Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l1O6wnq7qoOhD3OslbrbamYCf6o.roa
File: l1O6wnq7qoOhD3OslbrbamYCf6o.roa (raw, json)
Hash identifier: nq9Z45jDQOcyWeESNMNdg3Qzq9ATCDc3M3nI9eVzpbU=
Subject key identifier: 97:53:BA:C2:7A:BB:AA:83:A1:0F:73:AC:95:BA:DB:6A:66:02:7F:AA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028C5CF6856B5D6FF40EE6CECEED7C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l1O6wnq7qoOhD3OslbrbamYCf6o.roa
Signing time: Tue 02 Jan 2024 02:30:59 +0000
ROA not before: Tue 02 Jan 2024 02:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.255.125.0/24 maxlen: 24
185.238.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8c:5c:f6:85:6b:5d:6f:f4:0e:e6:ce:ce:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9753bac27abbaa83a10f73ac95badb6a66027faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:55:b7:c1:f4:44:fa:87:42:a8:d4:d5:74:
e5:1c:a6:bd:d4:7a:95:0a:53:26:22:b7:78:58:0d:
a9:e8:bc:d6:07:9b:c9:c7:aa:92:dd:ce:59:5e:aa:
e8:5e:3d:a3:4a:72:bb:39:07:6e:89:ca:7a:f9:55:
0f:9e:e7:bd:40:c0:d2:fa:f1:2e:42:07:90:a7:c8:
fd:11:f5:52:c9:0c:97:66:f0:ca:8a:e5:fc:fb:b8:
62:9d:2b:3f:b6:81:d5:07:4d:c0:02:a4:0f:9a:90:
cb:8a:2b:4a:6b:19:93:d4:f7:1c:fa:27:64:a9:16:
f9:8a:c1:1b:82:ae:a0:25:ab:f4:0b:ff:6b:b1:a0:
76:4f:c0:cd:61:c6:7c:18:8d:c5:f2:b2:00:39:e5:
1d:ee:c9:95:e4:ab:6c:e9:38:95:22:33:28:e9:72:
bf:35:48:55:59:c3:ae:b7:3f:58:46:6d:6a:1b:cc:
10:fe:e8:d3:2d:3d:3a:26:d9:66:f9:ee:32:32:92:
28:73:bb:06:11:0b:8c:07:66:7e:45:f7:97:e6:7e:
f0:3a:60:28:d9:af:2f:d5:28:61:74:6c:d1:42:03:
f3:20:e5:56:68:12:cf:ce:2c:bd:33:ed:47:50:16:
0c:75:d6:a3:fe:e3:a9:8b:48:12:82:db:bc:3a:7c:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:53:BA:C2:7A:BB:AA:83:A1:0F:73:AC:95:BA:DB:6A:66:02:7F:AA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l1O6wnq7qoOhD3OslbrbamYCf6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.231.0/24
185.255.125.0/24
Signature Algorithm: sha256WithRSAEncryption
73:40:75:b8:9f:2d:d4:50:91:c6:56:9e:7a:42:45:1b:fe:47:
1d:dd:53:6f:89:0c:b9:ee:c1:97:a0:9f:40:c4:83:45:e0:4e:
94:1c:07:38:e3:ea:79:be:48:7a:e9:75:3b:d2:0b:2e:6b:6b:
59:4a:89:28:eb:9d:fd:97:c9:1f:f7:d2:ba:8d:ab:38:c2:46:
96:ab:f4:e9:0f:26:5b:d9:2d:c8:09:8b:db:45:7e:b4:25:aa:
62:a9:b1:75:5a:cb:72:eb:a7:a7:60:c2:47:59:23:57:21:1c:
d2:cb:9b:d9:cb:56:a4:22:69:e3:c7:a3:14:9e:9a:19:95:b7:
4e:18:36:cd:34:01:8a:d3:43:97:fc:16:a5:16:d3:24:e3:db:
6b:6b:2c:da:77:bb:50:5c:5a:87:8b:d4:e5:a4:a6:25:9d:bd:
b6:ed:15:08:ef:2c:93:9d:7a:95:51:5e:85:8b:75:69:c1:85:
f6:ea:66:7c:22:0a:3d:ca:e3:0e:0b:5b:27:8e:ea:a7:63:57:
22:a2:51:13:85:da:9a:8c:d3:77:a6:8d:bd:6f:7c:53:1a:36:
36:bc:07:02:e1:2b:f9:68:a8:17:dc:c0:cd:60:b2:e9:5c:ba:
e6:cb:34:9e:b4:ff:09:89:72:c9:88:75:b3:5e:78:32:cd:ef:
bd:93:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org