Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fagZV_MAwNcijZIIHssYhh0oc9I.roa
File: fagZV_MAwNcijZIIHssYhh0oc9I.roa (raw, json)
Hash identifier: xsLAKcPJvV41TUQ3G5RJg7tdJajkniS9P/tAPXTub9s=
Subject key identifier: 7D:A8:19:57:F3:00:C0:D7:22:8D:92:08:1E:CB:18:86:1D:28:73:D2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028CA5ABA050E765FDD3B612DDD61E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fagZV_MAwNcijZIIHssYhh0oc9I.roa
Signing time: Tue 02 Jan 2024 02:30:59 +0000
ROA not before: Tue 02 Jan 2024 02:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 185.206.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8c:a5:ab:a0:50:e7:65:fd:d3:b6:12:dd:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da81957f300c0d7228d92081ecb18861d2873d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:74:ec:f7:28:78:62:7d:00:7d:4d:6b:ee:
8b:30:37:e7:2d:36:ac:e2:9f:f2:29:cf:55:06:2f:
e4:ab:c0:69:88:27:bf:ff:92:79:f9:c6:93:53:34:
c2:ff:00:58:e2:a2:d4:1c:87:63:cf:26:6e:71:5f:
8f:57:86:93:04:7c:57:d8:e4:2e:f2:03:4c:ca:6c:
c3:1a:65:9a:80:1c:12:11:82:c5:87:fb:1c:6b:a4:
f1:7b:87:4a:8a:f4:73:3a:e3:88:7a:8e:2a:ef:ca:
cd:a5:16:96:9d:19:c7:9e:8f:dd:c2:be:3a:43:ad:
3d:e3:67:05:e9:7b:f3:92:6b:fd:02:f7:5f:98:fc:
8b:5e:06:8a:d7:f2:9c:22:e7:4f:85:c6:0d:15:af:
98:78:e6:db:60:e7:13:24:96:75:8e:73:50:1b:a5:
66:d8:a9:71:69:6b:05:ab:b3:53:76:7c:fd:2f:37:
f3:6c:b5:47:dc:64:c9:ea:b5:2b:6f:65:d4:8a:bc:
22:c7:e3:9e:21:53:c3:c2:39:29:fd:fd:9b:a2:a3:
84:d2:ae:f0:ae:79:5d:82:c8:40:2e:d5:6d:43:62:
9e:21:ce:aa:ad:6e:2e:4d:12:e1:2f:66:0f:e2:b4:
e2:06:9b:a0:b7:44:70:96:e9:19:0b:43:a9:f9:7b:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:19:57:F3:00:C0:D7:22:8D:92:08:1E:CB:18:86:1D:28:73:D2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fagZV_MAwNcijZIIHssYhh0oc9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:7e:d8:2a:d8:f4:ad:e2:b1:08:10:53:86:d0:58:d7:de:1c:
3e:64:cc:0c:c8:fb:6c:e0:8e:5f:b6:33:e3:5a:e1:75:dd:98:
72:b6:80:ee:ee:3b:55:05:22:2c:ee:de:5d:8d:29:d7:be:04:
0a:9c:56:b1:eb:08:1f:6a:6b:00:72:64:39:82:62:25:69:00:
4c:8e:c6:71:de:ea:8b:1c:95:f6:28:53:cb:1f:45:f5:da:d7:
de:33:6b:e4:d1:a4:b6:2e:77:88:95:43:7c:fe:13:51:1e:0b:
5c:3c:83:f0:f3:44:9b:7c:e3:a2:0a:5f:d1:04:ff:79:82:56:
80:34:0f:d7:99:76:09:43:6e:ab:07:f0:3c:c7:d8:e7:54:85:
f9:b9:ff:18:6e:c1:e4:7a:46:fe:c1:8b:aa:67:19:f1:2f:ac:
23:b1:6d:8a:3a:2f:a9:b6:c6:df:43:d5:42:2d:dd:7c:4c:b2:
71:39:1b:85:de:df:37:ee:0a:70:c6:3b:dd:db:98:dc:b5:c4:
53:01:72:d5:81:26:9c:4a:91:d1:d2:39:02:2a:7a:fa:01:10:
67:7a:34:69:d1:1e:49:75:75:f2:2c:7b:19:22:45:0a:b3:fb:
43:db:e0:a9:83:54:77:70:ca:52:d6:f3:fe:ef:a2:3a:9c:3b:
c8:2f:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:32 2024 by rpki-client on console-fra.rpki-client.org