Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jSWAiDdrz7Z8_StoyxqmgAvbepA.roa
File: jSWAiDdrz7Z8_StoyxqmgAvbepA.roa (raw, json)
Hash identifier: agJxi2pTh48JQC4jFeoNCmhlddBMmGpGUtygmM0BOxo=
Subject key identifier: 8D:25:80:88:37:6B:CF:B6:7C:FD:2B:68:CB:1A:A6:80:0B:DB:7A:90
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019294B487BBABD30A75D392E96E481EA3C6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jSWAiDdrz7Z8_StoyxqmgAvbepA.roa
Signing time: Wed 16 Oct 2024 09:41:51 +0000
ROA not before: Wed 16 Oct 2024 09:41:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273909
IP address blocks: 185.226.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:b4:87:bb:ab:d3:0a:75:d3:92:e9:6e:48:1e:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 16 09:41:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d258088376bcfb67cfd2b68cb1aa6800bdb7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:96:1e:c7:52:5e:40:5a:07:0a:e9:67:ea:
29:87:ce:1e:5d:27:ef:b0:75:c9:27:4d:9e:de:76:
d5:9a:01:4b:c6:56:45:3e:42:3c:b8:55:1b:18:8f:
5b:a4:4e:f6:d6:a8:af:0c:7c:93:23:c3:52:6d:c2:
25:ee:bf:69:fd:47:f6:be:df:5c:f1:e6:d6:23:30:
1c:f6:7f:08:9e:a8:7a:38:1c:6e:21:a5:dd:aa:eb:
f1:10:05:42:eb:34:00:13:60:73:2e:ce:51:7b:f0:
f7:2d:f2:29:39:d0:22:18:9e:8a:3d:02:1f:16:e1:
13:2d:4d:f6:6a:21:2e:a2:65:58:a2:45:1a:10:f5:
4e:70:f6:1e:bb:a9:ac:53:0e:83:ed:69:cd:d0:12:
7e:9e:de:8b:39:ec:8c:9a:42:be:93:e9:e8:03:74:
83:59:52:01:2e:2f:cd:34:52:9a:16:2e:e7:69:fd:
61:21:db:90:d0:a2:2f:2d:c2:57:23:d9:91:4c:c7:
d4:91:a1:72:f4:58:83:06:6b:14:4b:f4:38:34:ba:
a9:51:b9:33:b1:58:ce:2c:03:a2:7f:9e:26:20:57:
52:dd:1e:b1:cc:8c:27:08:4a:f6:ff:0e:af:17:94:
90:4e:bd:08:05:05:f9:3b:de:28:09:a4:bd:5b:d9:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:80:88:37:6B:CF:B6:7C:FD:2B:68:CB:1A:A6:80:0B:DB:7A:90
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jSWAiDdrz7Z8_StoyxqmgAvbepA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:17:d7:1f:1a:2c:a3:db:83:de:a0:c8:d7:e3:57:22:e4:2e:
01:df:6f:9a:37:2d:0b:63:bf:ec:22:f0:31:94:32:26:ef:26:
95:d8:ae:b2:15:be:e6:08:14:f5:9f:dc:af:2a:4e:1a:4a:08:
3d:1b:88:c4:6c:dc:01:4e:c9:74:a2:1e:de:dc:25:85:7f:b1:
83:81:86:5f:5d:67:14:ef:9d:a6:64:b8:75:7d:0c:f6:14:4b:
a7:7a:b2:75:18:2e:8a:e6:de:18:84:ab:89:3d:42:ca:0f:46:
58:ed:fd:01:43:4d:ea:1a:2a:44:d4:a4:32:5e:2a:cd:67:0f:
96:fb:98:5e:67:8e:d0:3d:14:9a:09:16:2a:8f:c3:94:52:f9:
52:e2:02:35:4e:12:f1:b7:f2:55:27:86:14:91:6b:b5:b8:cc:
61:ec:ba:46:00:a8:2e:97:42:b0:ff:a6:8e:a8:57:21:75:16:
71:39:36:dc:41:ce:78:9f:d0:27:ba:e3:ef:28:13:9a:b9:9e:
db:87:59:ca:78:85:6e:bb:26:dd:4b:5c:7e:1e:74:b2:cc:24:
d2:9e:a0:ec:db:5c:0c:80:9e:cc:d1:3c:a2:a8:d9:28:2f:90:
98:c2:1a:e1:b4:56:81:d9:ec:70:2a:86:9f:dd:40:3e:6b:18:
a4:94:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:41:48 2024 by rpki-client on console-fra.rpki-client.org