Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/WJe5jfwfgWWfroT9oZdCR_Jal88.roa
File: WJe5jfwfgWWfroT9oZdCR_Jal88.roa (raw, json)
Hash identifier: Y5c60z/VhSRoq5W3Ahw2RgDiGwjJTfNXKhVHj1v87jw=
Subject key identifier: 58:97:B9:8D:FC:1F:81:65:9F:AE:84:FD:A1:97:42:47:F2:5A:97:CF
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 018CC8010947583D94C3EB669F02DEA27DF6
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/WJe5jfwfgWWfroT9oZdCR_Jal88.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44072
IP address blocks: 185.178.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:09:47:58:3d:94:c3:eb:66:9f:02:de:a2:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5897b98dfc1f81659fae84fda1974247f25a97cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:0b:93:6f:4f:ea:a6:83:03:a0:73:91:6a:
35:60:be:98:9f:bb:11:f2:0d:1d:73:01:1e:de:5e:
12:a0:21:89:ef:1a:3e:26:20:ac:32:86:fe:9e:38:
58:85:1c:ac:38:32:05:3c:86:33:46:e3:c6:ea:ca:
1b:78:34:f0:43:90:ba:7b:9a:b9:5f:79:be:f0:dc:
df:1a:b5:bc:8f:5b:84:7b:93:6e:7e:d5:15:0c:40:
a5:c6:ce:66:ec:dd:ed:7d:96:c8:25:0f:bd:bf:e0:
1a:89:71:a3:24:65:f0:40:26:73:58:59:bb:5a:b0:
6c:4c:96:96:62:35:db:af:2f:29:f5:f8:5d:11:be:
51:83:68:0b:4b:48:ae:24:81:91:7e:f9:af:36:14:
75:c1:92:b3:ff:4b:3d:5f:7f:ef:f2:32:25:9d:78:
d9:e0:7c:dc:df:7f:5a:20:f3:c1:43:1d:f6:6f:c0:
4e:05:99:a0:e1:40:7e:6b:7b:fb:f5:33:40:07:33:
f9:19:14:a1:af:b0:72:fb:a5:44:b8:b7:3f:2f:3d:
b7:16:6f:50:60:56:16:de:0a:e5:69:64:22:2c:41:
2f:be:5c:6a:df:5a:2a:fd:b3:21:15:cb:9a:48:38:
48:87:a8:5b:d0:1d:8c:81:4f:4e:f6:45:c4:dd:94:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:B9:8D:FC:1F:81:65:9F:AE:84:FD:A1:97:42:47:F2:5A:97:CF
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/WJe5jfwfgWWfroT9oZdCR_Jal88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4e:23:82:01:40:d5:10:cf:75:81:29:b6:9e:08:27:e1:0d:
92:10:c1:ef:3b:0c:88:5c:99:50:b0:5b:2f:b4:94:e7:97:67:
e0:f4:6f:eb:2e:04:a8:6c:84:14:6c:e5:81:69:ab:7b:58:34:
9b:4a:46:67:19:ba:b2:f0:8b:7e:39:19:d6:44:4b:2c:22:7f:
90:77:70:a3:d8:7d:ac:c0:58:fe:62:d7:17:78:e7:3d:23:5c:
c7:19:8b:b1:b4:0f:57:38:b8:90:37:83:f2:dc:ec:59:30:c0:
65:bf:5d:20:0f:a4:ab:46:ea:f3:87:b8:23:5b:e5:1e:3b:b0:
9c:44:93:88:5f:d5:9e:1c:dc:cd:18:0d:c2:27:5d:1b:6f:7a:
8a:2f:ce:b0:5b:02:a5:ca:89:c4:2a:b1:d0:b1:05:a4:a9:7c:
a7:50:1a:51:07:b0:8f:ab:9a:78:79:67:c3:7a:ea:c9:ed:54:
74:96:bf:88:8e:4a:85:3d:fc:bb:23:11:bc:b5:3d:53:8a:02:
97:f7:d9:06:57:e6:59:8c:70:36:27:91:fa:ba:7c:a2:4d:d4:
1e:5e:61:16:d1:0f:5c:13:63:c8:50:8d:41:42:b5:b3:01:35:
ad:aa:59:39:3b:16:52:b1:df:ea:e6:51:a2:95:fc:25:19:fb:
66:75:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:15 2024 by rpki-client on console-ams.rpki-client.org