Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/wBhrb3V_RycERU7H1u6OEq4_6c0.roa
File: wBhrb3V_RycERU7H1u6OEq4_6c0.roa (raw, json)
Hash identifier: sR2vTe8rX7vAvaJ7dRcEQw6jk5lufUxLUmkrccKt8pA=
Subject key identifier: C0:18:6B:6F:75:7F:47:27:04:45:4E:C7:D6:EE:8E:12:AE:3F:E9:CD
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 018CC9BCAD83B919D2BAB68608272B66E557
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/wBhrb3V_RycERU7H1u6OEq4_6c0.roa
Signing time: Tue 02 Jan 2024 10:33:54 +0000
ROA not before: Tue 02 Jan 2024 10:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20546
IP address blocks: 185.253.204.0/22 maxlen: 24
193.16.220.0/24 maxlen: 24
91.223.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ad:83:b9:19:d2:ba:b6:86:08:27:2b:66:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Jan 2 10:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0186b6f757f472704454ec7d6ee8e12ae3fe9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:62:54:bd:24:9d:d4:18:11:53:fb:88:df:
53:e3:0a:46:65:a5:d1:e2:ef:38:fd:29:97:85:17:
09:ee:9f:dc:2e:35:21:7b:fe:e0:ea:91:79:91:d8:
b6:e9:73:63:6b:28:3e:74:c1:73:5e:70:00:75:db:
5d:86:09:d8:70:44:a6:a3:70:58:66:82:88:ca:07:
47:61:02:c2:8e:d2:2f:0c:9d:e8:b8:67:06:bf:ab:
b4:a6:2b:97:57:1c:e6:88:78:91:03:dd:fc:0e:f1:
8d:f9:73:d1:9f:9f:2a:b1:f6:c2:4d:e3:bb:67:e8:
ba:b8:b3:e9:10:26:e4:6f:ff:d4:53:30:23:0f:da:
6d:19:fd:91:1d:74:c5:9a:3b:2e:bd:ed:90:7a:f5:
d8:a7:df:a0:17:d0:ce:71:35:b9:15:a9:36:e3:3d:
ff:93:7f:5c:17:98:82:f2:f6:2f:30:36:db:fc:e5:
69:ae:54:d9:39:28:87:1c:26:16:55:e2:b1:2b:02:
75:d4:75:9a:46:8a:89:29:74:74:e1:57:82:5c:61:
b2:b7:e5:02:f3:bc:24:83:3f:ab:d9:03:f9:74:7f:
7f:29:8e:18:3f:0a:8e:32:68:33:ec:ef:71:97:cc:
93:68:5f:6e:0c:03:10:51:8a:a2:f3:c1:e3:98:3b:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:6B:6F:75:7F:47:27:04:45:4E:C7:D6:EE:8E:12:AE:3F:E9:CD
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/wBhrb3V_RycERU7H1u6OEq4_6c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.186.0/24
185.253.204.0/22
193.16.220.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5e:04:d9:c9:aa:81:75:0f:4f:a4:5a:9d:b5:ce:ed:96:1a:
98:18:63:e1:f5:ac:40:06:71:1d:de:44:8b:28:49:4b:d1:02:
bd:e5:5f:8b:61:47:bd:6d:85:b7:95:0f:5a:81:9e:66:56:ee:
12:28:05:e4:2e:ff:56:0e:60:ed:6d:37:cb:d1:e1:a6:ae:70:
3d:0c:70:82:dc:80:73:e5:ed:37:d2:83:1d:8a:9f:bd:aa:d2:
b5:2a:2e:5b:46:7b:32:c2:ec:ef:d6:83:79:52:7a:4d:de:bb:
cf:4e:99:74:e5:0e:02:2e:46:b0:0e:6a:e6:ea:b0:b0:be:4f:
49:d1:ef:e6:3d:f1:85:65:f2:a6:06:52:f6:ba:67:33:7b:fb:
c3:c7:22:5d:23:25:53:60:1b:d4:b6:02:dc:ce:3d:9d:fa:92:
dd:81:92:4a:75:55:27:2b:fc:01:7d:ba:ff:d8:64:0c:83:3a:
cd:d8:77:ab:6b:0c:ba:7e:d5:e2:2b:00:40:0d:6b:25:e8:0c:
69:20:ae:a2:e2:49:12:39:31:ba:e5:c0:93:c6:f6:26:bb:9d:
77:5c:e9:9e:d9:c6:87:df:57:bd:4a:09:d4:59:09:f4:d8:48:
49:f7:1c:c9:fb:3b:97:10:3f:4e:af:77:43:ef:fb:6f:7b:a6:
6b:ca:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:14 2024 by rpki-client on console-ams.rpki-client.org