Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/sjoCD0Q1st5TRXXUoQHsRZzIVas.roa
File: sjoCD0Q1st5TRXXUoQHsRZzIVas.roa (raw, json)
Hash identifier: /ENxauxHod4a56MNHcPruDYLsssdplNTuKqTdeb3lN0=
Subject key identifier: B2:3A:02:0F:44:35:B2:DE:53:45:75:D4:A1:01:EC:45:9C:C8:55:AB
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01906CD7A6494DFA3D6F11B0A7D169BD1047
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/sjoCD0Q1st5TRXXUoQHsRZzIVas.roa
Signing time: Mon 01 Jul 2024 05:49:50 +0000
ROA not before: Mon 01 Jul 2024 05:49:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211196
IP address blocks: 185.198.68.0/24 maxlen: 24
2a0b:6f80:100::/48 maxlen: 48
2a0b:6f80:101::/48 maxlen: 48
2a0b:6f80:102::/48 maxlen: 48
2a0b:6f80:103::/48 maxlen: 48
2a0b:6f80:200::/40 maxlen: 40
2a0b:6f80:300::/40 maxlen: 40
2a0b:6f80:400::/40 maxlen: 40
2a0b:6f80:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 18:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:d7:a6:49:4d:fa:3d:6f:11:b0:a7:d1:69:bd:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jul 1 05:49:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b23a020f4435b2de534575d4a101ec459cc855ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:66:23:36:7b:9a:fe:2b:6a:e2:e7:e1:4d:
18:0f:d6:b3:65:5b:37:3b:87:61:95:02:da:97:e6:
09:0f:cd:f9:93:11:39:77:bc:70:63:bc:9d:d4:d8:
5d:b1:3a:e8:58:1e:1a:c8:77:f2:2a:2b:24:6a:48:
d7:47:1b:89:34:8e:f6:cb:b3:11:7e:e5:3d:5f:9d:
e8:5a:ee:ca:3c:6f:cb:21:2d:1d:c5:3f:f1:40:70:
f7:11:0e:b6:05:9e:84:f2:76:42:84:7e:5d:3a:26:
c3:97:83:11:47:3d:9f:27:8d:e8:bf:b9:19:67:f9:
59:e2:48:a6:3c:d4:9b:c5:2f:5e:55:25:1a:a3:ad:
66:11:f3:4d:d8:7d:08:ca:22:ba:87:57:ae:a0:17:
7d:c8:2c:33:79:df:c1:15:b1:bd:75:f9:c9:60:b0:
9a:3c:74:cb:6a:3f:3a:ab:5f:57:e9:44:3e:fa:de:
8b:c5:42:3e:bb:68:aa:0d:52:4d:ff:19:9c:fd:59:
a5:24:04:09:c2:ce:06:16:51:36:14:4c:65:7f:73:
97:8e:ce:d9:d9:a5:28:d6:20:23:fa:8e:3f:a6:6f:
e4:df:e0:82:60:a1:94:9f:6d:15:aa:53:f2:38:2d:
28:89:07:05:f3:a7:36:c8:be:28:ba:9b:15:45:3a:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:02:0F:44:35:B2:DE:53:45:75:D4:A1:01:EC:45:9C:C8:55:AB
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/sjoCD0Q1st5TRXXUoQHsRZzIVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.68.0/24
IPv6:
2a0b:6f80:100::/46
2a0b:6f80:200::-2a0b:6f80:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:7a:8f:04:66:37:61:23:42:95:d9:f2:a4:a5:c6:8f:6c:22:
91:a1:43:ef:72:66:8d:c2:da:57:fa:e7:7c:3e:de:b3:cb:08:
04:bb:96:9a:3c:7a:28:0f:96:ce:e9:9b:66:f9:84:54:94:fe:
a4:c2:b8:b3:af:99:41:3c:8c:ef:e1:8c:92:99:b0:ef:91:ce:
2f:e5:10:a2:88:3c:3e:98:22:86:be:9d:70:6c:b3:e9:9a:49:
6e:ca:3d:e5:e2:e1:8f:95:8e:d8:c1:cf:2a:82:5f:be:27:71:
d5:7e:0b:a4:5c:56:b9:75:d0:9c:19:8d:fb:ef:a0:7a:c9:d1:
93:6b:63:60:cd:77:3b:8f:f4:21:3e:e3:16:a7:fa:a9:bd:f1:
7e:eb:0f:c2:94:0e:34:fc:4e:26:43:87:a4:a9:85:a7:49:c0:
62:f0:a5:b1:d8:f7:47:bc:5a:c2:0d:d9:51:fc:93:58:e3:5c:
d9:45:d0:e9:ed:b3:28:6b:06:75:39:61:0b:b4:7e:e0:94:30:
c6:3e:c2:8e:e3:4a:45:df:aa:fb:0f:0b:3d:9a:95:07:09:3d:
83:4f:9f:a3:11:b4:0b:af:66:e6:84:f6:6b:96:e6:d4:9b:f6:
51:cc:25:36:26:f5:9c:fe:7b:8c:33:43:66:ba:46:8a:1e:10:
7a:1a:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:48:57 2024 by rpki-client on console.sobornost.net