Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wu0yfhmTDV1IVEMYot4oWRkyJUQ.roa
File: wu0yfhmTDV1IVEMYot4oWRkyJUQ.roa (raw, json)
Hash identifier: Eq3Nl7zMWAx3t0ft6H9V1gpkL+DwxhMFJegGCqLS3pw=
Subject key identifier: C2:ED:32:7E:19:93:0D:5D:48:54:43:18:A2:DE:28:59:19:32:25:44
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0190795085FDF24BFFCFB5E017FB717BCFEA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wu0yfhmTDV1IVEMYot4oWRkyJUQ.roa
Signing time: Wed 03 Jul 2024 15:57:18 +0000
ROA not before: Wed 03 Jul 2024 15:57:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 178.211.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:50:85:fd:f2:4b:ff:cf:b5:e0:17:fb:71:7b:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 3 15:57:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ed327e19930d5d48544318a2de285919322544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:a4:92:2d:14:f0:f3:08:0f:35:b6:f7:02:
9d:32:15:e5:88:31:db:05:bf:e5:0b:7d:50:0b:ac:
6a:0f:ea:29:38:00:34:84:75:34:8e:60:6e:95:6f:
48:bd:c1:99:b5:4d:03:a8:ac:06:95:de:fd:f1:e6:
ee:02:07:8c:83:ee:96:c0:ff:d3:3c:75:22:aa:ad:
ee:19:53:7a:44:13:b3:9b:ed:2d:da:59:74:af:1e:
e0:b4:36:6e:c6:5b:38:ce:17:d6:33:38:67:d4:a9:
56:3d:f1:a7:29:f0:1f:1a:30:38:01:47:c6:d7:9f:
3d:6b:81:59:68:97:e2:e9:c3:64:da:5e:2a:73:5d:
e1:49:3c:a9:8c:16:3b:0e:8a:94:78:34:c7:d5:e9:
33:72:62:ec:c3:ee:a3:39:5d:a4:28:00:3b:f8:80:
ce:6d:d8:62:4b:61:60:a3:f3:ea:a9:66:d8:42:b4:
85:75:07:01:c7:93:72:1b:e2:79:92:bb:a7:df:cc:
3d:ab:22:e7:5f:85:d4:0a:e9:6e:72:26:57:95:43:
21:01:58:08:8b:f5:aa:a7:3f:d0:07:83:28:09:62:
a2:be:c0:10:f0:67:69:4e:25:6f:44:f0:a7:03:c4:
31:75:be:a2:b5:66:77:72:ab:ab:0a:b7:dc:6d:44:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:ED:32:7E:19:93:0D:5D:48:54:43:18:A2:DE:28:59:19:32:25:44
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wu0yfhmTDV1IVEMYot4oWRkyJUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.132.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3c:f4:93:29:36:be:16:92:f3:96:5d:c9:f6:f8:6f:3a:01:
1f:5e:87:68:44:50:e3:c4:ff:31:87:94:67:ba:5b:a6:40:39:
2a:3f:78:e1:48:f2:f3:21:70:4d:3a:f6:f8:f4:4f:d4:11:33:
c7:7f:ec:0b:64:40:0a:71:ef:6d:eb:4d:bf:ef:f5:91:98:77:
ce:ec:50:5f:41:e1:a0:b7:6b:15:25:42:9d:89:bd:5a:56:84:
6d:f8:6b:ab:4b:a4:9b:1d:c0:7c:18:b3:b5:d8:3c:73:44:57:
98:4f:61:0d:0f:ee:b8:3f:c0:c8:e0:ec:05:55:c5:03:37:5e:
a8:d4:cc:1b:19:de:29:5d:49:9a:79:4b:97:2d:1c:d5:1d:36:
ac:b0:7c:5c:8d:a5:9f:49:0c:0f:eb:63:48:a6:64:8a:5f:9f:
72:b4:09:61:f1:35:a5:87:71:a0:06:c3:36:7f:e3:14:1c:77:
31:83:2c:a3:55:38:cf:cf:03:4b:61:7a:ff:2a:85:4d:13:be:
38:55:f3:5d:f2:6b:de:b1:f0:29:b8:64:f3:18:9f:a6:ae:ca:
47:99:ef:4a:4c:ef:a2:26:69:a5:16:2c:95:4f:5b:98:db:61:
a5:d1:a8:76:e9:cf:31:3f:98:cd:5b:3f:18:11:66:38:ed:b8:
98:c9:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:24 2024 by rpki-client on console-ams.rpki-client.org