Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/itZNKbiHIgHqSmWm90ONU9eFHuQ.roa
File: itZNKbiHIgHqSmWm90ONU9eFHuQ.roa (raw, json)
Hash identifier: w5KdJ8w54ldGm8Ai+pAi68/RsHF7qs9cA9Ums3u2sBg=
Subject key identifier: 8A:D6:4D:29:B8:87:22:01:EA:4A:65:A6:F7:43:8D:53:D7:85:1E:E4
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 018CC64B4DD145241C142DCF0D926A53A516
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/itZNKbiHIgHqSmWm90ONU9eFHuQ.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60751
IP address blocks: 185.104.216.0/22 maxlen: 24
185.24.233.0/24 maxlen: 24
185.24.235.0/24 maxlen: 24
185.24.234.0/24 maxlen: 24
2a04:2e03::/32 maxlen: 36
2a04:2e00::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4d:d1:45:24:1c:14:2d:cf:0d:92:6a:53:a5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad64d29b8872201ea4a65a6f7438d53d7851ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:c0:38:88:ec:87:e0:24:fb:de:9f:4d:4e:
b4:db:4c:4f:98:42:72:0e:58:13:bd:5b:13:be:eb:
f7:4a:7c:82:93:e6:f2:2f:c2:10:6c:c6:3c:a0:27:
d7:d3:a1:85:9d:59:9e:39:b5:92:59:4e:d8:99:dc:
fa:46:9a:5d:fa:33:e6:0e:dd:b4:5d:01:c5:bc:4c:
e5:73:39:93:c4:7d:94:a8:a6:39:3c:04:d4:81:18:
8e:ab:17:7d:12:f9:28:4a:24:61:50:95:d5:b6:86:
6c:85:74:b0:e5:25:f6:39:c7:a3:4f:ac:8e:74:e0:
ce:11:96:ec:d2:74:57:0a:74:ac:ac:25:b4:c9:a0:
36:a9:56:6c:0a:81:fe:60:fd:12:c4:2c:0d:32:57:
05:09:3a:98:a1:58:a8:82:00:f3:62:00:df:11:a0:
57:e9:04:41:cb:b0:72:d0:b3:0a:a7:4b:8b:e7:c5:
ab:dd:02:af:d7:11:b5:16:69:c6:ae:d4:2c:63:cc:
3a:7c:23:2a:00:2e:92:27:d3:de:ca:da:15:6d:6d:
dc:c7:0a:1e:3c:51:62:64:b3:cf:8d:0a:27:c1:fa:
54:34:ad:9e:ce:f0:e3:80:2c:51:ea:a0:a5:ce:bc:
fa:a8:ca:52:7c:b2:f0:67:73:11:28:d1:19:53:51:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:4D:29:B8:87:22:01:EA:4A:65:A6:F7:43:8D:53:D7:85:1E:E4
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/itZNKbiHIgHqSmWm90ONU9eFHuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.233.0-185.24.235.255
185.104.216.0/22
IPv6:
2a04:2e00::/32
2a04:2e03::/32
Signature Algorithm: sha256WithRSAEncryption
1d:87:97:36:cf:cf:d1:72:a8:19:f6:92:c1:54:6a:25:0b:45:
fb:32:c8:0a:d8:37:c6:ec:ff:b2:7e:77:cd:e0:45:86:df:fc:
28:e8:9a:d0:23:7a:11:a0:32:81:7c:6f:aa:81:ab:0d:d3:55:
f8:95:1a:33:da:c2:aa:fc:f5:7a:fc:bf:5e:5d:6a:d2:b7:ef:
c8:33:00:2d:6f:c0:f1:df:8c:a5:6f:07:3c:7d:5a:d7:1c:a3:
e4:b9:cd:ed:4c:59:3e:83:75:9f:86:e3:6a:ec:46:2e:ac:d0:
c8:d8:03:7b:2a:e0:62:1c:87:86:cd:fd:a4:7e:63:16:f1:68:
00:dc:44:52:e0:84:db:0d:ef:1e:41:c7:89:89:b6:02:69:cd:
79:48:01:a4:3a:b7:10:f2:e2:04:e5:7e:cf:78:87:e7:76:22:
55:03:d3:4f:b9:d7:ac:6e:14:86:11:53:e0:8e:b0:ae:e7:38:
5c:c5:e6:28:84:b1:5d:78:85:30:80:e6:02:5a:b1:b9:8e:9c:
b8:b9:8d:90:ea:79:e8:bb:f8:5c:69:a7:81:f5:63:cf:25:b8:
ec:21:24:7e:70:c6:6b:d6:cc:28:04:17:74:06:7c:1f:35:6a:
66:65:9b:c3:6f:6d:70:48:19:5c:b2:ad:17:f9:d7:80:fe:f5:
e5:3f:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:13:30 2024 by rpki-client on console-ams.rpki-client.org