Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tIdLPSvHr4nyBq_yr1D19N8_KIc.roa
File: tIdLPSvHr4nyBq_yr1D19N8_KIc.roa (raw, json)
Hash identifier: 9GRG35G8D7qVNchNhtSARgJX1WlYd6N1opoguLv0uaw=
Subject key identifier: B4:87:4B:3D:2B:C7:AF:89:F2:06:AF:F2:AF:50:F5:F4:DF:3F:28:87
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80299983C90750A9870E804D2F97C27
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tIdLPSvHr4nyBq_yr1D19N8_KIc.roa
Signing time: Tue 02 Jan 2024 02:31:02 +0000
ROA not before: Tue 02 Jan 2024 02:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212862
IP address blocks: 185.196.40.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:99:98:3c:90:75:0a:98:70:e8:04:d2:f9:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4874b3d2bc7af89f206aff2af50f5f4df3f2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:b4:71:76:07:bb:f8:c0:cd:94:2d:50:6b:
ef:1a:86:64:e5:98:7c:1f:4d:03:70:99:fe:47:3a:
7d:e6:9f:17:5b:6f:37:2d:7a:d9:b4:3b:b6:cb:d6:
e8:0c:cb:d5:09:b6:7f:6a:a5:f5:17:64:a5:79:d4:
3a:6f:fd:ce:f8:65:55:02:fb:d6:3e:27:d2:ee:e1:
af:49:bc:bc:2e:47:78:2f:49:98:46:04:09:bf:50:
39:47:6d:12:1f:6f:14:b4:25:cd:52:04:6b:14:2e:
b3:69:a8:4e:9c:35:76:bf:c3:46:5c:a9:4e:d1:d4:
32:f3:46:5a:37:59:51:15:b3:09:c5:72:a7:25:19:
82:2e:d2:7f:b9:53:65:8f:6a:46:0b:91:99:0a:30:
9c:be:0e:84:ed:f0:98:db:b8:5d:e1:0e:74:59:b4:
c8:76:a6:ae:37:13:06:2b:09:ad:54:ae:c8:37:d6:
2f:ac:48:a4:57:06:44:26:bc:f9:09:26:9e:e8:6e:
ca:a1:06:53:77:36:7d:20:18:55:85:bb:8c:88:61:
da:34:97:44:5f:18:79:ec:dc:7a:4c:99:cb:f2:5f:
7d:37:06:8f:63:ac:c4:8b:b2:6a:57:67:d3:d0:cd:
fd:b5:82:16:be:88:c2:7a:e5:43:32:8d:27:3f:9e:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:4B:3D:2B:C7:AF:89:F2:06:AF:F2:AF:50:F5:F4:DF:3F:28:87
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tIdLPSvHr4nyBq_yr1D19N8_KIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:08:98:f2:1b:60:14:8d:20:a9:da:6d:d7:ea:c0:57:6e:1d:
6e:ca:f9:ae:da:18:35:0e:ed:1f:10:17:20:6a:71:72:0d:b1:
b9:28:63:6e:f9:a0:f0:49:a8:2a:15:99:57:ec:8f:67:e6:9a:
94:ac:38:46:ce:74:c6:1d:2f:59:b8:0a:e2:4b:17:13:b4:82:
a6:51:aa:05:b5:90:18:e6:e1:1a:c6:7b:45:e2:95:aa:94:9c:
95:8f:4f:68:ee:60:37:eb:a4:8b:d0:d0:90:8b:e9:07:73:5c:
84:ed:29:52:db:e0:0f:4d:72:84:06:ef:c2:f9:b7:5d:08:d7:
0c:1d:55:84:2a:ac:30:ee:15:28:6c:b2:63:18:21:a1:ee:61:
f8:f0:9e:61:75:ef:d4:55:0f:25:a0:97:54:1e:09:92:d4:21:
de:c5:f7:6b:b5:85:ef:6e:e2:6d:95:45:bb:71:82:c2:52:c0:
12:91:56:f9:79:0c:e9:ba:21:03:4b:dd:70:0d:ad:be:ce:78:
5b:6c:19:1e:0d:cf:5b:17:e8:07:60:45:3d:3c:ab:4a:cf:e6:
fb:94:cd:1c:18:37:a0:6e:b5:13:f6:08:a8:e1:f3:27:3f:ed:
71:45:fd:9c:a7:e9:27:5b:8e:2f:67:ab:c5:d7:7f:eb:74:30:
55:ed:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:53:08 2024 by rpki-client on console-ams.rpki-client.org