Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yz0SkgGztRy8-4Ja6LPS7wdU5Co.roa
File: yz0SkgGztRy8-4Ja6LPS7wdU5Co.roa (raw, json)
Hash identifier: ulswLEBgYb5c8lL5gouCet55vsKjvNhLUYZ9c1Y7Yzg=
Subject key identifier: CB:3D:12:92:01:B3:B5:1C:BC:FB:82:5A:E8:B3:D2:EF:07:54:E4:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191A455A8680CDC6806D74BEE0B3AD23532
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yz0SkgGztRy8-4Ja6LPS7wdU5Co.roa
Signing time: Fri 30 Aug 2024 17:29:22 +0000
ROA not before: Fri 30 Aug 2024 17:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.227.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a4:55:a8:68:0c:dc:68:06:d7:4b:ee:0b:3a:d2:35:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 30 17:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb3d129201b3b51cbcfb825ae8b3d2ef0754e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:71:ca:be:c7:1d:27:5f:9a:53:8f:59:73:
cb:d5:4e:12:89:82:d9:77:81:db:82:8f:f6:c5:63:
b2:a8:03:61:46:b4:18:15:91:d5:9a:f4:56:10:bb:
bc:9c:38:4e:30:7a:ed:a0:34:f2:1e:6f:56:03:6c:
74:ad:84:c7:52:9e:dc:ec:85:86:51:25:ff:52:e2:
22:aa:50:93:af:90:f2:96:61:93:e8:99:64:c4:bc:
e0:f1:ed:c7:31:0e:61:db:5b:25:ea:cd:99:4f:6a:
fa:7f:33:02:be:da:c5:25:8e:3d:b4:20:74:b0:56:
fb:dc:93:ee:a5:05:be:0e:d1:58:12:c0:31:0c:7e:
f0:7f:91:91:ff:3a:41:b8:41:d2:67:12:a7:82:01:
75:af:90:31:51:dc:40:65:8b:00:c7:82:70:6c:55:
65:c0:d4:34:34:53:40:91:37:b8:ea:fb:b5:95:20:
0b:35:c3:6a:7b:a3:28:d5:03:02:39:18:a9:91:e8:
ad:24:c3:0e:aa:78:45:49:7e:00:64:1c:a7:41:f7:
5a:68:c3:fd:37:39:14:19:95:f9:ea:a5:4d:7f:f0:
e1:d0:b6:8d:2a:b0:4e:b8:e1:a3:d6:69:4e:53:b8:
92:49:0d:1c:64:29:30:f2:46:7d:d4:98:97:c9:69:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:12:92:01:B3:B5:1C:BC:FB:82:5A:E8:B3:D2:EF:07:54:E4:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yz0SkgGztRy8-4Ja6LPS7wdU5Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3a:67:50:f1:ae:60:b3:2e:45:f4:8a:59:cd:9c:61:62:1d:
54:34:45:d7:5f:b4:ac:9e:7f:d9:7b:cb:cb:b1:87:f6:3c:2e:
5b:82:95:57:0f:07:16:52:d4:bd:96:a8:37:1c:25:25:4e:09:
0a:67:a0:c6:0b:79:0f:f3:c9:e9:3e:fe:51:ed:f1:2d:2c:16:
e9:d8:69:4f:7f:6e:67:65:77:3c:83:8b:1f:24:7a:27:e2:47:
d2:4e:56:e0:52:98:cb:06:86:20:f7:52:7f:26:ce:5d:a8:5b:
f4:7c:da:e2:30:73:58:4e:b1:3d:bf:b5:91:63:a9:14:03:b0:
21:34:9e:8d:91:4e:11:42:f0:3d:73:8d:eb:99:fe:3f:b8:3b:
d5:82:6b:1d:c5:bc:a8:aa:d9:72:e6:3e:a9:de:17:69:db:3d:
0a:7e:30:c4:5d:63:64:25:ca:cf:5d:05:a9:c1:d6:db:ff:15:
f4:67:ad:68:c6:28:99:fc:03:bc:80:30:ea:d0:63:a4:41:a5:
cd:f2:63:0a:ed:09:a6:8e:b6:10:a8:24:6c:06:a4:c6:a2:aa:
51:0d:7a:82:b6:c8:ef:33:11:43:64:4b:08:93:a9:5e:10:85:
d4:6a:7e:ae:0b:08:25:af:b5:f8:1b:24:a3:d0:65:d7:5b:0b:
73:de:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org