Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qr8yEyeCBp5TsUm7AwHTYItNFCQ.roa
File: qr8yEyeCBp5TsUm7AwHTYItNFCQ.roa (raw, json)
Hash identifier: U3ic+fLZ/bSz8sZHwbOlo4/izgKiXCAGXOXm1HlwfEo=
Subject key identifier: AA:BF:32:13:27:82:06:9E:53:B1:49:BB:03:01:D3:60:8B:4D:14:24
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027C1425F368D961F63057BCD6A0FE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qr8yEyeCBp5TsUm7AwHTYItNFCQ.roa
Signing time: Tue 02 Jan 2024 02:30:55 +0000
ROA not before: Tue 02 Jan 2024 02:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 185.223.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7c:14:25:f3:68:d9:61:f6:30:57:bc:d6:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aabf32132782069e53b149bb0301d3608b4d1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:6a:95:9d:dc:ca:ae:f3:b3:b7:1c:c8:38:
8e:25:b4:c8:60:65:fe:43:61:fa:a4:79:c5:63:73:
68:8b:62:bf:63:75:48:73:ca:aa:1f:1f:b2:e2:78:
cd:0a:97:8d:16:48:34:23:68:c0:34:ee:3a:33:35:
38:df:ba:b5:09:a5:0d:bf:e2:22:32:06:ad:71:5b:
de:a7:24:20:a5:a8:07:08:72:35:12:d6:07:78:2d:
4f:1b:ab:04:52:29:98:2e:50:3b:41:3e:c6:99:a6:
a8:82:ad:1e:f9:54:80:81:3a:dd:be:52:6b:d5:08:
1e:22:81:b2:64:b9:98:d1:d9:46:ff:b0:42:d1:86:
cc:d1:85:36:66:11:73:c8:1c:19:e6:4c:3e:4c:8e:
ac:d6:81:b1:c6:b6:f3:e7:5a:57:eb:09:b8:80:13:
bd:5b:69:a8:40:0f:b4:e1:41:df:ae:1f:4e:ea:c8:
f1:15:53:56:10:0f:0b:4f:2a:f3:c1:e8:c5:c4:0f:
80:ac:1e:b7:84:74:8a:55:e9:c0:d6:3d:27:9e:16:
31:22:cc:c1:2d:6b:ea:e7:9d:55:1b:17:f3:2e:28:
57:69:03:e5:8d:ef:e6:ef:d6:2c:b8:be:00:81:e0:
65:90:1a:b1:2a:1f:c2:b0:2a:3f:2c:c5:6c:80:53:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:32:13:27:82:06:9E:53:B1:49:BB:03:01:D3:60:8B:4D:14:24
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qr8yEyeCBp5TsUm7AwHTYItNFCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:85:65:89:4a:67:f9:38:b3:d1:66:69:23:f5:53:47:01:97:
a3:cf:39:02:9c:5a:57:01:b0:b1:82:4b:8b:ce:1c:5e:9f:5a:
14:57:af:0f:85:49:61:b6:e5:2a:41:cd:8c:07:ab:6b:8b:b6:
2f:68:7b:85:08:06:04:82:8f:36:c0:1c:14:35:07:3a:c2:b2:
64:2d:ef:af:c3:fa:10:f2:17:ac:c7:29:89:15:f4:c0:22:2b:
37:cf:bd:54:e2:63:cb:df:1f:08:66:7f:9f:a5:31:ce:56:65:
a9:c7:31:c1:1b:7b:c0:20:ab:cb:c4:55:df:7d:2b:e2:fa:71:
14:19:ae:24:6a:e7:b9:97:20:4a:77:00:24:ac:cd:2b:6c:3c:
fd:55:17:36:17:c6:3b:db:32:d3:e4:06:55:a2:9d:34:7d:ac:
1a:dc:88:95:d0:ad:a6:ec:3a:03:a4:fc:09:c3:09:63:ed:6e:
15:81:2a:b5:62:00:c8:60:de:cc:43:43:bb:07:42:5f:13:a7:
e6:8a:44:05:d1:b8:43:a3:49:09:41:98:6d:bc:13:77:f5:c6:
38:b4:fc:1a:b1:c4:60:3f:ef:27:49:07:5d:54:65:b5:1c:4b:
60:df:2d:2b:d5:cc:90:15:31:1b:27:9b:44:58:37:8c:5f:06:
8b:42:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:53:08 2024 by rpki-client on console-ams.rpki-client.org