Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oFX_yOk20HGzFT1xblK4bYH-Wa8.roa
File: oFX_yOk20HGzFT1xblK4bYH-Wa8.roa (raw, json)
Hash identifier: LfSk3aJdjuxvGdaIf7FP/t9qf5oNTnqdD0cH02IA7iU=
Subject key identifier: A0:55:FF:C8:E9:36:D0:71:B3:15:3D:71:6E:52:B8:6D:81:FE:59:AF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028D338C292963BD04C53A5FB2B892
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oFX_yOk20HGzFT1xblK4bYH-Wa8.roa
Signing time: Tue 02 Jan 2024 02:30:59 +0000
ROA not before: Tue 02 Jan 2024 02:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206275
IP address blocks: 185.225.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:8d:33:8c:29:29:63:bd:04:c5:3a:5f:b2:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a055ffc8e936d071b3153d716e52b86d81fe59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:e1:04:b4:ae:3e:6c:ce:c5:a6:85:89:53:
bf:2d:d2:3a:d5:27:0a:cb:49:d6:24:2d:a8:0a:67:
9e:4c:7f:4f:75:97:82:02:20:29:15:20:dd:a7:da:
1c:a0:dd:15:5e:d8:2f:27:d1:eb:cb:e2:37:ce:99:
fe:ac:0c:f9:dd:fd:89:9d:09:92:d1:b4:b8:a0:83:
3e:db:4d:ca:68:cd:67:db:8b:ba:b0:f2:fb:64:2e:
05:21:60:11:e7:55:9f:0a:0c:eb:d2:98:c7:51:29:
f0:d2:cb:d7:79:1b:88:c0:9b:31:0b:8a:fd:f4:f3:
3f:51:3d:24:6f:fe:cb:b8:1a:d4:d2:e7:d5:e0:e0:
21:5f:26:ea:47:ca:09:36:0f:a8:bf:c2:43:c7:75:
c7:a5:1b:38:a9:b3:7d:2b:5e:32:a0:a9:82:5f:c7:
5f:03:cb:62:75:68:fb:b2:81:04:e3:cb:9d:55:7c:
b1:ab:43:7c:1b:de:8c:d0:9c:4b:04:b6:da:cf:a0:
39:d6:37:8d:b4:a8:d3:4c:cd:35:20:fb:a1:53:48:
64:d6:40:0b:e0:8e:0c:59:f7:23:c3:c4:4a:19:28:
eb:f9:92:2d:6d:ba:09:04:b5:6d:06:17:eb:95:d3:
9d:84:0b:53:4e:0b:af:57:92:c4:c2:4d:d4:1d:f1:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:FF:C8:E9:36:D0:71:B3:15:3D:71:6E:52:B8:6D:81:FE:59:AF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oFX_yOk20HGzFT1xblK4bYH-Wa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6b:e5:62:89:21:08:47:b1:d7:c7:38:e0:5f:68:19:23:9e:
2a:f5:8c:15:ea:35:8e:95:62:b2:92:12:86:7c:56:30:03:2a:
af:d9:0c:a7:81:f5:0c:e8:c3:7d:70:48:3c:26:e8:61:d4:27:
dd:7c:78:77:b0:bf:50:15:66:d1:5a:e0:37:89:b0:5a:1a:ae:
79:a2:a8:5c:a2:e9:cd:8f:7e:22:57:6d:95:89:e4:42:1d:85:
68:3c:88:6c:cd:15:3e:cb:7d:a6:1f:58:2b:24:37:a6:79:d2:
a2:5b:c2:18:70:24:a9:7a:0a:84:ad:1a:5c:1e:16:f0:38:a7:
41:e5:bf:b4:c1:de:8e:b3:a8:df:06:57:07:b2:0b:51:32:e3:
73:d6:c7:f4:5b:9a:22:fd:90:3b:1a:89:d5:e6:31:bc:f1:b2:
50:dc:25:6d:bf:16:81:a9:b4:d7:71:a8:24:99:07:bd:08:29:
e0:9d:ae:75:a0:e3:ce:ea:52:b3:3f:70:7d:d1:c0:15:66:52:
06:e3:91:1e:d9:62:7c:54:42:11:09:9d:a7:86:e6:ec:36:19:
3e:56:a6:d9:80:42:e0:e8:59:6d:f3:cd:3e:16:43:ec:a8:20:
c9:77:ec:93:f0:b3:e2:97:74:e7:56:6f:b9:65:80:87:3f:6b:
84:72:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:32 2024 by rpki-client on console-fra.rpki-client.org