Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wiNYfAXjJk-irCmBY0Bdb31HI_w.roa
File: wiNYfAXjJk-irCmBY0Bdb31HI_w.roa (raw, json)
Hash identifier: kIaV27fPwPZ/UQcYWZrjo/jABiPpAol9UNRMrGcjL5Q=
Subject key identifier: C2:23:58:7C:05:E3:26:4F:A2:AC:29:81:63:40:5D:6F:7D:47:23:FC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADCFA0F156AE5B66A1492BCB7DA8B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wiNYfAXjJk-irCmBY0Bdb31HI_w.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20616
IP address blocks: 81.180.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:fa:0f:15:6a:e5:b6:6a:14:92:bc:b7:da:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c223587c05e3264fa2ac298163405d6f7d4723fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:59:e6:cd:43:d1:f2:74:83:d8:62:5f:bc:
40:0e:10:04:e8:5f:f7:9c:06:e9:e7:00:aa:13:dc:
f9:61:36:b1:b3:b4:af:8c:1c:b4:d3:04:1c:7e:32:
4e:48:69:43:f9:ed:eb:a2:df:e4:e5:c7:22:be:9b:
8d:7b:a0:4d:50:81:32:e8:6e:c7:5c:e0:81:2d:26:
ca:04:7e:6f:04:a7:af:2a:0f:f3:f6:75:77:74:6d:
a3:a5:a2:e0:41:2c:e6:c6:d6:7b:bf:ba:2b:d3:f3:
22:95:c7:bc:43:ec:d0:7b:cc:99:41:82:fd:2d:95:
3f:52:e2:2b:e1:83:06:41:56:df:8a:ec:16:16:e8:
0e:75:4b:00:31:b9:f5:9f:4d:28:eb:f9:de:43:fa:
3e:d5:2a:74:d4:d0:2f:fe:7f:c2:23:11:b2:af:ee:
07:80:8b:2a:99:35:23:aa:00:4a:57:9f:e8:e3:4b:
bc:75:78:b4:ef:de:45:95:6e:89:e8:cf:b4:7c:84:
44:29:93:82:02:e3:fa:f0:fd:e1:10:a8:5e:74:ab:
12:43:70:55:3c:0d:6d:cc:4a:a2:94:1d:aa:78:64:
fe:fb:d1:77:29:f4:9a:0a:f3:bc:39:01:c7:70:75:
5d:32:c2:4f:81:11:a7:76:b0:43:a9:00:53:3b:68:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:58:7C:05:E3:26:4F:A2:AC:29:81:63:40:5D:6F:7D:47:23:FC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wiNYfAXjJk-irCmBY0Bdb31HI_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fa:1a:de:90:3a:9a:87:31:83:31:1e:aa:76:3a:0d:83:a3:
f8:23:d0:98:05:d4:d1:6d:56:4b:fd:2c:45:a2:e6:03:80:fd:
3a:67:3e:b1:2c:6d:be:4a:f1:d4:88:35:38:1c:29:43:02:f2:
21:da:28:33:e7:b2:35:3d:fb:06:a6:fc:94:7d:b7:30:30:10:
14:b4:e2:71:18:d5:6b:cb:55:b3:ab:60:c8:63:6d:11:06:38:
a6:5c:b1:d3:55:6d:25:d6:56:d5:27:31:ba:2a:64:89:ef:ec:
8b:e3:be:c9:b1:63:65:ee:a1:cd:22:3b:16:62:05:2a:7a:ca:
80:ba:31:32:c3:81:0b:a7:65:4a:2d:8a:22:1d:c5:ce:bd:bb:
4b:f5:79:cd:f5:bd:37:5b:56:b9:6a:99:d6:a6:60:6d:6b:95:
93:99:45:4e:5f:4d:48:23:fc:d2:fd:5a:72:fb:9a:35:bb:ef:
60:41:a7:95:06:c0:de:21:ed:ca:2b:d9:cc:1e:42:57:f0:20:
b0:57:00:62:80:1e:86:a1:5c:56:c4:58:28:a4:43:7d:31:f7:
c2:2d:16:cd:6c:e9:79:35:fd:50:28:5e:01:88:79:f2:77:98:
08:b6:f3:d8:ed:68:67:45:85:57:a3:c4:fc:f4:36:77:ab:c6:
6b:69:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:13 2024 by rpki-client on console-ams.rpki-client.org