Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/wqkgwmGPiH17GDVCLxWVq44HD18.roa
File: wqkgwmGPiH17GDVCLxWVq44HD18.roa (raw, json)
Hash identifier: NuIKjGzKf2FkKCE0w51pWlb9VEpke4mXFfv+F7zgL/c=
Subject key identifier: C2:A9:20:C2:61:8F:88:7D:7B:18:35:42:2F:15:95:AB:8E:07:0F:5F
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC93B3C5239DE3627983F669C7B969
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/wqkgwmGPiH17GDVCLxWVq44HD18.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201867
IP address blocks: 213.198.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:93:b3:c5:23:9d:e3:62:79:83:f6:69:c7:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a920c2618f887d7b1835422f1595ab8e070f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:2a:ea:ae:27:4e:8f:14:52:7b:4f:6a:7e:
a2:31:58:87:2e:0b:b2:15:22:80:df:be:1f:d0:92:
ea:29:c4:98:2b:c7:e0:01:9a:4b:06:fd:05:80:04:
bf:15:8a:1f:0b:17:4a:ac:7a:d5:62:b1:fb:eb:63:
ce:77:75:99:67:e3:66:1a:27:14:31:a6:87:de:3a:
d6:99:09:97:c2:76:11:90:38:c3:96:24:97:b1:b8:
4d:4a:17:97:e8:fb:0c:1a:40:a8:9e:8d:65:35:65:
df:76:2a:1f:7a:e4:ff:a5:74:92:95:1e:93:37:9d:
e0:8c:0d:7a:f2:4f:e5:92:1a:ce:5c:df:31:88:5d:
bd:2c:ae:51:8f:8f:f9:23:b9:70:c0:f6:e8:d6:80:
55:5d:ce:19:c4:cb:b5:4a:33:3d:62:28:5e:4c:5b:
8b:50:ad:ce:e2:45:ae:06:12:cb:bd:67:23:9a:e7:
9d:b1:6d:73:4e:b4:55:84:49:68:4f:07:a2:d6:47:
8f:b5:22:b1:5c:86:f3:7f:36:3c:f2:10:9d:4e:22:
8e:00:8a:09:e7:8f:bf:e4:5a:9d:57:42:69:24:70:
64:14:b0:da:66:58:f8:7a:b3:ab:42:9f:62:75:2f:
91:b0:db:79:85:db:bf:5f:84:93:60:28:c0:7d:87:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:20:C2:61:8F:88:7D:7B:18:35:42:2F:15:95:AB:8E:07:0F:5F
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/wqkgwmGPiH17GDVCLxWVq44HD18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:09:49:16:c0:13:56:8c:80:33:04:d8:23:fb:4b:a1:59:
68:62:7b:4a:f9:0f:6a:f2:e9:ac:42:05:55:40:64:5b:ed:2d:
f4:5b:e3:da:3b:7b:4b:29:df:d2:48:79:8f:f7:88:2f:9c:66:
56:3b:ae:70:22:93:9c:25:06:e9:1a:e3:81:c7:1e:5c:14:f1:
fa:ca:1e:65:7b:e3:02:56:d0:c8:1c:85:d7:a6:3d:9b:81:6f:
82:aa:d9:38:bf:28:ed:f8:97:0c:60:fa:83:54:31:af:8d:a6:
45:0a:ad:ab:67:35:fc:25:4c:d6:ac:51:f5:eb:80:3b:0d:9f:
fe:cb:9d:fb:f8:35:34:3d:d7:35:26:06:ff:33:2d:46:c1:ff:
75:20:cd:82:79:c5:d3:ee:3f:f5:18:1c:b3:e6:16:5a:0f:1d:
c2:b7:49:8b:7b:8c:a9:43:6d:f4:66:24:ee:59:c8:17:bd:7c:
43:df:61:d0:9f:0d:ff:6c:d9:b3:95:6b:94:89:ab:f0:98:3d:
36:20:26:a8:2e:b4:7d:4a:3e:1f:f3:e7:fe:13:b4:21:70:05:
1c:16:e6:b5:42:2f:c1:b3:d9:05:c7:ca:cd:9d:63:f3:3f:c6:
ba:3b:24:4b:e7:b4:5c:66:6c:f2:b9:8b:bd:72:ac:cb:e7:9d:
3f:52:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:14:20 2024 by rpki-client on console-ams.rpki-client.org