Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/wLXVVa5bK_0RCPrBD0I0mXVFhJg.roa
File: wLXVVa5bK_0RCPrBD0I0mXVFhJg.roa (raw, json)
Hash identifier: 7F0ugb8x2hR/q1Y2az+w4wcPzTWIjxzlIZTFbzP9u48=
Subject key identifier: C0:B5:D5:55:AE:5B:2B:FD:11:08:FA:C1:0F:42:34:99:75:45:84:98
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 018CC4253945CF620A19608006CF3D6A41DA
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/wLXVVa5bK_0RCPrBD0I0mXVFhJg.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61113
IP address blocks: 185.3.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:39:45:cf:62:0a:19:60:80:06:cf:3d:6a:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0b5d555ae5b2bfd1108fac10f42349975458498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:a5:22:31:e3:52:3a:b9:27:68:29:b1:4b:
c4:e2:c0:2f:28:2f:b0:34:01:36:80:55:0f:22:05:
b2:1d:c3:d1:c6:08:93:51:80:64:32:dd:a9:d5:6f:
9f:12:05:99:fc:25:b6:4a:8d:9b:75:15:e1:65:fb:
8d:dd:2f:b4:88:35:14:cd:25:4c:b6:d5:27:04:9a:
63:a0:32:1a:0b:7b:38:d8:6d:d9:5e:9a:d7:c2:30:
58:f0:9a:bb:1f:bb:05:46:18:f2:ad:7e:58:c4:43:
57:8d:5e:e4:4a:d0:97:e2:6a:2c:cb:bf:fb:36:73:
4b:42:ca:3a:88:51:9f:a0:e9:2d:c8:e2:62:72:fb:
37:1f:1b:a7:db:a0:dc:a9:53:07:c8:f6:12:60:b0:
2a:e2:3e:e8:0a:ee:d1:91:84:07:6e:f5:5b:75:07:
18:cc:c3:13:ef:fc:e0:5c:ea:3a:5c:b6:14:42:15:
14:82:58:14:e1:71:aa:7f:b2:aa:de:94:68:7f:8c:
ab:98:79:df:55:55:6b:b0:d8:79:c4:e8:da:a7:a4:
7f:8e:23:3e:56:c9:d7:45:8a:70:38:1f:e3:d3:1b:
ee:cf:b7:73:df:f6:f2:fb:7e:a1:b5:72:bb:fd:a4:
12:cb:b5:6b:ad:6d:96:71:56:32:ca:0d:77:6f:00:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:D5:55:AE:5B:2B:FD:11:08:FA:C1:0F:42:34:99:75:45:84:98
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/wLXVVa5bK_0RCPrBD0I0mXVFhJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
88:10:38:5c:d5:b3:37:4b:7d:62:4e:d6:79:52:0b:e8:e9:a5:
0c:16:e7:d9:69:c8:fd:32:44:92:5e:9d:bd:25:b4:68:0f:ef:
8e:0a:be:47:0d:6f:23:21:32:48:e5:65:d9:b7:f4:c3:e0:a3:
2e:35:bf:d8:a3:2f:7f:06:82:cb:fe:f8:29:b0:78:a7:91:d4:
59:1b:d6:22:c9:78:b0:16:ef:73:3b:b0:19:d0:73:c5:6c:ef:
ff:6f:02:6a:bf:cb:a6:43:aa:8e:b0:ba:3a:bf:6c:31:ad:7e:
ea:3b:0a:13:94:e7:d7:3b:57:24:ca:3b:1a:76:87:e2:b5:b0:
37:b6:f5:e4:10:b7:8c:b8:3d:55:a0:36:61:c9:17:59:d4:ba:
85:c0:b7:43:af:d4:a8:11:39:07:47:8a:af:90:69:1f:e7:ee:
ff:42:8a:2a:82:28:3c:31:13:9b:37:99:d7:62:ae:92:b8:46:
d6:f3:8d:56:cd:36:b0:a8:1d:2b:a7:5f:e1:f9:d6:a4:86:35:
22:5b:0d:d9:d2:6c:d0:d6:d2:d6:1a:e7:69:54:6d:8e:95:db:
78:8f:8d:8d:9f:18:11:0f:ae:1d:33:1b:89:8a:38:51:ae:a6:
7a:07:4d:57:c0:ee:e1:67:6b:bf:ed:04:ef:f3:3e:bf:c1:da:
76:a7:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:26 2024 by rpki-client on console-ams.rpki-client.org