Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/audhUFzu3OfMRHmnudnw4hdIHhw.roa
File: audhUFzu3OfMRHmnudnw4hdIHhw.roa (raw, json)
Hash identifier: 4wd0KDvP5xHz06TPBtdeIursIA38Ttc/SyLyoOiD3qU=
Subject key identifier: 6A:E7:61:50:5C:EE:DC:E7:CC:44:79:A7:B9:D9:F0:E2:17:48:1E:1C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802943A89C7753283CBF894C0FB998A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/audhUFzu3OfMRHmnudnw4hdIHhw.roa
Signing time: Tue 02 Jan 2024 02:31:01 +0000
ROA not before: Tue 02 Jan 2024 02:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:94:3a:89:c7:75:32:83:cb:f8:94:c0:fb:99:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae761505ceedce7cc4479a7b9d9f0e217481e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:c6:aa:f7:bd:3b:e5:04:78:b6:62:2c:cd:
fb:de:ba:30:09:c6:c6:8a:d5:0d:18:17:db:e1:dc:
10:eb:25:d7:28:2e:84:1e:10:be:8e:49:e2:fd:fb:
29:15:31:65:a0:8d:32:8e:22:76:14:fc:60:7e:c6:
49:eb:61:b1:5c:5c:e6:05:bf:3e:49:bf:0d:f3:60:
7e:7c:d5:e4:c7:17:39:4b:8d:5c:80:7e:91:eb:40:
e4:83:be:f6:e3:9f:75:17:2a:63:a6:d2:2f:b6:52:
f1:4a:64:de:42:69:3b:52:46:18:21:2a:a3:46:ec:
b8:1e:ae:a7:89:aa:ec:d4:20:3b:47:dc:5a:a2:cd:
d3:fe:5e:76:00:4e:66:bd:4a:a8:9b:72:17:c9:eb:
87:8d:81:6e:a3:dd:6b:ba:2e:0c:f0:6c:5b:0a:35:
df:20:bf:9e:86:16:5a:66:64:b0:0c:29:71:ee:4e:
2f:2b:11:f9:21:7f:ec:4c:6e:a5:57:ae:47:dc:b2:
fc:cd:18:58:f2:95:1f:17:8c:7a:a4:b6:d4:d4:84:
b9:ea:08:92:be:8a:78:0a:7e:51:a9:66:30:f7:fd:
4b:20:85:bd:c2:8e:70:bd:08:fd:39:15:1f:6c:fc:
de:b9:27:96:f6:41:ff:ab:cd:9e:33:d6:b3:11:a4:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:61:50:5C:EE:DC:E7:CC:44:79:A7:B9:D9:F0:E2:17:48:1E:1C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/audhUFzu3OfMRHmnudnw4hdIHhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c0:22:19:2c:d9:79:f7:53:63:c0:17:f2:59:6f:08:47:cb:
1a:d6:c1:95:1b:58:60:7b:59:67:90:b0:a7:d0:50:d9:f6:74:
d2:43:de:29:8a:24:a1:59:56:47:dd:3d:d9:70:8d:48:ae:0f:
72:a0:12:d3:1a:c0:fa:e6:73:4b:5a:23:68:cd:87:4d:af:2f:
25:e8:42:64:a2:42:18:22:cb:8f:08:7b:a0:4a:a4:39:44:92:
d5:d4:a9:6d:80:96:31:c3:3d:09:6e:fa:ed:a2:73:46:e8:83:
eb:29:d1:5d:26:7f:75:9c:75:91:13:4c:67:fd:9c:8f:50:ff:
28:2f:f3:ab:df:b6:0d:6d:73:57:0f:40:2d:78:a3:fd:57:ff:
b1:e6:1e:1b:6b:86:ff:91:55:ab:ac:70:83:68:e9:97:e4:f9:
b6:ad:c3:9f:a5:3f:63:76:63:83:f8:a6:20:35:24:b9:bf:8b:
f2:15:4a:53:79:fc:b8:5b:ce:9c:1f:09:04:18:10:15:9d:50:
fc:1e:9c:f7:ae:44:0c:99:27:53:89:87:04:9e:e6:00:c3:c6:
ee:c0:96:d3:84:f8:e8:92:cd:bf:4c:e0:ec:e3:7e:e3:b5:d9:
e9:65:04:fe:44:1a:fe:5c:e7:f8:e2:87:e3:4b:a5:4e:65:bb:
aa:68:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org