Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fnJk5xK7Epda4jERkShSbnijXkM.roa
File: fnJk5xK7Epda4jERkShSbnijXkM.roa (raw, json)
Hash identifier: w6eNho5Cw0InUFd3gVokb+tYJENg5FfCbPxruM4mZ30=
Subject key identifier: 7E:72:64:E7:12:BB:12:97:5A:E2:31:11:91:28:52:6E:78:A3:5E:43
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028630BE5653E64D7D38F7F73592A3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fnJk5xK7Epda4jERkShSbnijXkM.roa
Signing time: Tue 02 Jan 2024 02:30:57 +0000
ROA not before: Tue 02 Jan 2024 02:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197795
IP address blocks: 185.230.55.0/24 maxlen: 24
185.230.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:86:30:be:56:53:e6:4d:7d:38:f7:f7:35:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7264e712bb12975ae231119128526e78a35e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:5b:f9:9d:a9:ea:fb:de:06:75:f1:4f:96:
e1:f5:98:f8:bb:ab:9a:1c:ee:a5:f0:9d:8d:ba:52:
54:7e:06:3b:00:b8:de:d3:f8:ad:11:05:4a:95:79:
29:1b:36:75:04:27:eb:00:ce:77:0c:dd:3c:4a:7d:
65:1f:56:15:b8:bd:e4:03:bc:02:54:6e:6e:ed:a9:
66:1d:2a:cc:f9:95:52:b5:4d:7e:e8:59:b0:61:31:
0c:d8:6d:36:58:2b:6c:48:af:9a:2e:45:60:e0:01:
54:93:e4:32:ac:8d:d1:b4:9f:f9:c4:9e:5b:6c:2b:
e3:e9:8b:7a:ff:57:06:7e:53:09:52:04:e5:dd:4e:
f1:ca:6d:20:5a:c1:6d:11:c9:53:81:67:2d:f7:5d:
dc:0a:aa:77:62:55:bb:f2:4f:ea:31:80:dc:a4:1f:
b6:cf:ec:0b:c7:41:76:6d:e3:25:aa:0f:08:c5:00:
0c:c0:03:6e:db:ae:67:e4:f6:b2:42:ff:a6:02:9a:
8b:7d:c7:10:ae:93:f6:e5:a4:56:63:0c:3b:dd:b7:
fa:ac:fd:bc:f6:d8:fb:02:2d:87:3e:fd:82:f7:b4:
89:f5:89:34:16:05:7e:c4:6b:07:62:6a:03:3a:8d:
28:cf:1c:6f:8d:43:ad:d3:be:0f:8c:fd:a0:b7:fe:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:64:E7:12:BB:12:97:5A:E2:31:11:91:28:52:6E:78:A3:5E:43
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fnJk5xK7Epda4jERkShSbnijXkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
185.230.55.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cc:1d:7e:8c:24:a2:cf:86:9b:b4:9c:a6:4b:8d:9e:2c:72:
c4:6f:c4:55:de:fb:13:fc:d3:70:07:ec:f2:16:40:c6:52:8c:
12:8d:f9:99:de:63:0e:a7:d5:39:96:ca:be:4f:d8:f1:9d:11:
3e:a1:16:b9:b0:59:64:b5:80:10:33:31:6d:44:9e:15:a0:64:
9e:78:2e:63:38:e7:c5:f0:ce:b6:20:da:3b:5b:81:88:e4:bd:
56:b9:70:dc:df:d2:ef:03:f8:65:9a:0e:8c:cf:3d:47:50:fc:
3d:7e:e5:b4:b8:36:96:ec:fa:9c:3d:4e:86:7d:68:a7:d8:d5:
64:d7:9c:9c:c1:e6:3b:8a:ad:01:72:dd:3c:fd:45:bc:ac:08:
d3:72:30:f1:ef:fe:89:1b:4c:0f:ab:64:66:bf:fa:3e:61:77:
fa:b6:ab:c3:23:6d:a8:ad:c7:ae:33:34:12:42:b1:dd:ea:9e:
0e:fb:b1:59:1b:62:5d:0c:ae:3d:fa:16:09:1f:20:50:bf:f2:
8b:9a:b6:b6:fa:7e:53:49:22:6c:32:54:e3:f5:1a:a4:13:f5:
86:c1:9c:31:3e:60:00:fc:a1:be:b4:70:8b:0d:a8:02:ea:8c:
3f:88:91:c7:ff:a9:56:9c:0d:ec:57:fd:d0:dc:2a:ff:37:c4:
c8:91:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:52:49 2024 by rpki-client on console-ams.rpki-client.org