Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/0wCe-RMpWP650fdv6ZWDWRZ78LE.roa
File: 0wCe-RMpWP650fdv6ZWDWRZ78LE.roa (raw, json)
Hash identifier: NF6AXG8Q5HutlZjGPyR8fhOKnQB1kN40amirf51mz4s=
Subject key identifier: D3:00:9E:F9:13:29:58:FE:B9:D1:F7:6F:E9:95:83:59:16:7B:F0:B1
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 018CC86F216B44A95B9A0E1565A60BC806B1
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/0wCe-RMpWP650fdv6ZWDWRZ78LE.roa
Signing time: Tue 02 Jan 2024 04:29:35 +0000
ROA not before: Tue 02 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8793
IP address blocks: 193.109.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:21:6b:44:a9:5b:9a:0e:15:65:a6:0b:c8:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Jan 2 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3009ef9132958feb9d1f76fe9958359167bf0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:59:b9:30:d4:60:78:7a:07:d2:85:f4:40:
20:7e:25:b2:53:6a:e2:13:13:94:6a:af:7b:16:60:
28:d8:95:e9:ae:6e:28:d6:28:cb:3b:5a:a2:64:0d:
b0:07:fc:af:46:36:51:3c:c6:29:43:7a:de:09:ea:
23:90:b9:7b:a3:6b:af:85:8c:7f:ce:ba:4b:e4:88:
c1:a6:76:95:e6:85:89:29:03:ad:35:60:ad:34:09:
f0:8f:6a:e7:40:e7:b0:1f:61:5a:07:1e:29:99:01:
42:f8:76:84:16:a4:c3:91:fe:f1:b2:10:f8:a4:bc:
49:70:34:cd:39:e2:66:c5:d4:fc:84:26:61:c0:e8:
e7:28:7c:ba:31:68:22:ed:50:77:99:17:f4:a3:21:
c6:ca:0a:44:f0:2f:00:a7:31:ff:ae:9e:dd:92:1d:
5d:ef:ec:f8:4f:a4:c5:6a:9f:7f:7e:67:20:d7:75:
3c:bf:62:15:e7:f3:4c:cb:b6:42:89:36:02:6c:68:
c2:8f:80:6e:04:e0:68:88:7e:2f:3c:65:69:20:08:
24:41:61:93:07:c0:37:42:e7:a9:66:38:db:b6:d7:
0f:29:05:2e:b4:d3:0a:30:5b:a0:73:c6:a5:41:1e:
cf:e7:ea:80:a9:07:6c:7d:e5:1c:f2:fc:04:84:1c:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:9E:F9:13:29:58:FE:B9:D1:F7:6F:E9:95:83:59:16:7B:F0:B1
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/0wCe-RMpWP650fdv6ZWDWRZ78LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1f:17:0b:96:0e:27:f0:da:c6:ab:69:1b:d4:97:4a:04:fc:
0e:b4:d4:94:39:e6:4c:94:f5:d1:5f:f4:61:63:17:9b:7b:f7:
09:65:5e:17:56:ac:fc:5b:1c:f3:35:ad:ca:61:1f:8a:f1:e3:
ff:a7:fe:d8:09:27:47:a0:d1:19:3d:37:cf:e4:61:1f:7a:95:
80:43:e4:3f:50:10:47:59:ae:0e:07:5c:9a:7c:bf:a5:75:3a:
9b:19:5d:32:a8:42:d2:5b:37:e6:f4:e9:12:2f:f2:e1:40:32:
56:5a:4e:7b:df:38:3a:89:44:fb:98:5c:1c:05:36:38:1b:3a:
68:01:2f:1d:33:04:fa:30:44:b3:d1:78:e9:b5:d7:f3:1f:a0:
a3:4e:ca:e0:4f:1a:2f:89:42:91:75:99:30:b2:e7:53:e1:08:
28:87:d2:f2:f9:f9:c2:99:f8:7b:d9:72:78:98:a6:b6:e2:ad:
1b:f3:28:3a:79:1e:fb:ea:20:b8:92:fd:ac:a4:52:d1:93:6c:
0a:88:82:53:2b:a0:f2:1c:a8:07:e2:b9:54:e4:05:9a:38:fe:
8b:ca:80:37:da:f0:ce:c5:27:f3:ad:58:11:fe:cc:3e:85:e3:
68:94:57:55:21:c4:54:12:ec:68:d4:80:86:36:53:7c:b4:ea:
61:17:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:41 2024 by rpki-client on console-ams.rpki-client.org