Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wo90JE-1q19aNxoqWq2psvzo6q4.roa
File: wo90JE-1q19aNxoqWq2psvzo6q4.roa (raw, json)
Hash identifier: RvNhIRK8hHT07IepEHtKGBANQ8mzvPiRYyXUHfwWugA=
Subject key identifier: C2:8F:74:24:4F:B5:AB:5F:5A:37:1A:2A:5A:AD:A9:B2:FC:E8:EA:AE
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649CF6FED6189729683247E48265CA4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wo90JE-1q19aNxoqWq2psvzo6q4.roa
Signing time: Mon 01 Jan 2024 18:29:35 +0000
ROA not before: Mon 01 Jan 2024 18:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:cf:6f:ed:61:89:72:96:83:24:7e:48:26:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c28f74244fb5ab5f5a371a2a5aada9b2fce8eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:80:bf:b2:51:25:79:0b:91:98:9b:a3:7c:
15:54:b7:80:04:6f:87:b1:3a:8c:fa:9b:50:83:a4:
0d:06:aa:fd:85:4c:47:8e:13:41:9b:22:b0:a7:9f:
92:4c:09:58:32:66:79:e6:db:f5:24:73:9c:71:f7:
c1:f3:39:cc:16:58:ad:09:e5:2b:b1:2c:99:3e:c6:
be:7e:ba:69:f3:bf:6a:37:b7:fc:6d:6d:4e:b9:94:
64:4d:6c:2a:6e:4b:63:70:94:7f:e1:e7:af:f6:d1:
f5:99:4e:99:0e:ec:49:00:6b:da:a6:9d:0c:70:1f:
95:a6:74:1a:3a:73:d2:8c:75:ed:a8:c5:fc:30:f7:
72:99:d1:c2:8e:22:17:c8:38:6a:b1:84:99:84:3c:
32:5f:2a:8e:01:35:c9:89:2a:ee:82:3b:2e:c2:2d:
7a:88:2a:5e:5b:dc:21:d7:08:e8:23:b2:8d:d3:94:
d9:f5:4b:df:f1:f9:a3:4a:1a:51:76:cb:45:e9:9e:
8e:29:9b:17:63:e2:eb:d2:f4:78:0f:5a:e6:3e:59:
ed:9f:39:3f:79:05:2a:54:05:46:ef:28:cb:8e:75:
0b:83:c3:02:c6:1e:44:09:8a:bb:22:f4:7f:3e:34:
02:5c:f0:f3:0d:10:8c:5c:d4:88:5a:10:6d:fc:06:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:74:24:4F:B5:AB:5F:5A:37:1A:2A:5A:AD:A9:B2:FC:E8:EA:AE
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wo90JE-1q19aNxoqWq2psvzo6q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:8a:27:75:46:5a:a6:0b:33:0d:82:61:99:22:78:38:c5:05:
1e:48:4a:80:98:a7:d4:6b:b6:a1:e0:b2:33:0a:ea:ca:fa:41:
12:72:96:20:77:d8:c3:e4:8e:06:d3:93:95:22:8e:10:49:ac:
cf:9a:de:1d:54:1b:35:26:6e:46:e5:4c:1a:77:02:f0:2f:24:
b7:79:a5:ed:66:d1:d2:b8:cb:d7:7e:b9:5c:d8:5b:c5:48:6e:
04:93:e7:70:d5:20:e0:f7:30:fa:b9:b9:94:b8:ab:ae:b4:dd:
ca:c1:87:2f:8a:e3:83:0f:f4:a6:af:87:ad:f7:f1:dc:99:ac:
6f:8a:d0:e5:83:92:03:84:57:e2:d3:5d:2d:a7:2c:0a:e1:ab:
49:4e:9c:43:e6:8d:cb:de:19:e4:b9:80:62:5d:a5:f8:44:a7:
61:2e:81:ce:de:ac:0e:eb:20:36:ef:56:bd:91:f8:d3:1d:84:
25:08:4c:c5:50:a0:cd:24:76:5d:ec:0c:46:fd:c3:12:b9:c5:
f3:da:58:42:f6:8e:10:24:9b:91:c6:38:ff:1d:22:8d:e8:46:
1e:b5:3c:01:b4:6f:ba:77:83:ac:25:df:89:11:4a:ff:c4:e6:
57:ac:1e:27:f3:23:17:47:74:c8:32:8b:83:db:77:db:52:cd:
d6:26:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:43:06 2024 by rpki-client on console-fra.rpki-client.org