Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/ww5Nz-3Lt8gxyj6Q8Gi8xtFz-f0.roa
File: ww5Nz-3Lt8gxyj6Q8Gi8xtFz-f0.roa (raw, json)
Hash identifier: WoNrLPbamAP1X1nb26y/ZP/JDpbpNvstb5G9uqLyzp4=
Subject key identifier: C3:0E:4D:CF:ED:CB:B7:C8:31:CA:3E:90:F0:68:BC:C6:D1:73:F9:FD
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01914B9A2806DCB716228F974722E9E53877
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/ww5Nz-3Lt8gxyj6Q8Gi8xtFz-f0.roa
Signing time: Tue 13 Aug 2024 11:57:59 +0000
ROA not before: Tue 13 Aug 2024 11:57:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 176.124.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:9a:28:06:dc:b7:16:22:8f:97:47:22:e9:e5:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Aug 13 11:57:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30e4dcfedcbb7c831ca3e90f068bcc6d173f9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:80:4c:ef:ff:9e:8e:2b:e5:b6:e1:d8:fb:
7a:d7:3d:0e:3f:ce:4f:fb:2b:f0:50:8e:c5:17:1d:
9e:f1:8f:a2:5c:54:1b:5a:62:5c:a3:a5:32:11:31:
4a:f4:38:26:f0:4e:82:76:00:90:c1:e2:07:9d:f7:
63:8c:f4:08:c0:78:96:ef:bd:0b:c7:85:5c:64:2e:
c1:64:1a:f3:97:0b:cd:72:47:c8:75:bd:6d:85:4b:
0b:a9:e6:84:02:b6:23:f9:2a:6e:a8:bd:85:f5:9a:
b2:ec:3e:e5:cc:65:d7:0f:1d:90:05:ac:f6:f5:ba:
5a:ff:e3:cc:1b:dd:a7:f5:95:d3:ce:cf:50:bc:5f:
26:10:3b:87:09:30:96:0c:38:a2:8b:96:22:da:e7:
59:de:36:81:12:a6:da:d4:1e:b5:26:89:e8:54:b5:
c9:d0:06:d0:36:39:78:2e:f4:fd:cd:c3:01:ed:d4:
bc:07:11:a7:61:f1:0e:12:02:8c:3f:dc:2b:53:e9:
55:84:2a:52:a8:2e:62:47:ed:db:2c:42:4a:a5:16:
8d:4f:89:98:61:bc:6c:e6:20:06:82:71:a9:09:e0:
4f:bb:a3:9f:79:38:ef:8f:68:d9:2a:c9:4e:81:5b:
ef:0a:d3:a4:cd:8a:50:6f:ed:2f:0f:31:c2:fc:12:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:4D:CF:ED:CB:B7:C8:31:CA:3E:90:F0:68:BC:C6:D1:73:F9:FD
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/ww5Nz-3Lt8gxyj6Q8Gi8xtFz-f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ee:89:ad:4d:12:6e:af:20:1a:79:fb:c7:c1:f0:cb:5d:ca:
9d:2f:7a:29:4b:36:a5:83:97:9f:40:c7:cc:c8:c7:6f:1b:8a:
a0:a8:8e:08:86:00:0b:84:99:68:05:0f:f9:34:ac:63:ff:3b:
bd:f1:d0:32:e5:87:aa:a2:a0:fa:61:fc:46:22:93:0a:aa:b6:
36:4e:28:67:a2:aa:68:0a:5a:23:3c:c2:97:80:e2:79:09:cf:
10:ae:3d:40:aa:49:a1:9e:9d:c9:2d:67:5e:45:1f:fd:04:77:
c6:09:df:5a:90:e2:e9:0a:ed:6d:b7:66:7d:46:4e:7f:89:61:
80:b6:3f:a2:ee:5d:dd:d8:8b:d4:aa:48:ca:87:e9:b8:e8:de:
d7:e2:38:ed:cf:ab:75:fc:d3:35:bb:e9:82:b7:ea:bf:50:43:
fa:5e:bb:74:69:2e:69:61:4e:06:66:91:f8:93:fd:c4:1c:8c:
dd:67:76:05:dc:df:e5:b6:2a:ea:27:40:8e:41:fe:4b:0d:09:
95:a6:bb:b2:ae:6d:f2:a0:fe:0f:66:03:53:aa:ce:95:75:d1:
0a:2a:13:58:91:3e:70:09:f1:8d:ec:ea:0e:7b:b1:71:ea:40:
f8:ce:80:c6:69:55:6e:6e:39:b5:57:bd:98:6b:bf:8c:5b:e5:
2e:27:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:15:13 2024 by rpki-client on console-fra.rpki-client.org