Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/wpF89_D00ZdHfPyraQggFe4Sk5g.roa
File: wpF89_D00ZdHfPyraQggFe4Sk5g.roa (raw, json)
Hash identifier: K1Fszc7aVzWWcsNa1xvpNHoUiYcOQhQ29rLwwCfVS04=
Subject key identifier: C2:91:7C:F7:F0:F4:D1:97:47:7C:FC:AB:69:08:20:15:EE:12:93:98
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 018CC9BA69B8D217C56C61012C5B49403CE7
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/wpF89_D00ZdHfPyraQggFe4Sk5g.roa
Signing time: Tue 02 Jan 2024 10:31:26 +0000
ROA not before: Tue 02 Jan 2024 10:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203676
IP address blocks: 185.126.172.0/22 maxlen: 24
2a06:ca40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:69:b8:d2:17:c5:6c:61:01:2c:5b:49:40:3c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Jan 2 10:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2917cf7f0f4d197477cfcab69082015ee129398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:c7:e8:0b:cb:3c:71:77:f7:a6:21:5a:68:
74:5f:45:8e:eb:05:dc:8f:41:6f:ba:39:a3:e6:56:
ee:29:e5:62:64:47:c9:2b:de:9d:a6:42:69:7f:a7:
97:e4:31:ff:ad:62:1e:e4:15:6b:3a:0f:19:93:83:
bf:b2:db:73:2e:de:fc:1d:61:30:1e:93:aa:7c:77:
f6:d9:d3:28:f4:ed:92:81:47:e3:e2:be:11:ed:3c:
70:e4:86:44:48:11:29:9a:b1:66:0f:26:3e:67:1a:
c1:cd:0d:b5:45:9f:fc:6e:51:9a:66:c0:11:be:1f:
ff:7b:2c:9d:d8:e4:1e:cc:0b:52:6e:1c:02:90:ba:
ff:4d:fd:55:e1:e8:8f:ce:c4:d2:63:fa:d6:a2:9e:
d9:42:f3:48:7f:1e:f4:49:52:38:5b:29:42:f5:cd:
6b:f1:fa:c8:64:7d:36:e8:ad:50:41:05:09:c1:90:
95:15:94:16:c3:da:1c:02:90:c3:a0:5e:4c:ae:31:
99:7e:a3:4d:12:7e:39:26:14:de:d9:6f:d1:8c:9f:
4e:3d:db:01:79:40:05:17:27:1e:68:c2:84:57:f2:
fe:ae:b9:0b:22:db:0c:07:22:dc:9f:a1:06:60:65:
3d:22:81:02:7b:56:dc:3b:e6:78:ef:4d:88:9f:2b:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:7C:F7:F0:F4:D1:97:47:7C:FC:AB:69:08:20:15:EE:12:93:98
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/wpF89_D00ZdHfPyraQggFe4Sk5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.172.0/22
IPv6:
2a06:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
47:f5:39:d9:ae:02:6a:03:54:07:37:8f:54:f2:8b:38:c6:80:
52:56:a2:35:42:29:24:fd:3b:bb:8a:1e:25:d3:42:fb:59:1a:
81:ae:38:28:cc:4b:ac:f2:e9:c4:01:2f:46:3a:a8:43:17:5e:
85:61:5b:7e:64:87:b0:f0:6a:a5:19:51:19:54:71:be:25:65:
68:2e:50:44:b1:b8:5a:0c:22:c6:72:45:c7:ac:56:4e:02:3d:
c2:58:fb:88:9d:fb:bc:b3:f1:34:25:7e:ba:08:be:c6:8e:b1:
f3:26:3a:18:d3:c0:4f:7d:07:0e:27:ca:a8:74:01:ba:d7:12:
14:b4:f7:34:02:72:2b:a9:ad:0f:ca:73:fe:ce:16:16:88:c0:
98:47:00:55:5f:99:94:1e:c0:be:e1:ca:89:f5:fe:43:8d:54:
16:24:c9:3b:d3:ff:fb:db:6d:ef:43:59:ee:c5:96:4a:75:7b:
31:ec:1b:72:64:11:44:1f:62:1a:c8:ce:61:60:1e:ad:76:89:
3f:60:53:fe:fa:4b:58:0d:5c:77:88:3f:60:46:d4:05:84:4d:
6c:1d:1d:fe:03:ea:2a:31:07:18:98:66:92:9e:11:54:c6:3c:
69:8c:05:95:10:ed:71:44:12:d5:4e:5c:4e:39:32:a1:13:e2:
c1:74:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:19:37 2024 by rpki-client on console-fra.rpki-client.org