Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WddB3E47g_WDO0GyuAWuiM_7_Oc.roa
File: WddB3E47g_WDO0GyuAWuiM_7_Oc.roa (raw, json)
Hash identifier: q11PG7cnHF5THPTvPiHFchgs2OaytnviaMTCaNEzCE8=
Subject key identifier: 59:D7:41:DC:4E:3B:83:F5:83:3B:41:B2:B8:05:AE:88:CF:FB:FC:E7
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93C831576D667D05FDF47A0622CBE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WddB3E47g_WDO0GyuAWuiM_7_Oc.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.255.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:83:15:76:d6:67:d0:5f:df:47:a0:62:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59d741dc4e3b83f5833b41b2b805ae88cffbfce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:07:8f:e2:44:72:d6:ec:29:63:fc:24:1e:
ea:ab:af:bf:c9:61:4a:26:f2:87:2a:df:b1:fc:ef:
5e:4d:fa:6a:d2:ed:92:57:9b:1d:44:3e:20:3d:97:
e0:45:fd:ee:88:68:2a:05:f9:b7:b8:e3:af:aa:42:
60:28:e7:1c:56:ce:25:ae:17:8a:45:3a:8c:8b:59:
be:9e:05:72:f1:bb:1f:68:da:92:ae:dd:47:c2:a5:
fe:57:e5:8c:f9:87:d9:13:90:37:14:33:0c:0b:d4:
0d:eb:e1:78:7f:2f:20:07:8b:6d:6d:55:c8:72:48:
f4:d3:93:bc:44:76:5c:ba:ac:71:de:06:3f:c3:97:
98:55:b6:4c:f4:12:1d:71:d4:b6:54:29:32:d1:d7:
8f:d2:72:e6:9c:a1:1a:b6:69:5b:d1:c7:71:3a:48:
7c:ce:b3:86:89:01:53:79:27:63:4b:10:15:37:f3:
56:ce:c2:9d:c3:68:f9:6f:15:3f:32:cb:dd:6c:3b:
c4:c6:19:01:d0:38:42:56:f3:29:27:2b:b0:cc:c7:
0b:3d:b2:fd:d8:56:18:42:e5:6e:ee:c3:76:09:c1:
b0:53:62:25:35:d8:3b:56:ad:d3:cc:5f:92:b4:fd:
27:87:6d:e1:6c:bf:90:a5:95:d7:b0:95:df:0e:e0:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D7:41:DC:4E:3B:83:F5:83:3B:41:B2:B8:05:AE:88:CF:FB:FC:E7
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WddB3E47g_WDO0GyuAWuiM_7_Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
92:01:2e:9a:ec:04:58:d8:9c:2e:72:a7:a9:9e:b1:57:de:64:
b0:f2:83:90:01:86:d1:15:dc:75:4c:19:52:f1:2d:83:0e:85:
e4:fe:72:ca:4a:81:d0:cc:b2:5b:a1:2e:6c:b4:7c:2f:a5:62:
27:7d:77:d4:96:33:0d:28:02:6f:fd:ff:c5:1e:c3:ce:a9:1d:
f4:eb:0d:f7:f9:92:50:7b:f2:70:f3:74:99:52:6e:02:39:2c:
aa:cc:45:f2:8c:0b:0c:e4:85:4b:28:63:88:5e:0e:7c:7a:c0:
82:14:3a:37:3b:0d:d3:86:b5:6e:d5:68:69:14:0c:63:96:1c:
ef:90:2d:50:97:5d:4e:5f:16:78:40:cb:79:82:00:db:bd:d2:
ee:e6:fd:2b:19:71:76:d4:8e:b5:0e:33:72:1d:bf:c5:e6:7a:
67:79:e2:b1:01:b9:fb:39:e4:3a:5c:c3:07:a0:4d:20:40:f2:
c1:1b:bb:48:13:84:0a:4e:57:ca:4b:f5:af:a6:ac:22:1d:3e:
78:15:87:40:47:01:80:7f:aa:c5:83:fe:aa:3f:10:d2:18:d7:
a0:e9:f0:81:bf:f1:89:1b:4e:bc:92:c8:4b:b7:fa:ad:7b:dc:
f8:74:0e:d1:2d:db:05:ec:3c:a3:56:cd:23:5c:63:5e:cb:a5:
7d:8f:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:52:02 2024 by rpki-client on console-ams.rpki-client.org