Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fmJ3a_b-qHkwot3jokbUCN5bLKQ.roa
File: fmJ3a_b-qHkwot3jokbUCN5bLKQ.roa (raw, json)
Hash identifier: eMbcKzQoCcDOkmZRVddtRTyMZH9w/r89A0PAwtlO064=
Subject key identifier: 7E:62:77:6B:F6:FE:A8:79:30:A2:DD:E3:A2:46:D4:08:DE:5B:2C:A4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802919F297D0EFE29D86606C691EE9B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fmJ3a_b-qHkwot3jokbUCN5bLKQ.roa
Signing time: Tue 02 Jan 2024 02:31:00 +0000
ROA not before: Tue 02 Jan 2024 02:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210574
IP address blocks: 185.223.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:91:9f:29:7d:0e:fe:29:d8:66:06:c6:91:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e62776bf6fea87930a2dde3a246d408de5b2ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:aa:41:28:38:d4:2d:58:8d:ef:5c:ba:30:
c7:30:1a:e5:8e:29:41:dd:fb:9d:15:35:1a:c6:0b:
8d:90:25:f5:69:6e:86:a2:42:49:2d:64:b4:2d:2d:
53:c8:92:96:ea:cc:7b:29:c2:b0:d7:0b:e6:ca:b8:
46:11:91:f3:a4:51:7f:b7:4f:79:06:5c:77:7c:e5:
11:25:84:48:42:f5:e9:ba:fb:3c:1f:77:af:8f:c3:
51:0c:4d:fb:e2:48:ce:b3:c0:3d:a4:49:04:64:f3:
7f:d9:10:58:d3:01:bf:72:f8:1b:6c:07:9b:d7:54:
3c:b1:ef:a2:1c:90:3d:b0:0b:9e:b0:a4:73:d1:0a:
0c:df:2e:b5:fd:aa:d0:bd:bc:eb:cc:28:0f:7b:07:
d5:3c:6a:61:0c:6b:36:36:7e:df:aa:75:e4:b8:9c:
b8:1e:45:6d:db:92:00:69:15:82:74:1a:c6:a9:68:
60:b2:e1:a3:4f:54:a0:37:78:a8:75:9c:c0:8a:0b:
00:59:ae:39:96:44:92:64:a4:be:ff:2e:6c:52:1f:
a0:69:2c:c4:a7:10:57:ec:89:70:18:3a:d5:09:6e:
42:29:06:ed:2c:cd:44:3b:b3:44:3a:13:ca:cb:6f:
68:f8:77:8f:99:8f:2c:44:b4:5a:d6:1b:84:de:30:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:77:6B:F6:FE:A8:79:30:A2:DD:E3:A2:46:D4:08:DE:5B:2C:A4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fmJ3a_b-qHkwot3jokbUCN5bLKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2e:f4:2c:6a:36:71:34:1d:f9:d9:ee:6d:d4:f0:34:df:54:
04:02:d7:13:91:67:c4:ef:92:8b:91:13:7b:e9:4a:a0:8e:ba:
14:f8:b8:80:22:dd:72:98:56:b3:13:4e:eb:da:b5:a5:68:32:
dd:dc:c5:8d:98:ba:43:a4:a4:fb:d6:b5:25:c2:eb:c5:a8:b3:
6a:14:c7:09:c0:8e:02:fe:c4:0c:52:0d:b8:fb:0f:63:bb:ee:
6d:6d:11:74:34:fb:e3:ee:8f:3e:8b:39:24:3b:d8:10:23:15:
92:b1:2d:08:e7:01:f0:73:61:5a:85:8d:71:d0:92:b4:68:7a:
a0:37:29:59:c5:79:e6:f9:47:25:63:ad:de:d3:1d:39:58:9d:
34:39:a4:ab:eb:94:74:ac:2c:39:ea:11:77:de:d9:3b:a5:06:
62:1f:16:ab:77:8a:ba:25:a5:04:45:23:1d:1b:c3:09:f3:cc:
cc:8c:26:ca:f5:cf:71:4e:c1:8d:9e:2d:58:e8:a4:e1:7d:d8:
d7:39:97:84:ad:49:31:03:94:14:f4:26:0b:96:a7:1b:b1:6f:
00:83:2e:6e:7e:52:b7:9d:70:43:9f:91:ba:9d:11:39:2b:22:
b4:d7:46:0f:40:f1:18:07:27:8b:b1:5b:bd:35:9c:7a:cf:10:
8f:ab:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:43:58 2024 by rpki-client on console-ams.rpki-client.org