Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h3AneOHyuVrToGrRnIhF3ptn54g.roa
File: h3AneOHyuVrToGrRnIhF3ptn54g.roa (raw, json)
Hash identifier: wXkKDc3VQSF1PrjGqHMz7JMagN/WiK5iChExqshFoxo=
Subject key identifier: 87:70:27:78:E1:F2:B9:5A:D3:A0:6A:D1:9C:88:45:DE:9B:67:E7:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8029BAE1F0088C7537045988F4FEFFB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h3AneOHyuVrToGrRnIhF3ptn54g.roa
Signing time: Tue 02 Jan 2024 02:31:03 +0000
ROA not before: Tue 02 Jan 2024 02:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216474
IP address blocks: 185.228.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:9b:ae:1f:00:88:c7:53:70:45:98:8f:4f:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87702778e1f2b95ad3a06ad19c8845de9b67e788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:ac:d4:8a:fe:5a:8a:2e:e7:6f:aa:fb:9e:
29:57:00:58:59:88:08:9c:4f:98:3b:25:d2:9c:38:
ec:32:9d:b1:d3:18:88:70:ce:a4:ef:8d:f0:e5:f3:
67:11:36:42:81:00:10:f7:83:de:95:95:44:e2:66:
7a:8c:7f:80:e6:ec:ec:ba:45:77:b8:17:24:35:2e:
84:29:08:1f:75:56:1e:f4:6c:a9:77:c3:a2:c0:82:
c4:0d:2b:77:06:62:af:80:bb:93:da:5f:85:cc:7b:
d6:18:be:4f:51:a5:ee:ed:d8:9a:d6:73:e2:9f:4e:
2a:4e:a3:29:cd:12:5e:bb:af:2c:f4:fe:b1:cb:5c:
37:ca:86:cd:29:6a:36:31:9d:19:64:a5:36:e2:3f:
1a:0c:b5:78:32:0e:77:d6:92:61:6e:47:02:fa:ea:
4d:74:62:5a:52:03:3e:58:64:95:c2:cc:6b:38:7a:
8d:bc:e8:9e:17:bc:3e:78:8f:b5:a2:18:56:72:30:
fc:00:5f:0f:0f:77:23:2d:09:79:98:3a:33:b6:f3:
b6:ee:10:0d:1c:d7:2a:a2:84:81:fb:6c:a4:3e:11:
6f:2b:f1:5e:87:c2:ba:a2:b0:bc:b0:90:71:ef:1c:
03:f6:79:3c:a4:64:d5:4f:ec:25:da:a0:12:c2:1a:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:27:78:E1:F2:B9:5A:D3:A0:6A:D1:9C:88:45:DE:9B:67:E7:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/h3AneOHyuVrToGrRnIhF3ptn54g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.75.0/24
Signature Algorithm: sha256WithRSAEncryption
af:40:40:3e:b1:b1:90:2a:0e:1b:ac:53:7f:e0:50:e6:b2:65:
9b:b6:ae:d1:33:59:f8:4a:15:92:50:e7:bb:15:d0:a0:fb:3b:
84:4b:60:a7:d7:e7:ad:68:76:69:b0:bc:f2:e5:3c:55:e8:2a:
43:74:77:bf:e5:1d:a8:93:53:a8:0f:a8:e4:15:f3:0f:fb:24:
60:e2:c7:ee:ea:6f:8e:dc:e9:3c:65:91:20:ea:c7:fb:16:3e:
68:8a:63:6e:eb:34:09:29:12:20:4f:62:f3:5c:98:d8:cf:ec:
6b:6a:c6:da:e1:20:6f:3c:ca:32:56:6c:be:05:57:c0:76:0d:
75:18:6e:00:8b:37:fb:95:84:68:f9:1a:5f:f5:36:c8:29:44:
2c:7f:c6:7e:bb:ee:bb:17:39:b8:10:5e:74:d6:b9:f4:85:78:
e0:0f:f3:cc:6f:85:26:75:37:4d:fc:cc:1a:0c:e2:04:19:9f:
7d:56:51:9a:58:8d:a2:88:1d:40:cf:80:7f:70:af:04:3b:3e:
d4:10:51:3a:6c:7f:ee:ae:8e:62:69:b6:60:7e:63:ce:f1:8b:
52:36:c7:fd:87:54:8c:7e:d3:3b:2d:f5:25:bb:fa:a8:19:9a:
ea:d6:a9:0c:35:1a:eb:66:9b:6a:64:bd:b1:79:3b:9d:49:38:
db:da:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org