Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_L_xxYDd9HQgIUOrytF-lDsl6_g.roa
File: _L_xxYDd9HQgIUOrytF-lDsl6_g.roa (raw, json)
Hash identifier: VwFWEE+6kv3H64u23nrRhExURB1n21rh6DAkNM0yt+g=
Subject key identifier: FC:BF:F1:C5:80:DD:F4:74:20:21:43:AB:CA:D1:7E:94:3B:25:EB:F8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80275BA01F23641F8EB5F3D8E3EECA1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_L_xxYDd9HQgIUOrytF-lDsl6_g.roa
Signing time: Tue 02 Jan 2024 02:30:53 +0000
ROA not before: Tue 02 Jan 2024 02:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29538
IP address blocks: 185.234.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:75:ba:01:f2:36:41:f8:eb:5f:3d:8e:3e:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbff1c580ddf474202143abcad17e943b25ebf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:3d:2a:2d:20:bc:f7:5a:7b:45:b7:13:25:
33:84:0a:55:fb:30:09:6e:4e:3b:47:53:be:7e:81:
aa:e9:cd:c5:15:a6:a9:10:5c:ec:c2:12:1f:a4:f5:
2d:97:a3:af:82:8e:66:df:07:38:1a:65:95:90:28:
21:3e:73:83:a9:6d:41:0d:a2:5e:f6:a2:a8:af:60:
9c:4e:18:65:06:cd:1c:72:71:e3:04:7d:54:f8:ba:
9c:34:43:1e:53:72:c4:cf:73:dc:9e:97:ba:7b:46:
25:d6:bd:50:b9:e6:80:52:5d:57:dd:32:17:d4:f2:
98:53:20:76:23:f0:e4:43:47:bd:75:1d:b6:63:72:
4e:3e:15:e3:f2:d0:70:f2:a1:f3:72:48:d2:6b:76:
eb:1b:70:c8:19:e6:b1:14:55:c5:e5:33:0b:a5:94:
9e:9e:49:bd:50:32:8a:43:e4:49:91:17:cb:75:f0:
f7:14:4f:b8:c3:49:f8:a1:fd:ef:79:a7:97:d2:ea:
87:72:0a:57:c3:3a:3e:13:13:3b:4b:19:81:ca:fb:
67:05:04:e4:49:79:f5:26:53:a2:48:b8:da:41:a0:
8a:90:ac:6e:9b:ef:10:c9:9f:f6:6d:53:fd:d7:83:
ef:58:4a:ca:f9:23:15:91:ca:e8:9c:6a:ef:8b:00:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:F1:C5:80:DD:F4:74:20:21:43:AB:CA:D1:7E:94:3B:25:EB:F8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_L_xxYDd9HQgIUOrytF-lDsl6_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8e:60:94:fc:60:0c:81:a5:88:6a:ab:e2:14:9f:90:83:e5:
a5:ac:72:f5:96:c5:33:66:e1:e1:53:01:b4:a7:8e:94:c3:38:
66:8a:1f:c2:17:19:e5:53:cb:a1:69:01:6b:68:92:7d:82:5e:
15:64:c3:93:f5:ff:91:ea:58:d0:77:55:f1:a7:00:2e:62:20:
2f:2a:6e:ce:25:41:04:5a:c5:01:44:a2:4b:fa:64:e7:db:db:
fc:86:eb:3e:bf:bb:c5:ae:b3:16:91:88:6b:c1:98:b1:c7:e6:
39:d5:67:74:ac:0f:d9:0e:0b:71:3c:1d:e9:03:4b:e0:0c:83:
ec:a8:b6:a1:fe:b8:e5:04:fe:6c:86:2f:92:67:83:ed:b1:bd:
b1:f2:50:30:f9:ba:07:8e:a0:c9:ec:48:c0:15:ba:f2:82:d4:
5b:9c:9b:09:66:b6:4c:0e:59:1a:fa:9f:0e:93:e7:d2:ed:8f:
58:c2:ea:43:f1:66:da:bd:00:ca:41:e7:d6:24:f9:a6:f2:18:
81:db:b9:d2:0f:a9:9d:58:67:57:fb:9b:e6:0a:b2:c1:7d:1d:
12:1a:10:a7:49:47:e2:ae:5c:b8:aa:19:e9:58:d6:d6:07:0e:
58:d0:4f:1f:7f:64:a9:d0:11:d6:37:df:10:84:6a:e9:ef:07:
db:f6:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:32 2024 by rpki-client on console-fra.rpki-client.org