4:5a:03:
6b:34:75:1c:60:da:2f:c2:7b:77:88:89:96:04:e2:84:a6:db:
80:bb:dd:d9:1a:56:42:21:cc:a1:40:77:ae:29:d8:8f:ea:4a:
48:c8:e5:15:64:2d:e4:6f:a8:53:7a:fa:53:88:25:eb:b4:fe:
81:5d:bb:f9:17:e1:fc:a8:e9:97:d3:25:d8:34:71:d1:a4:de:
5b:89:1a:2a:3d:c5:c1:70:3a:bb:8d:56:c3:61:c0:55:7a:63:
10:da:d2:82:4e:89:9e:3d:54:ee:27:fe:21:4c:b1:be:9e:47:
6b:ad:cf:82:11:eb:d6:b8:72:fb:72:0c:7c:df:59:f1:ab:e7:
b8:cd:9e:bd:47:6b:20:57:b5:38:a1:60:4f:97:5e:ac:f4:62:
5c:ab:75:93:48:e0:1c:22:4f:40:fe:1a:f1:a6:7a:56:15:5a:
9d:61:96:0b:94:a5:b3:57:e9:1e:9d:a1:24:7c:88:c1:67:ac:
2d:66:e8:fe:40:71:9f:4c:c3:a9:2f:f2:eb:c9:83:65:5c:44:
8c:5d:ad:6f:eb:98:66:f4:db:03:51:5c:a2:d3:da:92:0d:d3:
40:49:a9:59:65:10:6b:20:bd:db:e5:ac:84:49:66:e0:4c:ee:
88:5a:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:31 2024 by rpki-client on console-fra.rpki-client.org