Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aIiV-xIDK4de2aOZQ4nM9hG4UlM.roa
File: aIiV-xIDK4de2aOZQ4nM9hG4UlM.roa (raw, json)
Hash identifier: giFh6ajwnAWcUcGksdgS0YmydtN7UkwrDcvwUWrNdlQ=
Subject key identifier: 68:88:95:FB:12:03:2B:87:5E:D9:A3:99:43:89:CC:F6:11:B8:52:53
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018D121EA34B8E957CEC5B745224F8027D7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aIiV-xIDK4de2aOZQ4nM9hG4UlM.roa
Signing time: Tue 16 Jan 2024 11:53:34 +0000
ROA not before: Tue 16 Jan 2024 11:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 194.76.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:1e:a3:4b:8e:95:7c:ec:5b:74:52:24:f8:02:7d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 16 11:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=688895fb12032b875ed9a3994389ccf611b85253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7f:a8:99:11:29:8c:d2:56:7d:7e:92:e3:de:
cc:2d:d7:7d:55:80:13:4a:44:79:3d:46:df:8f:a3:
79:e8:fd:e3:49:df:76:3d:09:f9:a5:67:f6:62:bf:
c2:d9:b1:28:3f:b5:5b:06:41:17:4f:2a:13:7d:a6:
4b:41:54:e4:2a:a8:2f:3c:11:e7:4f:d7:9e:28:bf:
d7:cd:0d:6a:8e:47:71:57:41:73:81:3f:5d:aa:c3:
32:ed:bb:4b:29:a5:7b:98:6e:1c:36:db:4e:ea:15:
35:6d:49:fd:29:e2:d3:b2:13:02:80:6a:d9:67:23:
41:b2:3a:36:fb:e1:54:38:f1:bb:f1:28:a7:e9:7d:
17:67:d2:b1:4c:1a:70:2c:9a:b9:8b:37:b4:df:3f:
32:df:b5:77:2e:61:bb:e8:e6:72:b2:e2:47:03:da:
7d:2a:c3:62:39:81:37:07:eb:4f:56:9f:ce:22:64:
22:64:72:c3:d2:3a:1d:a8:71:63:db:ec:0c:d6:19:
75:02:3b:b8:bd:99:47:71:c2:bb:7c:e8:1f:7a:eb:
d1:47:07:9e:d9:6c:29:1f:a8:e6:29:16:40:40:ee:
40:7d:1f:0e:ab:a0:5a:cb:6b:32:dc:72:5b:19:be:
5c:b7:be:5c:56:85:aa:dd:2e:54:de:1e:1a:d7:84:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:95:FB:12:03:2B:87:5E:D9:A3:99:43:89:CC:F6:11:B8:52:53
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aIiV-xIDK4de2aOZQ4nM9hG4UlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.173.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fd:99:87:c9:ae:ab:27:4d:29:fc:15:6c:a3:58:4c:93:9c:
00:e2:e3:a9:f8:12:ca:2d:bd:13:86:cb:31:fe:48:f6:82:b9:
6d:09:f0:3a:a4:87:ae:33:63:df:9b:59:63:d4:14:cd:95:54:
87:77:0e:07:b8:58:09:27:44:30:2b:f7:ae:ae:da:39:5b:b7:
89:40:c2:36:93:12:40:dd:c0:9a:d7:b0:d1:a8:86:b7:22:cf:
e9:47:fc:0a:50:57:7a:f2:fb:0c:ca:12:0a:a2:75:91:81:1a:
8a:7c:c5:33:41:9a:49:8c:d6:29:13:4e:80:d9:43:c1:07:ac:
13:a4:fe:f1:a5:20:7b:30:8a:7e:56:e7:61:43:03:54:0e:4a:
3e:e5:ce:c8:d7:fe:dd:fa:1c:e8:43:72:a2:a7:36:3e:1a:d5:
f0:c1:d2:ab:45:67:01:d7:5a:c8:e6:e3:65:a0:1e:60:22:d5:
31:f7:b2:13:32:fd:81:a1:7d:fa:cc:74:92:a3:51:f3:63:55:
b2:83:96:49:7b:47:aa:39:10:4a:22:ca:18:93:0b:5a:9a:b1:
92:38:6b:b5:7b:85:a3:2b:ef:59:e6:ff:94:e3:48:67:58:06:
59:8f:fa:3f:ed:43:03:ca:b0:a4:a8:06:65:ae:73:66:ea:39:
83:08:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org