Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/wNsZiOXoW3O422_-Ev8gTCbb_38.roa
File: wNsZiOXoW3O422_-Ev8gTCbb_38.roa (raw, json)
Hash identifier: 1+n4KN0lLg1ScmyqHrM1UTMBzOPC21NM08aTebjXJ2Y=
Subject key identifier: C0:DB:19:88:E5:E8:5B:73:B8:DB:6F:FE:12:FF:20:4C:26:DB:FF:7F
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 018CC64B42FBF1307983F804CDB337242EAF
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/wNsZiOXoW3O422_-Ev8gTCbb_38.roa
Signing time: Mon 01 Jan 2024 18:31:10 +0000
ROA not before: Mon 01 Jan 2024 18:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21087
IP address blocks: 178.217.64.0/21 maxlen: 21
195.93.128.0/23 maxlen: 23
194.176.114.0/24 maxlen: 24
91.210.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:42:fb:f1:30:79:83:f8:04:cd:b3:37:24:2e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Jan 1 18:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0db1988e5e85b73b8db6ffe12ff204c26dbff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:b8:c4:90:b3:38:e7:2e:06:d1:bb:de:c2:
fe:4e:14:80:24:f6:f0:9f:df:43:e9:6d:66:9e:b5:
8f:86:e2:46:ea:04:8d:6e:59:6f:81:d3:67:12:33:
36:9a:1b:ac:79:a3:43:96:a3:c4:a0:02:eb:ef:98:
4d:58:b0:6c:13:6c:91:fd:e8:37:13:96:63:a0:8f:
33:0d:bf:0c:4e:be:0c:53:aa:3a:95:dd:57:76:f0:
45:9f:cc:91:8a:fe:2c:16:4b:93:0d:1b:3f:7e:40:
4f:d3:ae:ef:a6:05:ac:30:f0:b2:48:0f:4a:48:ab:
50:e6:31:02:c0:3a:97:34:ed:3b:19:5f:02:96:56:
8c:e4:01:41:ce:60:47:90:97:70:3d:83:63:30:6e:
cb:9e:ab:1b:61:d6:b8:6b:a5:82:5b:a5:99:a1:74:
44:9f:32:9e:de:e4:11:57:ac:18:c1:d6:fd:56:bf:
e8:8c:cd:51:3d:fd:54:d6:de:d7:7a:66:d1:d9:30:
32:b2:1d:aa:17:03:56:00:13:d5:83:c7:2f:90:fb:
9d:55:09:f2:72:84:a4:8b:f7:e6:a2:62:5a:05:6b:
83:c5:37:62:b5:b0:f2:5b:6c:fc:3e:70:cc:b5:a4:
69:7d:60:a1:84:76:7e:4e:c5:a3:f6:b7:7f:79:60:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:19:88:E5:E8:5B:73:B8:DB:6F:FE:12:FF:20:4C:26:DB:FF:7F
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/wNsZiOXoW3O422_-Ev8gTCbb_38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.160.0/22
178.217.64.0/21
194.176.114.0/24
195.93.128.0/23
Signature Algorithm: sha256WithRSAEncryption
93:93:4a:d9:ba:b3:38:c5:23:90:cb:ac:bc:26:d7:81:e1:f6:
05:ad:8c:e9:66:c3:e1:5b:17:3a:73:2d:2e:b9:4c:27:ac:d5:
ef:52:2b:09:1e:15:7d:1a:9b:0f:0d:7d:af:31:a6:d3:ec:3b:
c5:95:17:05:8b:d5:90:af:be:c3:85:51:f2:35:5b:11:7b:45:
b9:14:d9:de:36:74:dd:cd:98:b5:51:ba:41:84:09:22:83:d4:
82:d5:58:6d:ed:1b:62:fc:d9:b8:e5:c1:5e:51:67:52:82:73:
4b:0d:7e:c1:a7:67:bc:3a:c4:37:e8:12:27:b3:f3:5c:a7:27:
80:61:8d:18:e0:e3:df:79:4a:5a:a9:01:b2:34:a6:9f:e3:23:
44:39:2d:0e:fc:99:6b:e2:ab:8f:b0:ae:8e:0b:a2:45:38:21:
26:4f:29:a0:c4:49:9c:c5:dc:62:91:b6:f4:57:42:03:ab:15:
d4:8f:70:bf:c9:61:0d:f4:92:51:05:9e:ee:16:4a:29:a8:06:
a5:4b:ee:f7:bf:22:19:c6:b4:5e:cf:5d:34:0e:9e:d3:b6:e3:
c7:b7:67:c9:af:2f:20:14:97:2a:54:e9:18:90:f8:29:21:4b:
5c:c3:54:a0:33:69:9f:cf:e3:6a:b6:61:f2:e1:b8:95:0c:89:
26:4d:b3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:11:24 2024 by rpki-client on console-ams.rpki-client.org