Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qeyVevHSLzKJM65crM8-MS_DGk8.roa
File: qeyVevHSLzKJM65crM8-MS_DGk8.roa (raw, json)
Hash identifier: Ln+ZAIheQDZJOtjXXyqesFge62VIdu4/oickx7yMYyA=
Subject key identifier: A9:EC:95:7A:F1:D2:2F:32:89:33:AE:5C:AC:CF:3E:31:2F:C3:1A:4F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CDAFA5691DE64928080BBAB94E3C76022
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qeyVevHSLzKJM65crM8-MS_DGk8.roa
Signing time: Fri 05 Jan 2024 18:54:48 +0000
ROA not before: Fri 05 Jan 2024 18:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.220.250.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:fa:56:91:de:64:92:80:80:bb:ab:94:e3:c7:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 5 18:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9ec957af1d22f328933ae5caccf3e312fc31a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:85:94:90:36:85:9f:71:73:f3:0a:7c:60:
42:31:37:a7:17:c2:42:bd:cc:cf:f7:36:f4:02:d7:
68:05:e6:2b:8f:40:69:da:59:88:99:97:12:fe:1f:
0d:e7:5b:f9:af:5b:d3:c2:33:70:f9:5b:49:d7:46:
a3:5b:d1:8b:41:4a:13:69:b3:86:19:56:ca:b4:e5:
6c:12:b4:eb:3f:24:7e:c5:d1:ed:28:fd:12:12:43:
a4:06:5b:d0:13:06:75:8b:e1:1a:fb:15:e0:5a:7a:
80:94:34:cc:84:7c:d3:db:ce:c0:91:17:61:cf:13:
0a:03:0b:b9:7c:c4:fc:c0:69:61:14:f8:91:e8:9f:
cd:89:d3:c2:b0:2f:f4:c1:49:b4:b3:6c:40:36:a4:
30:47:3d:31:f5:bb:c6:98:73:db:f5:f6:06:4d:d8:
1a:c5:ad:44:1d:52:ac:1f:ae:02:23:45:32:4d:b1:
1c:4e:dd:b5:81:a8:ed:3d:14:11:1b:d1:0b:2c:44:
e2:24:f5:5a:e0:01:b7:ad:a5:bb:b0:c4:4d:de:a2:
b1:5f:9d:a9:22:8a:ae:bf:df:df:24:cf:18:93:c8:
75:5e:e9:60:af:c7:b7:dc:ba:10:cd:3b:f9:06:2a:
ea:6e:5e:39:8e:69:71:fd:66:93:01:37:1e:84:ed:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:95:7A:F1:D2:2F:32:89:33:AE:5C:AC:CF:3E:31:2F:C3:1A:4F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qeyVevHSLzKJM65crM8-MS_DGk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.249.0-185.220.250.255
Signature Algorithm: sha256WithRSAEncryption
0c:21:77:9c:58:87:25:5e:df:be:64:c9:a4:ac:05:df:19:a4:
67:c3:60:41:0a:12:74:83:d2:d8:e2:88:6f:a5:76:1c:b9:99:
f9:04:42:6d:ed:39:68:41:b7:21:6c:81:fb:f1:23:8a:11:17:
cd:ed:e3:23:6a:5c:37:0e:51:0d:71:f1:28:e3:68:af:43:1b:
ef:a2:6c:b8:de:4f:ae:fe:89:83:c1:f3:aa:80:b3:6f:41:8e:
50:8a:0c:f9:c4:92:d4:f2:35:00:89:28:f6:00:be:8d:8a:77:
06:0a:04:2f:18:cb:99:3f:e3:c7:1f:78:0c:c6:f6:c2:9f:57:
d7:f1:16:62:ae:11:64:83:14:d3:0f:fd:72:b7:5b:88:c5:84:
32:fc:c0:ec:ba:75:d2:7b:50:90:b9:ca:dc:63:47:b7:a9:ac:
61:94:5e:60:6c:2f:b6:95:62:37:23:c4:67:c0:bb:8e:26:74:
e6:eb:bf:ba:b4:48:0c:e0:18:17:7f:88:42:60:f7:0e:eb:91:
84:85:14:24:5d:6b:f8:ce:8f:b7:52:83:ec:f5:65:86:61:00:
41:a6:c9:49:0e:69:30:4c:b5:25:62:14:9c:78:91:d9:38:ab:
d7:94:48:32:7b:bb:62:91:9d:a5:6f:e9:c0:6c:74:9e:7f:f9:
6e:fd:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:01:51 2024 by rpki-client on console-ams.rpki-client.org