Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2WiSYSTZY0NArSxNilTiRMxcsYc.roa
File: 2WiSYSTZY0NArSxNilTiRMxcsYc.roa (raw, json)
Hash identifier: lASIA9d2PkT0l8C+oe7mezW6YHawCvy0NzT0CuCrEGI=
Subject key identifier: D9:68:92:61:24:D9:63:43:40:AD:2C:4D:8A:54:E2:44:CC:5C:B1:87
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBC426FE7576C4CA8DBB3FFA513F0
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2WiSYSTZY0NArSxNilTiRMxcsYc.roa
Signing time: Mon 01 Jan 2024 16:30:26 +0000
ROA not before: Mon 01 Jan 2024 16:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bc:42:6f:e7:57:6c:4c:a8:db:b3:ff:a5:13:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d968926124d9634340ad2c4d8a54e244cc5cb187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:f2:d0:11:c2:80:bc:38:6e:f4:56:36:12:
ac:e6:2d:3e:e6:5e:60:3b:be:bc:4b:ca:e1:5b:5d:
e0:0f:d2:cb:2f:2d:4a:44:09:a3:ed:8c:b3:aa:63:
3f:dc:cc:92:38:55:dc:f1:9e:b7:c6:d3:06:34:65:
14:de:fd:14:0a:44:63:10:6c:4e:6f:ce:db:0e:5c:
e9:75:47:bd:1f:5e:80:1e:d8:74:8f:79:0a:23:0b:
9b:2e:a8:80:72:3e:e4:02:af:1e:a1:9b:40:45:e5:
5f:e0:79:14:00:58:2d:49:47:53:07:52:41:2d:66:
29:62:f6:9e:8d:5e:73:8f:c0:cb:de:0b:da:14:bf:
9b:05:73:02:46:3b:bd:94:1e:a3:e3:71:cf:23:fe:
ae:ff:45:ed:dc:e8:4a:41:a7:47:30:be:46:88:a9:
1e:23:2a:1e:72:4c:94:d1:fa:16:18:b0:ca:63:63:
4c:23:99:6d:ab:1e:15:f4:e7:39:de:b9:bc:e4:56:
38:1c:d0:13:08:c7:c8:27:61:0a:3f:da:95:1a:4e:
c4:49:3f:86:f4:bf:9a:9d:e9:e1:d7:62:9d:72:9b:
02:bc:d0:2a:17:25:e4:8b:67:5c:6b:d0:12:84:fc:
17:2e:75:bc:66:fc:ee:15:ac:9c:c4:b0:41:03:3d:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:92:61:24:D9:63:43:40:AD:2C:4D:8A:54:E2:44:CC:5C:B1:87
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/2WiSYSTZY0NArSxNilTiRMxcsYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f8:65:29:ef:b5:9f:d0:aa:19:53:a2:67:a1:d0:d7:dc:f0:
38:d3:fc:ce:62:be:e7:ad:ca:94:09:d2:63:ce:37:d1:ad:05:
ee:f2:4d:91:63:f4:a9:14:89:ef:1b:7b:81:8e:87:25:f7:8a:
50:8d:97:c1:3a:5e:53:39:84:30:fd:db:67:cf:8b:0c:27:70:
d6:d0:d4:1b:ef:a4:03:f2:d8:69:f6:86:64:98:e3:99:55:86:
29:82:71:64:19:7a:47:d9:b4:04:28:ff:0b:11:8e:5b:90:0b:
8a:bd:38:8d:85:30:5d:9d:2c:c7:63:1d:33:d7:43:82:68:8b:
5a:3f:27:9b:dc:7e:01:82:66:98:fc:b3:b3:51:9a:79:aa:e1:
9c:56:66:51:c6:36:d3:ff:e0:ed:43:88:c0:d5:d1:62:8c:97:
3d:a2:11:26:32:eb:ee:b8:53:0d:0b:bf:a4:be:44:9a:87:83:
75:f6:bf:ba:02:90:9b:02:8a:38:3d:45:dc:bb:0b:08:09:f7:
47:f0:95:e6:cb:24:59:05:dc:f3:5a:f9:e9:fb:f1:b9:f0:82:
76:8a:b1:f3:a9:5f:dc:ca:18:d5:24:e2:65:a4:2e:29:9a:c7:
54:40:de:fc:43:db:5a:ea:7e:7a:14:d1:22:37:44:54:03:ca:
b4:d3:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:30:33 2024 by rpki-client on console-ams.rpki-client.org