Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/wFr41l2ivVwiSrv8xlr9Ym2w1ek.roa
File: wFr41l2ivVwiSrv8xlr9Ym2w1ek.roa (raw, json)
Hash identifier: cQOjPhrUSXI5wvueyFbfFJ0seAJuvbeIKa1ZUMs3FJg=
Subject key identifier: C0:5A:F8:D6:5D:A2:BD:5C:22:4A:BB:FC:C6:5A:FD:62:6D:B0:D5:E9
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 018CC9BC30E9CC58CC6DC57A1DF59EEE20D8
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/wFr41l2ivVwiSrv8xlr9Ym2w1ek.roa
Signing time: Tue 02 Jan 2024 10:33:22 +0000
ROA not before: Tue 02 Jan 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202991
IP address blocks: 185.178.240.0/22 maxlen: 22
185.148.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:30:e9:cc:58:cc:6d:c5:7a:1d:f5:9e:ee:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c05af8d65da2bd5c224abbfcc65afd626db0d5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:e7:97:83:d8:7f:30:23:8a:58:53:41:85:
92:c9:7a:50:fc:16:e2:20:c0:7c:eb:99:5a:0b:ac:
a8:d6:fd:3c:34:a9:00:9e:61:4f:0a:60:4e:2a:d0:
3b:bd:4b:b7:d5:ea:1c:ce:08:de:f2:43:76:44:d9:
a6:76:8b:0d:18:4d:15:49:be:71:c5:a3:1d:2d:34:
5a:b9:80:23:41:c5:1f:59:fd:87:2a:76:fd:ef:10:
e4:e6:28:20:e3:9b:59:45:e4:15:b3:82:33:cf:f2:
ef:b4:6b:b4:20:f0:2e:71:9f:22:2d:44:76:b8:c8:
bf:0b:01:9c:db:ed:71:53:12:15:1c:d2:04:a1:47:
97:a3:c9:7f:a9:c9:91:af:d2:94:a1:2e:86:8a:51:
e6:f9:30:eb:71:ac:13:ab:f4:ed:e4:aa:8d:41:9f:
10:bf:2e:ae:cf:36:cf:c0:3b:48:74:93:bd:94:45:
02:8b:25:c0:ba:a5:12:42:00:ee:be:45:42:98:ba:
a0:08:dc:03:a5:59:30:59:74:ff:b5:16:cf:b6:be:
c1:95:9a:7c:65:3b:6e:f8:81:3f:0d:50:fb:fe:53:
29:d9:f5:14:99:fa:25:68:af:4f:9c:a2:fe:94:28:
44:96:d7:6b:5c:20:35:ff:e0:2a:87:8b:cd:63:4c:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:F8:D6:5D:A2:BD:5C:22:4A:BB:FC:C6:5A:FD:62:6D:B0:D5:E9
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/wFr41l2ivVwiSrv8xlr9Ym2w1ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.84.0/22
185.178.240.0/22
Signature Algorithm: sha256WithRSAEncryption
53:89:89:f7:80:e8:cb:13:81:48:88:18:10:24:94:9c:46:a3:
06:8a:5e:79:36:95:b4:63:f0:cb:06:3f:a0:c0:17:0d:df:6d:
13:38:9e:b4:20:3c:58:01:05:a1:73:28:8b:8b:16:cd:68:b0:
14:21:1b:2a:d2:27:42:bd:cc:d9:c8:8a:5d:da:59:5f:89:9f:
e3:5b:0e:52:f5:cf:cf:b7:47:03:32:0e:03:d8:25:28:02:ef:
7e:7f:5d:af:b8:e0:d8:6a:eb:c9:60:6d:a8:77:1f:b3:35:63:
0a:f1:c3:af:63:b8:6d:2e:15:f9:30:ed:27:c7:6f:fa:b5:17:
22:79:ef:7b:e6:17:4a:19:2b:99:f5:6e:33:33:23:58:99:ee:
53:89:6e:00:26:f0:94:99:0a:bb:cc:d3:cf:80:47:e1:3a:66:
fa:f7:d0:db:d0:5c:43:88:cd:fa:b7:40:da:82:01:93:f9:cb:
25:94:b6:a5:8a:91:ef:4a:5f:10:d5:cb:7b:bc:49:6b:1d:24:
c1:24:c3:b2:d4:6c:78:fb:cf:54:55:93:70:38:70:69:7f:68:
2a:7e:0e:72:ec:7c:96:d9:31:15:97:ea:b9:6f:55:17:cf:78:
29:14:6d:b4:de:4b:da:f6:0b:3e:e8:45:5c:56:cf:14:5d:38:
d0:bb:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:00:31 2024 by rpki-client on console-ams.rpki-client.org