Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wLuCeSCGX_BDEQsf8JV4wiApSLQ.roa
File: wLuCeSCGX_BDEQsf8JV4wiApSLQ.roa (raw, json)
Hash identifier: IlKCJ6Tr29BAXb8lRjPlS+08ztCPc2UP/p/t3jVsTa8=
Subject key identifier: C0:BB:82:79:20:86:5F:F0:43:11:0B:1F:F0:95:78:C2:20:29:48:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EF536B22BB4908EE5B766105BAFB0DD64
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wLuCeSCGX_BDEQsf8JV4wiApSLQ.roa
Signing time: Fri 19 Apr 2024 07:16:26 +0000
ROA not before: Fri 19 Apr 2024 07:16:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215766
IP address blocks: 79.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:36:b2:2b:b4:90:8e:e5:b7:66:10:5b:af:b0:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 07:16:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0bb827920865ff043110b1ff09578c2202948b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:1f:70:08:c4:7e:9f:2b:ab:e1:05:96:ff:
56:cc:11:2b:f9:9d:90:aa:99:be:0f:a8:ee:2a:3c:
6a:91:5c:3f:f5:66:aa:72:7d:ab:e4:d7:23:65:44:
fb:ea:d7:8c:0f:d2:9f:61:8a:01:30:4d:5d:57:1f:
82:ab:04:38:48:ca:84:65:a9:95:e0:8e:dd:8b:61:
6b:ef:59:a2:02:ee:fd:d0:3e:c9:b8:af:03:6b:e6:
1e:cf:24:7f:a0:da:45:0d:4b:53:9f:22:ff:c8:44:
e4:d8:13:68:40:87:6b:4e:60:ab:cc:9c:9c:26:c9:
27:63:82:ab:99:b7:4e:39:1d:0a:1c:85:d9:6f:7f:
d2:b9:29:4c:85:9f:76:6a:f5:86:dd:6f:b9:44:78:
be:8f:22:c8:af:f4:c9:5d:21:d7:73:20:03:48:53:
27:2f:f9:a5:77:1a:37:ea:aa:89:43:b3:0f:a0:14:
5e:74:80:58:7b:55:de:d1:c4:49:79:b4:14:e9:1b:
1e:c9:51:e3:0c:e1:16:8c:c7:b9:1e:c2:6e:e3:44:
0e:bf:a7:f9:66:11:af:ee:c9:da:a3:1a:d5:b4:8f:
43:43:b5:41:46:9c:87:b5:61:25:92:ab:65:05:70:
91:5e:46:19:aa:bf:99:fa:e0:06:63:3d:ae:70:41:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:82:79:20:86:5F:F0:43:11:0B:1F:F0:95:78:C2:20:29:48:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wLuCeSCGX_BDEQsf8JV4wiApSLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6b:1d:38:d9:bf:1c:32:56:5b:77:a1:7b:b0:7d:6f:07:32:
f8:1d:b3:fc:40:24:1c:63:a5:f9:c5:17:08:3a:df:e4:f5:e4:
20:da:b8:97:1a:3a:46:89:2a:16:e8:6d:b8:51:69:69:b9:b4:
7c:07:86:05:8b:fa:53:5e:57:bd:8d:20:59:38:b2:8b:cd:e1:
48:2a:11:71:4a:54:f9:bb:16:f5:df:d9:27:d4:e3:17:ad:dd:
7e:b3:aa:55:ae:a5:97:6d:fa:cb:92:1a:01:e4:4b:ba:24:1e:
3d:53:ba:cc:4f:51:3f:6e:a1:c9:0b:4e:97:1c:28:89:bf:d4:
61:18:ef:4a:05:f1:30:36:39:9d:f7:07:65:da:26:a4:4e:c2:
a7:0e:3c:7b:e1:4d:a6:2d:6e:9c:48:67:34:cd:2e:d0:3c:85:
0b:c3:57:42:de:95:6c:83:d8:ed:c2:4f:27:f4:7e:e7:40:02:
9d:8a:ae:7a:13:3f:71:9a:bb:8a:81:95:81:98:28:90:e1:2e:
29:39:a2:fe:2f:bf:86:59:1a:80:a0:f7:7d:c6:26:c7:07:08:
d4:b9:6e:4e:5c:cc:5a:6c:46:45:c0:c1:69:4c:8c:50:17:39:
d6:d0:6a:3b:38:51:9b:e9:a4:cd:a6:be:d0:58:89:69:e0:4a:
52:1e:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:35 2024 by rpki-client on console-ams.rpki-client.org