Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jNDRQ_JZgP9AYeSqPfGA1IR3cAc.roa
File: jNDRQ_JZgP9AYeSqPfGA1IR3cAc.roa (raw, json)
Hash identifier: FaFkUYLdC36f73ELFYSeULOmnjGGG8y46BEgkYvUw7o=
Subject key identifier: 8C:D0:D1:43:F2:59:80:FF:40:61:E4:AA:3D:F1:80:D4:84:77:70:07
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01932FE533A012C7CED20AAD3E6ECC7B140D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jNDRQ_JZgP9AYeSqPfGA1IR3cAc.roa
Signing time: Fri 15 Nov 2024 12:56:10 +0000
ROA not before: Fri 15 Nov 2024 12:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200088
IP address blocks: 185.226.106.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:e5:33:a0:12:c7:ce:d2:0a:ad:3e:6e:cc:7b:14:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 15 12:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd0d143f25980ff4061e4aa3df180d484777007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:11:e0:9e:a6:57:27:f8:75:ee:08:59:57:
56:f2:3d:3e:0c:f9:13:39:f6:a9:e7:de:34:f1:c4:
1e:3a:e6:c9:56:a7:11:80:d2:d9:be:9d:0d:e9:c5:
d3:b6:00:9c:72:31:96:76:d1:8a:dd:ab:4c:ff:63:
dc:1d:bb:11:3f:cd:51:c1:4a:87:99:12:f1:7e:d0:
76:6a:fb:b7:8f:28:53:eb:9e:b1:c6:ab:6b:6b:53:
49:3c:6c:51:75:57:a4:57:51:eb:ed:59:c0:f7:cf:
c4:7e:9e:54:fd:8a:17:2b:10:58:d3:01:c8:3c:8f:
7e:ef:2d:8c:25:9a:66:f1:0c:5d:61:2a:79:11:64:
1e:b5:bd:4b:11:87:76:d9:bf:85:02:ab:f0:e7:e0:
26:87:1f:b0:19:91:94:ed:63:e3:65:fd:8c:31:98:
12:24:0b:20:ea:87:f8:03:9b:ce:20:93:9d:14:a5:
0d:6a:bb:17:0b:cc:4a:4a:af:6f:31:06:f3:e2:a2:
99:8d:7d:85:8f:cd:b7:de:2b:75:d1:7f:d7:01:b6:
1b:9f:e3:63:2b:fa:0f:e9:90:a0:b5:d2:d5:67:f1:
f4:74:29:fd:03:c5:8b:95:48:61:9a:1c:8d:76:70:
e8:f9:9b:dd:c5:35:c7:58:b6:b3:12:91:4d:11:52:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:D1:43:F2:59:80:FF:40:61:E4:AA:3D:F1:80:D4:84:77:70:07
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jNDRQ_JZgP9AYeSqPfGA1IR3cAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
185.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f4:77:8d:1c:3e:34:5f:2b:a4:5b:85:77:54:83:7b:a9:0c:
23:d6:ed:49:0f:99:cc:cb:03:5a:67:8b:b7:da:69:9e:e2:a3:
e7:8d:bf:a9:da:e0:32:66:c9:45:8f:96:7d:c2:f2:8e:1f:99:
10:16:16:0c:78:bc:b0:dc:30:7a:59:38:9d:87:04:77:c7:bc:
c9:a4:87:99:50:0d:45:f5:8f:15:be:ea:99:9a:fc:72:49:5f:
00:dc:37:90:d2:07:00:da:71:30:c5:e8:e5:26:ee:77:38:cd:
ed:2f:94:26:c8:0c:0f:d2:98:7d:55:78:dd:b6:c1:a0:4b:c5:
b9:ac:2d:72:c7:14:56:aa:47:a3:82:94:e8:2c:7a:1f:04:a3:
79:ad:ab:20:1f:33:cd:57:a1:ba:ef:86:1f:c6:de:72:d7:8b:
3c:08:1d:e4:c7:a1:ca:46:cf:83:1c:b3:dc:58:6f:62:0b:65:
0f:0c:df:85:d6:ee:aa:0c:c4:c8:a1:c3:c1:6c:0d:70:fc:0f:
05:39:ab:69:9a:2e:52:fe:96:15:55:f6:33:e1:87:ff:9e:1e:
ad:30:f6:8c:61:6d:63:79:31:73:44:36:52:69:0c:82:7b:7a:
fa:69:68:6b:a8:d1:48:ef:3b:f7:bf:f5:e0:c0:9f:b9:51:af:
13:f6:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:05:35 2024 by rpki-client on console-fra.rpki-client.org