Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rY3SPQZugZ7OcUdgaL8e4lSriuA.roa
File: rY3SPQZugZ7OcUdgaL8e4lSriuA.roa (raw, json)
Hash identifier: 6Gj/xnXDAhxliCh4MFTH9uQWlJCIYwT6NTGzQfrp1b8=
Subject key identifier: AD:8D:D2:3D:06:6E:81:9E:CE:71:47:60:68:BF:1E:E2:54:AB:8A:E0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8029B6947164A6F4DB3E500A6C1C99F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rY3SPQZugZ7OcUdgaL8e4lSriuA.roa
Signing time: Tue 02 Jan 2024 02:31:03 +0000
ROA not before: Tue 02 Jan 2024 02:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216431
IP address blocks: 185.221.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:9b:69:47:16:4a:6f:4d:b3:e5:00:a6:c1:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad8dd23d066e819ece71476068bf1ee254ab8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:18:12:a8:89:5d:33:96:f9:39:e9:80:a3:
f0:a1:b0:f4:b7:b9:54:ca:66:a5:b3:f4:af:4f:c6:
77:cf:b2:f9:27:98:a4:cd:34:d9:6c:1f:ae:38:d1:
0b:a9:0e:65:ba:df:03:ad:69:f2:bf:2c:20:37:9b:
37:0b:4c:b3:c1:8f:11:12:1d:a3:54:e9:51:b8:1c:
82:84:c0:55:bf:2c:cf:24:f8:3e:58:3c:04:d0:0a:
7b:7d:b0:39:31:15:4d:bd:87:48:62:0b:03:27:7c:
be:97:9c:8f:41:48:df:71:7b:ab:38:1c:a9:75:f5:
7e:11:86:bb:96:17:25:dc:40:47:e8:4d:38:24:18:
7e:bd:47:26:9c:37:43:fe:b2:fd:64:2b:c8:ed:71:
52:a3:c1:34:b3:66:8f:c4:19:5d:95:47:91:48:7b:
71:06:9e:a0:2f:52:52:6f:df:5f:3b:44:51:2e:73:
f7:5d:98:c1:13:1c:07:76:fc:fa:5b:5e:49:06:46:
4d:4c:62:ff:20:16:d2:d8:bc:68:9b:34:21:c4:94:
c2:92:b8:b6:a9:61:5e:d5:94:91:98:cf:dd:61:cc:
5f:1c:25:0b:99:58:8f:de:43:f7:ff:e5:1d:5f:f4:
9c:3f:7e:b6:fb:d2:d6:ca:c5:b1:ba:78:2b:ff:1d:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:D2:3D:06:6E:81:9E:CE:71:47:60:68:BF:1E:E2:54:AB:8A:E0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rY3SPQZugZ7OcUdgaL8e4lSriuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.21.0/24
Signature Algorithm: sha256WithRSAEncryption
84:34:58:0c:b3:51:b6:d0:90:43:97:bc:3b:3a:16:40:23:be:
7a:a4:3d:16:24:c2:3d:2c:63:2f:bf:96:64:a7:84:ed:78:d5:
bc:11:4d:8a:fd:80:f0:99:b2:92:6d:13:56:ed:62:3c:de:2a:
7a:5f:5c:40:49:44:87:2f:75:d1:a5:86:b5:62:ff:40:3e:dc:
4d:b3:48:c1:73:1d:02:69:cc:d6:cf:04:9d:9f:0f:fb:be:1d:
74:81:fa:76:86:fe:52:58:02:d9:73:d3:3a:ea:39:45:c1:b1:
65:f5:97:cc:60:b8:01:1b:a6:b6:5f:1a:78:f8:ac:48:4c:dc:
ec:a1:f0:6d:5e:87:96:bf:0c:a8:48:b0:a6:54:df:d1:a7:83:
8c:5c:68:d9:37:a9:48:42:08:88:a5:53:fe:e0:38:9d:33:3b:
ff:9f:5f:ab:69:db:eb:e6:e5:a3:59:a9:cb:98:90:b6:63:d5:
f7:9a:83:3f:6d:be:6f:2e:7a:a3:f2:66:7d:49:2b:3c:8f:4e:
fc:c9:73:28:ad:b8:8d:d6:ab:c4:e3:b0:4d:0a:68:dc:91:a3:
6a:fd:61:14:7c:4e:b6:a0:6a:44:ca:6a:fe:f9:b9:b2:2b:f6:
4e:57:7d:72:b4:48:c5:13:2f:cc:e6:0a:88:47:b8:a4:b1:88:
cc:fa:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:24 2024 by rpki-client on console-ams.rpki-client.org