Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dcNENlA4OXbOkAT_L9rndAVzDCQ.roa
File: dcNENlA4OXbOkAT_L9rndAVzDCQ.roa (raw, json)
Hash identifier: gODcXMXed2kl7LG8SSavHizrV2sbOXM5fO9UUj0Oi/I=
Subject key identifier: 75:C3:44:36:50:38:39:76:CE:90:04:FF:2F:DA:E7:74:05:73:0C:24
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80274539BDA4D6C240FB31DB25CAF1D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dcNENlA4OXbOkAT_L9rndAVzDCQ.roa
Signing time: Tue 02 Jan 2024 02:30:53 +0000
ROA not before: Tue 02 Jan 2024 02:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 185.255.126.0/24 maxlen: 24
185.194.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:74:53:9b:da:4d:6c:24:0f:b3:1d:b2:5c:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75c3443650383976ce9004ff2fdae77405730c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:87:17:43:fd:5d:9b:f2:fc:c3:e9:81:96:
73:ca:e1:9b:04:be:c2:57:94:67:c4:9d:11:f2:47:
cc:c6:d4:3a:1a:53:4b:b2:c5:11:70:f7:06:0c:8c:
3e:59:5c:72:4b:14:81:0b:bc:1f:59:fa:fb:71:32:
b5:d6:89:4c:0d:b1:d7:14:00:68:97:e2:73:13:7e:
d1:88:cd:b9:fb:ff:a7:1c:51:6a:ff:d4:19:22:b3:
5b:5f:0b:2f:bd:0c:20:3d:06:da:ce:6c:81:eb:ea:
3f:34:e8:42:fa:02:41:77:ff:9a:c7:25:d7:fa:70:
9f:d5:cb:e4:87:c7:e6:3c:2f:a0:51:91:3e:7b:c7:
62:a5:22:3f:27:91:1e:62:3d:72:49:29:3d:b0:e4:
b2:4c:93:25:71:7b:51:69:80:c7:8f:05:cd:ec:6c:
cc:a2:45:2e:53:36:27:31:cf:52:e3:25:41:95:87:
af:34:57:8d:6d:be:6d:d4:1e:23:da:29:b1:fc:0a:
e0:6f:6f:ec:3c:e1:7f:42:8f:be:d7:91:fb:aa:55:
4e:f3:14:55:2b:0d:17:9c:bb:4d:e6:0a:b8:d9:6a:
b2:25:2c:f2:ea:bb:4b:74:4b:dd:47:ed:71:5f:af:
a4:2f:95:8b:57:6d:a1:4d:80:16:15:e5:de:7d:9f:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:44:36:50:38:39:76:CE:90:04:FF:2F:DA:E7:74:05:73:0C:24
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dcNENlA4OXbOkAT_L9rndAVzDCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.178.0/24
185.255.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:e9:12:e9:36:31:b3:9f:05:c7:e9:4a:37:6f:84:62:52:
fa:4f:d2:56:b1:62:91:1f:5a:db:d3:2b:ed:a5:92:25:89:d8:
12:fc:16:29:64:c5:58:42:a1:cb:ab:64:4b:54:1d:95:21:ef:
a6:d1:5b:80:bb:1a:49:e5:41:7c:7e:0a:60:46:ae:d5:5c:46:
88:98:77:72:15:4c:08:a8:71:a9:27:61:d7:37:1b:ef:e8:b2:
bb:c7:7c:de:9f:cc:b5:8f:10:16:5e:3b:b6:ef:cb:c5:bf:5b:
0c:4e:2c:57:e0:32:68:79:a4:e1:45:83:ce:5b:1c:e2:97:e7:
10:d9:13:20:b9:b8:0e:9e:b5:c5:6e:99:3e:7f:69:d6:08:22:
84:6e:30:45:ba:8a:6e:16:1b:ef:8b:04:be:05:99:a0:cf:84:
9f:05:34:d6:88:e7:12:09:36:eb:59:0b:61:36:10:e2:30:02:
de:ef:f5:c8:53:82:be:2d:5b:67:87:44:a3:78:c2:a9:48:3c:
09:3b:67:b0:b1:56:df:48:23:77:c3:a9:5a:06:54:c3:06:55:
37:09:3f:31:b4:46:7f:e9:eb:20:db:ea:80:3f:1f:af:b3:5c:
15:c4:dd:d1:7b:08:4e:8a:55:8d:86:d0:0b:83:1c:f9:8a:a3:
7f:4d:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:53:08 2024 by rpki-client on console-ams.rpki-client.org