Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/wVhkEpMCIqEEDDEA6rEisr4En8E.roa
File: wVhkEpMCIqEEDDEA6rEisr4En8E.roa (raw, json)
Hash identifier: 9cHWhYeU3FzmmirjQxSkAaYpOK0345XCZpdh7SODIRU=
Subject key identifier: C1:58:64:12:93:02:22:A1:04:0C:31:00:EA:B1:22:B2:BE:04:9F:C1
Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial: 01905E0362F2ADCA3D02EFDF4594212ED235
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/wVhkEpMCIqEEDDEA6rEisr4En8E.roa
Signing time: Fri 28 Jun 2024 08:43:18 +0000
ROA not before: Fri 28 Jun 2024 08:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198306
IP address blocks: 167.247.86.0/23 maxlen: 23
167.247.86.0/24 maxlen: 24
167.247.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:03:62:f2:ad:ca:3d:02:ef:df:45:94:21:2e:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
Validity
Not Before: Jun 28 08:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1586412930222a1040c3100eab122b2be049fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:d7:d4:d9:ab:f8:18:44:a8:b7:17:70:c6:
06:96:ef:bb:10:56:64:e5:a0:7d:b8:25:3c:85:81:
3c:91:06:bc:75:55:d0:eb:1a:fe:19:f2:ad:2c:2f:
59:a7:e9:71:4c:d8:2e:bb:2c:aa:ba:92:b4:8e:41:
a6:2f:c0:17:97:f1:62:1d:90:63:f7:f6:fc:0d:6f:
cb:b8:e2:72:93:44:6d:d9:96:29:7c:9c:0b:22:9e:
e7:9c:01:6f:d0:72:10:d6:f2:1b:27:d7:98:7e:fb:
9e:a6:cc:f8:e2:43:a0:44:c7:bf:55:f2:a4:a7:a9:
21:a4:fe:60:e6:49:38:d8:20:91:3e:d2:bc:53:ba:
14:e8:a5:76:8a:c4:52:1c:e4:f1:87:2f:3c:c0:1f:
54:60:c3:7e:7b:be:95:c8:64:b7:d2:38:5e:5f:c5:
92:fc:c1:c6:ad:aa:92:6c:28:9e:27:23:f5:5f:13:
89:1a:24:44:53:74:9e:31:72:2f:bb:bb:27:14:43:
89:79:42:3d:f8:5a:c1:44:24:bf:ae:d8:f0:7a:34:
63:b0:1f:3e:df:ef:a7:65:ca:54:09:be:b4:38:96:
b6:c7:d2:64:3f:0e:bf:18:da:0f:88:b0:e0:35:53:
9d:78:0a:23:7a:b9:34:86:90:5b:e9:50:38:6d:a2:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:64:12:93:02:22:A1:04:0C:31:00:EA:B1:22:B2:BE:04:9F:C1
X509v3 Authority Key Identifier:
keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/wVhkEpMCIqEEDDEA6rEisr4En8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.247.86.0/23
Signature Algorithm: sha256WithRSAEncryption
68:84:78:4b:87:66:50:fd:0e:56:4e:c7:58:72:85:51:34:3a:
ca:5c:f5:3c:a0:6f:25:be:8f:d4:5f:ee:87:3c:52:63:fc:e5:
ef:6f:15:9b:5c:bd:cd:e3:df:53:d3:2a:f5:74:97:8c:9a:73:
d4:d8:67:23:d3:e9:e2:d1:1b:f1:9d:62:a5:23:dc:54:11:94:
c2:87:0e:43:d9:69:f7:f6:19:35:e7:cd:0f:c6:15:bf:1d:74:
78:1b:18:a9:78:da:3a:72:e1:31:f3:d7:6b:f4:06:eb:00:71:
c7:f4:82:1d:ee:d1:bf:a0:92:e6:00:27:59:60:54:49:75:03:
4a:0b:89:26:b4:75:34:a3:3b:e1:9d:03:07:e5:83:3a:bc:37:
6c:14:9b:3c:25:53:fd:5a:8a:ee:52:64:58:1a:51:b9:82:bc:
bb:8b:91:c9:c6:bf:a4:07:f1:86:7e:b3:7b:ad:fc:e2:64:78:
4c:6d:50:8b:1f:e7:84:ee:b7:0f:59:6d:06:12:e8:a0:2d:ec:
68:a2:b2:9b:73:5a:94:5e:96:58:3a:e8:39:44:3f:6c:3f:52:
d2:b2:7f:8f:3e:9d:0d:4d:fc:4e:a8:a0:b2:61:fe:9b:99:04:
b3:9d:e0:e4:52:61:55:89:43:dd:3e:64:20:b3:eb:38:ac:73:
f5:d1:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:01 2024 by rpki-client on console-ams.rpki-client.org