Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa
File: wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa (raw, json)
Hash identifier: zGY8sgGyqNuHM+Y8TKsJqs+yAkfthIWgi6VbMoZwC5c=
Subject key identifier: C2:0B:07:47:18:34:4E:F6:97:60:BC:97:24:4A:60:50:3A:07:90:AF
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018CC6B83277D7F197C2921FA14E3A9DE941
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa
Signing time: Mon 01 Jan 2024 20:30:09 +0000
ROA not before: Mon 01 Jan 2024 20:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54600
IP address blocks: 193.160.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:32:77:d7:f1:97:c2:92:1f:a1:4e:3a:9d:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 20:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c20b074718344ef69760bc97244a60503a0790af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:66:b2:3b:5c:ce:a0:ea:5a:4d:d7:9e:65:
04:03:97:2d:2f:5b:42:c0:b1:86:54:3d:00:d6:25:
80:e1:ca:df:c1:69:4c:bd:18:6b:f9:fe:c9:d3:3d:
1d:19:6b:da:d2:32:8e:36:ed:ef:f9:a7:ea:b4:b7:
0f:1f:1b:ab:80:ad:99:09:b4:c1:32:a5:82:8f:3e:
ea:d2:2d:22:1c:2e:a3:9b:11:e2:57:9e:a5:f6:74:
74:a6:ee:b8:28:81:6e:e4:87:12:cb:b0:95:4d:90:
2c:7f:fa:9b:9f:dc:6f:15:43:44:ec:5e:86:29:ad:
1a:b5:c2:30:37:96:da:a3:ec:f5:4b:17:d7:df:83:
88:d9:22:94:e8:ea:13:58:04:2a:0e:35:c8:8d:44:
cb:3c:c9:70:c7:3c:0e:f8:4f:49:7e:23:14:1b:4d:
b4:20:14:c9:34:a8:6c:1e:ca:24:95:d4:76:dd:8f:
41:a2:d4:86:0e:93:6d:35:34:28:93:77:e5:f0:69:
67:2e:32:bc:13:23:73:9e:f5:97:f1:b1:35:5c:eb:
9a:9d:47:d4:dd:e1:d0:f8:51:33:22:7f:4f:e3:e5:
60:98:15:01:70:75:b7:51:3f:50:d3:1f:45:08:ee:
e0:de:f1:5f:06:f6:0a:15:a4:75:70:b7:27:cf:be:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:07:47:18:34:4E:F6:97:60:BC:97:24:4A:60:50:3A:07:90:AF
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7f:52:e2:64:a8:79:2e:1c:ff:b1:cb:25:79:92:0a:97:f0:
1b:ad:c0:ee:6e:ef:01:5b:bb:ab:9f:86:15:4e:f3:07:07:4a:
46:96:3f:25:42:7f:95:a2:9b:65:74:dd:93:40:bc:bf:66:a2:
f7:bb:a5:d4:d1:06:c5:b9:ba:ea:49:62:d6:38:70:84:9d:54:
4e:74:ea:cb:7b:79:b1:2d:62:e9:df:e7:78:4d:a9:79:2b:f7:
8f:46:c1:55:91:ae:b1:80:ab:a2:0c:e7:a7:6d:2d:98:c7:4b:
90:5e:2a:f9:bf:a8:e5:dd:50:9e:b2:f1:b4:93:f2:fa:2e:1b:
ae:7f:d0:48:db:54:7a:92:f7:03:18:b0:2d:b2:79:23:ac:2a:
2d:00:16:34:b9:72:e1:49:30:39:80:bd:86:6e:77:75:a2:66:
72:72:6e:0b:c0:db:5e:56:6b:04:14:d2:b9:b1:0f:3d:ba:70:
04:35:4f:56:da:9e:4a:19:e5:fb:78:36:99:13:01:bf:a8:43:
27:12:61:46:23:8f:7a:29:da:fe:2a:a2:69:28:4e:7b:da:7c:
74:10:e8:bc:f0:e3:02:18:34:d6:47:96:32:5d:e0:30:1e:17:
f1:c7:2d:08:aa:4b:55:40:9d:e5:a6:23:34:53:22:52:b3:28:
cf:46:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:36:15 2024 by rpki-client on console-fra.rpki-client.org