Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fU8EcbtGZAW3I41KpjIAIYQWd_Q.roa
File: fU8EcbtGZAW3I41KpjIAIYQWd_Q.roa (raw, json)
Hash identifier: VoAl2e7mm31dqrjNmnk50y9MI888aiSuX4zXB/E1yV8=
Subject key identifier: 7D:4F:04:71:BB:46:64:05:B7:23:8D:4A:A6:32:00:21:84:16:77:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191B370D942F03850BAF47BFB86CDC5A5E5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fU8EcbtGZAW3I41KpjIAIYQWd_Q.roa
Signing time: Mon 02 Sep 2024 15:53:22 +0000
ROA not before: Mon 02 Sep 2024 15:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398452
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:70:d9:42:f0:38:50:ba:f4:7b:fb:86:cd:c5:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 15:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d4f0471bb466405b7238d4aa6320021841677f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:b7:d7:70:4d:ea:6f:28:d2:1c:ac:2d:d7:
27:8a:5a:80:76:ae:8b:ff:ff:0a:1a:b4:d8:10:f8:
82:76:b5:37:05:50:73:2b:99:a1:a6:17:42:cf:e6:
d5:af:9f:34:6f:0d:83:7c:8a:97:87:7f:63:28:cc:
7f:a9:33:1b:ef:41:55:d6:f4:b9:ab:fa:52:51:54:
80:19:c5:e7:14:86:9d:4b:d0:b6:47:25:b8:94:24:
bf:f7:ad:ec:c5:85:da:f3:91:6d:ef:84:87:1c:b5:
6c:b5:0c:d7:fd:3e:41:ed:b0:7c:16:ac:c9:ed:8f:
bc:c9:95:44:2a:dd:0e:5a:0a:00:a0:0f:a7:4a:5e:
7a:56:e4:51:f1:ba:36:cc:a2:db:a7:41:42:7e:df:
f0:2e:f3:16:26:23:26:33:8e:f1:09:4d:55:ee:90:
ce:fe:53:c0:0d:3b:cb:26:70:1e:7b:73:9d:2b:01:
23:f9:a1:71:48:05:98:2c:2b:17:ff:b1:84:19:21:
a6:af:de:35:f7:da:d8:e1:3a:1c:4b:cd:22:10:dc:
1f:d0:f3:78:0a:41:85:2a:6e:13:86:b4:e4:34:87:
bc:47:c2:ee:e3:fd:85:31:cd:fc:ed:57:ec:74:b6:
18:3d:e8:f6:6e:07:1b:32:ac:d3:43:7d:86:81:12:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:04:71:BB:46:64:05:B7:23:8D:4A:A6:32:00:21:84:16:77:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fU8EcbtGZAW3I41KpjIAIYQWd_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:87:40:3b:c7:39:be:5d:26:c5:93:c0:23:83:95:ec:8d:2f:
2f:82:78:d3:4f:51:7e:14:e0:1f:7d:ef:f4:1a:f4:6b:03:91:
20:b3:b5:77:3e:f1:97:8e:ad:43:8f:8b:a1:ad:e0:de:90:09:
c2:1a:72:b4:99:c6:ab:a7:9f:87:85:a1:8c:25:8b:7d:54:40:
bd:a8:40:27:32:cc:08:09:17:9e:c9:48:e7:1a:59:45:8f:38:
fb:34:07:56:0a:1e:ea:ab:26:5d:e1:6a:1b:77:6f:4c:a4:8b:
ba:59:e5:ee:23:6e:3d:36:1d:3a:0a:2f:fd:57:fb:b7:c6:59:
bd:31:5c:d5:17:d2:13:a5:b2:de:0e:3a:44:19:98:86:1c:30:
47:8a:ea:44:d8:96:3a:05:3c:21:5a:bd:fc:2c:60:97:30:bf:
00:5a:60:7d:7b:2f:e0:e5:22:5b:b7:9d:03:02:71:e4:ef:38:
e5:3e:25:41:d3:c9:1e:f3:58:a0:7d:31:78:e9:59:bd:6e:75:
12:53:01:04:8e:c9:ad:0d:18:54:72:7c:16:fe:38:c2:92:8c:
87:db:ad:37:05:c9:ba:51:71:c0:67:e2:bb:5c:83:b0:96:69:
87:1d:f9:73:16:99:1e:7a:08:79:5d:11:00:f4:3b:81:cb:6e:
2d:cc:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:58:25 2024 by rpki-client on console-ams.rpki-client.org