Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oYopd0kN-4VPk7UiASg3HsSLb-w.roa
File: oYopd0kN-4VPk7UiASg3HsSLb-w.roa (raw, json)
Hash identifier: 8IOG0/+RekB39D1UpOttKp+LOmfyB87v3ktSJ/Iw19g=
Subject key identifier: A1:8A:29:77:49:0D:FB:85:4F:93:B5:22:01:28:37:1E:C4:8B:6F:EC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80277949DD390CB0812CF055241D715
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oYopd0kN-4VPk7UiASg3HsSLb-w.roa
Signing time: Tue 02 Jan 2024 02:30:53 +0000
ROA not before: Tue 02 Jan 2024 02:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32780
IP address blocks: 185.194.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:77:94:9d:d3:90:cb:08:12:cf:05:52:41:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a18a2977490dfb854f93b5220128371ec48b6fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:7a:ad:c9:06:d2:c1:44:36:c8:bd:07:f3:
78:d8:00:e6:3c:22:c7:4b:df:08:d0:89:7e:36:36:
db:7f:9d:0e:11:05:6a:0b:c6:cb:b9:3c:fd:46:17:
67:49:75:7f:15:bd:8c:18:b3:54:3a:dc:14:92:96:
a6:79:60:a3:c4:c7:c6:9b:f9:a0:04:a0:aa:17:ed:
a0:91:da:b1:3d:2c:e9:79:4b:03:a2:1b:f9:78:35:
e3:8b:ad:49:87:f2:7c:59:ce:b7:72:9d:f4:ce:82:
6a:60:df:b5:1d:a0:83:2b:9b:c5:68:48:77:8b:8f:
2f:fb:d7:a1:f4:98:85:d7:75:77:b3:d1:3c:41:8e:
37:c0:af:49:bd:58:2f:91:26:5b:23:6c:bd:ae:57:
28:a3:60:f3:93:3f:79:1b:09:85:63:5f:2e:f6:38:
ef:d3:8e:ce:75:d1:d6:ac:cf:95:e9:a9:f6:12:b9:
06:8e:c7:ae:8f:ce:52:5e:f8:58:69:c6:34:df:44:
3d:98:84:84:30:99:19:b6:f3:76:56:c0:bb:82:58:
21:7c:75:bc:97:1c:5c:c6:96:31:76:38:3a:05:b6:
2e:80:74:80:03:ab:e9:e4:81:c5:b6:5c:23:f6:f1:
a9:bb:27:ae:53:04:23:24:db:36:2a:8f:b1:1f:02:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:29:77:49:0D:FB:85:4F:93:B5:22:01:28:37:1E:C4:8B:6F:EC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oYopd0kN-4VPk7UiASg3HsSLb-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f7:21:0c:41:9e:ac:a8:d1:55:6d:e9:a5:df:a8:50:20:76:
94:53:f4:49:9f:b0:12:1b:7e:a0:77:12:29:ef:c5:52:0c:58:
11:10:68:6c:1e:fc:c4:22:b9:f4:f3:09:b2:09:19:7b:2c:1a:
53:d5:06:7d:a9:2d:e4:51:fa:bb:a3:6c:89:e4:56:5d:0d:5b:
e3:e5:9b:5b:d1:4b:2b:7c:11:c5:92:c4:95:e2:5f:67:9c:a0:
10:d8:27:f1:4f:c8:7c:9a:73:b7:24:15:45:42:54:06:e2:df:
73:01:8c:22:8d:b3:a6:a6:4c:c8:4e:89:e9:fe:d4:56:04:f6:
44:1d:d9:8c:6a:d8:3d:66:ae:ac:00:53:5c:a1:39:f0:12:36:
81:d9:05:fc:7c:86:98:22:ae:6c:e0:17:4a:a0:bb:bf:ec:d9:
c8:7d:a4:b6:8a:2a:93:e4:9d:32:73:b7:87:d2:ba:13:77:90:
56:cc:77:bb:54:de:64:b5:21:91:4c:74:13:65:04:fa:9a:d0:
88:6f:71:1b:e6:b0:ba:47:33:11:5e:c8:cc:c1:36:12:8e:6e:
62:69:0f:60:8f:49:d5:31:a4:c9:39:2c:f1:35:8d:5e:6a:9f:
2f:f1:1e:30:7f:fb:d0:f0:09:c6:1e:f3:0e:44:37:e3:a0:76:
8b:65:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:35:02 2024 by rpki-client on console-ams.rpki-client.org