Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/wexZMoJ-jx9NXAb6YxnTAHAsSFg.roa
File: wexZMoJ-jx9NXAb6YxnTAHAsSFg.roa (raw, json)
Hash identifier: zaM/w6AtKq62cil1yBuR+0BDFGUW1NnJE+5Lx5rBJ54=
Subject key identifier: C1:EC:59:32:82:7E:8F:1F:4D:5C:06:FA:63:19:D3:00:70:2C:48:58
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018F7284EFD795B73071B9C3561332A064B6
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/wexZMoJ-jx9NXAb6YxnTAHAsSFg.roa
Signing time: Mon 13 May 2024 15:14:25 +0000
ROA not before: Mon 13 May 2024 15:14:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152672
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:84:ef:d7:95:b7:30:71:b9:c3:56:13:32:a0:64:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: May 13 15:14:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ec5932827e8f1f4d5c06fa6319d300702c4858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:5b:02:c8:bf:56:fb:18:38:8f:d0:12:72:
0f:b2:3a:9c:a5:ef:df:f6:25:63:a5:44:99:c6:73:
3c:ec:80:37:ee:09:00:10:c4:32:d8:56:d9:f8:57:
2a:f7:cf:7a:4f:df:f9:09:82:c0:1b:90:d2:c0:7e:
75:d9:23:60:c9:ed:a2:1a:22:74:b5:f5:8d:7a:35:
e8:b7:72:cc:d6:8a:97:3a:bb:fe:4b:5a:e6:49:9c:
08:4e:c4:66:60:99:95:3b:ed:da:91:ef:0a:d0:15:
bb:fa:ad:66:d6:7f:e4:a5:d7:4e:dc:c4:3b:13:a6:
31:99:15:d7:62:3b:2a:f0:21:ce:c5:cb:20:1d:72:
c4:46:66:1e:c4:64:ec:6f:45:e1:e9:c1:18:ba:cf:
92:01:20:4a:42:da:0e:30:2e:7a:80:f3:75:bf:40:
db:70:43:dc:09:1b:a9:fc:ec:df:eb:74:6c:6e:63:
41:76:96:bf:61:59:05:c7:ea:69:ee:69:75:d9:f5:
a5:c0:2d:55:8e:f1:e3:5c:79:ec:5e:4f:bd:c4:8e:
30:99:73:47:e5:89:b6:52:7a:10:19:c3:d0:52:84:
a2:7d:dc:4a:8d:5a:74:55:c2:5b:ea:d5:ab:aa:75:
30:28:0b:4d:8b:f2:a9:7c:d7:10:d1:66:35:d6:af:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:59:32:82:7E:8F:1F:4D:5C:06:FA:63:19:D3:00:70:2C:48:58
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/wexZMoJ-jx9NXAb6YxnTAHAsSFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f2:d4:60:cb:ef:5e:2d:28:91:c6:e6:d8:eb:1c:1c:6b:a9:
ad:e4:bc:ad:6f:cf:8a:93:7a:fc:9b:48:d4:e0:98:16:1f:a6:
60:d2:65:d3:ed:c8:b9:3c:cd:8c:bd:5e:43:3e:34:07:71:3d:
34:37:51:1f:28:d7:f6:51:4c:33:81:0b:af:7e:b5:d7:43:18:
78:15:b0:1e:68:9b:d7:c9:68:50:c2:4a:b3:46:d3:f2:23:2e:
55:c9:2f:91:86:cf:00:13:78:18:48:9b:d7:b2:b5:41:7d:c5:
e0:8f:00:33:82:de:4a:53:ff:2b:25:b0:a8:e6:23:0b:66:fd:
25:d2:19:57:b3:ab:f0:14:77:cb:17:d8:85:3f:39:aa:8c:a3:
c7:72:a9:31:43:16:92:19:9b:5c:0d:9e:d1:fc:c1:1b:65:ab:
63:bc:10:ff:45:f0:4a:b9:66:65:3e:aa:5c:5e:76:b2:16:77:
91:fd:8a:89:dc:bd:78:ae:e1:8d:7c:db:5d:ed:73:ea:f3:96:
4c:84:f8:c8:bf:f7:4a:95:1f:be:e8:e2:d7:17:c4:d2:e4:7c:
eb:ba:68:76:8e:83:ec:01:92:37:21:da:ee:a6:9a:40:1f:40:
64:94:40:a3:35:b8:58:5a:ac:85:6c:9a:45:5a:88:0e:17:e3:
72:86:f4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:20:16 2024 by rpki-client on console-ams.rpki-client.org