Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/W1WMpGbI13dtU5sCCPIwRkjiASM.roa
File: W1WMpGbI13dtU5sCCPIwRkjiASM.roa (raw, json)
Hash identifier: 7/AFZ8Uhz3BsM2JhsK5T/FYA+815FTwQ3c9PeQGvs8k=
Subject key identifier: 5B:55:8C:A4:66:C8:D7:77:6D:53:9B:02:08:F2:30:46:48:E2:01:23
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01906DA17E39DA0D39C01C39DA3E69131B42
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/W1WMpGbI13dtU5sCCPIwRkjiASM.roa
Signing time: Mon 01 Jul 2024 09:30:18 +0000
ROA not before: Mon 01 Jul 2024 09:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60464
IP address blocks: 80.93.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:a1:7e:39:da:0d:39:c0:1c:39:da:3e:69:13:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 1 09:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b558ca466c8d7776d539b0208f2304648e20123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:09:0d:5e:0b:17:97:ad:0f:85:13:54:a2:
25:a1:49:15:39:98:fc:e4:10:ae:26:74:2c:8f:ff:
3c:57:74:3b:f8:85:18:ea:87:28:fe:61:bb:8c:21:
e6:e3:29:07:0b:8d:a3:68:b1:d3:cd:10:03:fe:ce:
d9:ae:6d:3e:94:90:45:9c:5b:32:cf:32:7d:a5:18:
fb:08:31:7e:be:b9:13:a6:71:50:07:58:62:e5:5f:
75:4a:65:6d:99:1f:08:5f:8b:cb:d7:29:71:af:f9:
59:36:8d:e8:a6:d1:a0:92:94:9f:31:eb:94:59:d5:
35:61:f4:12:bd:53:ef:12:53:47:f7:36:8f:4d:1f:
95:91:ed:21:c3:5a:3b:98:cd:9c:e7:46:32:8a:a4:
04:8f:b8:29:5f:c7:90:b6:6c:7e:b0:7e:be:16:f9:
3d:fb:14:26:5e:8f:25:34:fd:02:03:71:c5:f7:0d:
5d:c6:bd:af:bf:e1:f8:db:4f:aa:a2:dd:9d:7b:81:
db:55:2b:1b:5e:9d:a2:a6:ad:d5:2c:90:1d:47:3f:
86:3a:b6:e3:15:99:d9:99:fd:5d:e6:f2:4d:80:d3:
69:8e:62:50:f3:09:b8:1e:a5:62:85:72:69:7f:81:
1f:32:bf:ec:07:f1:c5:7a:51:f8:42:a1:30:9b:67:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:8C:A4:66:C8:D7:77:6D:53:9B:02:08:F2:30:46:48:E2:01:23
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/W1WMpGbI13dtU5sCCPIwRkjiASM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:20:bf:b0:8d:3d:cd:9d:42:30:d6:6a:32:d8:75:1f:56:68:
66:f7:2d:c5:bf:81:c0:d1:62:b8:be:0c:fd:c7:6a:a5:4f:a4:
9c:46:d4:c2:1c:e8:60:3f:94:12:2e:46:f2:03:40:86:40:11:
aa:e5:5a:fa:95:ea:21:9f:54:99:85:2c:37:67:9d:d8:f4:a3:
60:bf:19:f0:b7:ee:66:fc:cd:6b:20:1b:54:66:14:48:a2:1c:
ab:22:2a:84:d5:5f:85:c4:0a:dc:66:5b:ae:4f:98:1c:5b:7b:
8a:d1:92:36:14:b3:ff:d7:11:d2:c2:ee:f9:ce:bc:78:f0:e9:
29:c8:56:75:1a:c7:96:c4:1e:17:76:da:88:64:cc:bb:f3:71:
7d:48:b9:b4:36:16:2b:8d:61:c0:79:99:fe:fe:34:ee:e7:4b:
14:f8:98:5b:11:bf:42:b1:36:e9:66:93:e5:10:10:55:e0:7e:
48:1e:ef:f2:09:38:49:0a:d5:c5:4a:0c:9c:09:4a:bf:99:2a:
5b:5a:05:55:d5:52:e0:ec:ae:a9:51:4d:15:f4:e1:76:73:05:
cc:47:a9:71:14:63:87:e1:58:e5:95:d0:4a:84:d9:0e:77:5d:
00:39:c3:be:4c:7b:69:d2:b5:30:6a:0b:1c:fe:9e:72:da:33:
51:4a:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:31:22 2024 by rpki-client on console-fra.rpki-client.org