Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/WCe0Q8u-F6Wcz6b0lOWNAPU3k4c.roa
File: WCe0Q8u-F6Wcz6b0lOWNAPU3k4c.roa (raw, json)
Hash identifier: 31TkKa/nH4ONZCERWFrlfu5LFHTpOiuniS2tzxWvjMY=
Subject key identifier: 58:27:B4:43:CB:BE:17:A5:9C:CF:A6:F4:94:E5:8D:00:F5:37:93:87
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 018D13D7EB53A16A2DCA0C6481AE8A6A162B
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/WCe0Q8u-F6Wcz6b0lOWNAPU3k4c.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 146.255.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:eb:53:a1:6a:2d:ca:0c:64:81:ae:8a:6a:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5827b443cbbe17a59ccfa6f494e58d00f5379387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:6e:81:4b:74:ad:fe:b1:db:f0:6a:b9:6f:
23:ae:30:f0:43:44:99:a7:51:87:3a:5a:28:39:34:
91:56:c8:ab:e3:df:82:38:b6:01:27:0f:0f:97:c1:
fb:6a:50:3f:61:5b:4b:aa:ae:a8:4f:cb:8a:f4:14:
72:1f:73:8c:27:66:0e:75:ed:3e:c1:64:e7:1d:33:
4d:07:60:f7:c5:01:6b:7e:56:4c:7f:ca:de:ea:6d:
4b:7e:e5:ab:ad:2f:65:98:94:0b:ac:d0:8e:57:dd:
82:2d:94:5e:c4:8f:52:9f:0a:4a:1c:b1:71:91:39:
1b:3d:97:b6:3b:56:a9:b6:4b:64:5e:4f:16:bf:4b:
49:c8:7a:56:77:fa:eb:d7:29:30:f4:ec:b4:84:cc:
c8:b3:51:78:92:d7:c5:ee:71:26:9b:47:88:83:e8:
70:7d:93:c2:1f:40:8e:5c:f9:33:68:61:af:5c:3a:
fa:70:3a:11:b5:ac:c7:5c:44:e4:f3:96:49:46:21:
4e:04:fb:60:ce:33:5f:ca:ea:8b:68:3e:b2:79:d5:
83:b2:06:69:90:05:73:0f:b3:a5:a6:e4:7b:22:5d:
20:45:63:b9:9a:77:7a:52:f1:11:c1:d7:b4:92:9c:
6e:74:64:fa:4d:8f:63:55:8b:66:85:c2:70:ff:3d:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:B4:43:CB:BE:17:A5:9C:CF:A6:F4:94:E5:8D:00:F5:37:93:87
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/WCe0Q8u-F6Wcz6b0lOWNAPU3k4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.185.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c5:f5:62:cf:3f:91:bd:0f:58:62:c5:d9:e6:2a:11:b1:57:
8f:eb:a5:f7:b9:86:a1:f7:20:dd:5a:19:bc:fd:b2:72:e7:a0:
5c:3a:f4:7d:e9:68:c2:10:db:98:db:2c:76:f4:40:d7:ba:32:
ee:bb:2e:6d:ca:74:d4:73:16:07:98:40:e9:36:0f:6a:d6:b6:
76:ff:50:b3:6e:93:ca:0a:43:39:ab:fb:d7:89:db:f7:68:0a:
22:df:91:05:ab:21:6a:db:1d:2c:37:e4:28:fd:e2:24:0d:b6:
0e:73:ab:6e:28:30:7a:3c:8e:74:1a:29:6e:76:c3:0e:50:c9:
5d:07:e3:94:b0:ed:80:43:26:d2:31:2b:ed:d2:50:45:f8:6b:
fb:21:29:02:b6:f0:21:47:1d:40:28:c7:cc:ce:b8:69:21:41:
7a:1f:48:75:e6:35:69:00:ca:21:97:73:51:82:bf:dd:18:42:
62:c4:98:a0:9a:3a:63:ab:df:90:ec:1c:2c:41:9b:50:04:b4:
99:18:cd:57:61:47:91:dc:b3:7c:5f:9d:e4:a3:4a:d2:01:30:
e3:4f:65:1a:66:7e:7d:69:21:e3:90:5e:b3:61:97:ae:33:fb:
f9:75:cd:9f:50:d6:ff:68:b4:7b:26:3b:a1:ae:4b:60:6e:56:
a3:3a:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:58:25 2024 by rpki-client on console-fra.rpki-client.org