Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fssjfnfVkLXc2sTnyyxUaZ4k2ZU.roa
File: fssjfnfVkLXc2sTnyyxUaZ4k2ZU.roa (raw, json)
Hash identifier: kdzIr6AIk8C0sRux4Gtyq8dwOYd1n85g2egICjj8XjE=
Subject key identifier: 7E:CB:23:7E:77:D5:90:B5:DC:DA:C4:E7:CB:2C:54:69:9E:24:D9:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8029F0D957A559DBAA297D199FDEE6D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fssjfnfVkLXc2sTnyyxUaZ4k2ZU.roa
Signing time: Tue 02 Jan 2024 02:31:04 +0000
ROA not before: Tue 02 Jan 2024 02:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 185.234.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:9f:0d:95:7a:55:9d:ba:a2:97:d1:99:fd:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ecb237e77d590b5dcdac4e7cb2c54699e24d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:d7:5d:43:b2:17:99:c9:0f:b6:b0:42:7f:
ac:50:92:0e:e6:f3:1c:3b:aa:f0:56:a9:5f:a6:c0:
4a:08:75:8f:c7:2c:41:d9:9e:94:01:2f:c8:79:c8:
d7:41:f8:6a:e6:7f:e5:6f:fc:b7:5d:c8:63:45:60:
b3:6b:00:a3:fc:88:1f:a2:01:86:48:0d:0d:15:c6:
21:e3:f8:5f:c1:11:42:67:29:12:49:35:1e:ba:ee:
df:9e:05:66:de:d1:31:12:73:30:5c:aa:2a:bc:09:
d4:95:07:35:2a:ba:46:c9:b6:86:c9:01:41:5d:21:
ec:20:fc:2a:e5:8c:65:40:20:ba:9c:e9:1a:36:44:
0e:77:5d:8e:7c:99:32:3b:bd:6d:b6:fd:2b:c7:12:
45:2b:c9:15:11:fe:16:65:09:33:b7:50:34:37:0c:
2d:98:fe:bf:63:ff:0e:97:91:df:12:4f:6a:ec:60:
c9:4f:63:6b:af:d0:64:84:55:3f:34:45:3f:86:7d:
ee:c5:9b:ad:c6:3f:0d:68:ad:e4:06:55:61:ef:04:
51:65:2c:82:3c:17:54:af:b8:31:ac:1f:e8:db:6d:
a2:3d:56:5a:3e:26:d0:3a:84:88:fb:85:e5:a3:3e:
af:ea:48:d1:db:9d:9f:f5:b5:49:cd:45:be:38:8d:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:23:7E:77:D5:90:B5:DC:DA:C4:E7:CB:2C:54:69:9E:24:D9:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fssjfnfVkLXc2sTnyyxUaZ4k2ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7e:ec:c9:82:ae:15:2d:4b:fd:4e:08:f6:90:70:73:f1:64:
81:f4:00:b8:ce:40:fb:20:f4:10:48:a6:3b:b4:5d:69:05:16:
f5:1e:e2:0b:2a:ca:53:a3:98:8d:bc:e2:55:7a:f5:75:9c:02:
53:3a:26:95:24:60:75:7c:68:4f:e5:39:3d:8f:ef:aa:91:cb:
80:d1:4b:b3:e1:4e:6d:a2:02:83:99:d8:e1:53:ea:57:c3:9d:
6e:e0:e6:19:f6:c2:98:ed:bb:8e:57:cd:3f:39:6a:5a:bb:79:
13:8d:2c:7c:8f:e2:4a:06:97:41:04:33:13:0e:99:3f:f4:e0:
8f:cc:68:26:d6:7d:56:03:11:d8:8b:c9:15:e1:a6:21:a0:e0:
27:a6:05:18:53:3f:f9:31:cf:20:e3:f9:26:b8:1d:b8:2e:f4:
9c:01:23:0c:b9:03:e6:84:cb:0e:21:15:bf:79:93:e2:3d:04:
1d:d6:7e:73:6b:88:eb:b8:25:14:35:29:f1:91:d2:16:aa:0e:
7b:35:ab:78:5c:42:8d:49:f4:d7:14:07:d6:6b:c0:77:52:4d:
5d:06:0b:a5:33:d5:c0:71:14:26:d0:b8:19:9f:82:96:f1:d1:
a4:06:01:91:7a:3f:b7:17:61:37:90:0f:e4:52:ec:1e:bb:eb:
66:cf:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org