Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/wDLjy0neVpyXhrsoQjHlseX6PF4.roa
File: wDLjy0neVpyXhrsoQjHlseX6PF4.roa (raw, json)
Hash identifier: oUBsAnXvojrtpo7XuNg8PMOTlo9RlqVD9YYcDyiHDeE=
Subject key identifier: C0:32:E3:CB:49:DE:56:9C:97:86:BB:28:42:31:E5:B1:E5:FA:3C:5E
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 018CC9BC1A6DE2CBAD11ABD99B89E4A1190E
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/wDLjy0neVpyXhrsoQjHlseX6PF4.roa
Signing time: Tue 02 Jan 2024 10:33:17 +0000
ROA not before: Tue 02 Jan 2024 10:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57834
IP address blocks: 185.197.124.0/24 maxlen: 24
185.197.125.0/24 maxlen: 24
185.197.126.0/24 maxlen: 24
185.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1a:6d:e2:cb:ad:11:ab:d9:9b:89:e4:a1:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c032e3cb49de569c9786bb284231e5b1e5fa3c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:6d:a3:b1:90:db:29:56:34:21:8b:25:d8:
6e:8a:93:29:38:66:32:15:06:5d:db:4c:3c:ef:60:
6b:a1:35:a8:ed:aa:23:bf:b6:b9:f7:ce:a6:2f:16:
50:81:40:67:63:0b:5c:88:25:38:0d:08:d1:d7:f6:
e8:34:37:3a:05:3b:d9:77:90:90:2b:10:d9:48:aa:
e3:bf:97:2e:21:de:a4:1d:fc:38:8d:36:a5:6e:47:
4c:93:75:81:33:e1:b2:67:0d:73:d5:49:9a:7d:e6:
76:24:ea:22:29:de:23:6b:15:8b:36:2b:72:72:c9:
e3:26:18:7c:da:5d:a1:29:69:f1:a4:1a:4a:e5:fe:
26:a4:8f:27:9d:36:11:59:eb:7e:dc:d5:6f:9b:be:
79:9e:03:17:6c:61:48:36:c7:bb:ee:a0:f7:1e:bd:
63:e6:9f:fe:88:c1:5c:7a:40:64:fb:8d:6e:f3:54:
50:dc:29:d7:03:e9:9d:7d:21:1b:d1:53:3b:4c:2c:
43:2e:aa:aa:4e:7a:a1:96:23:18:fa:90:df:7e:4f:
4f:4e:f3:03:03:e8:bd:5a:0b:65:33:4d:9e:74:8c:
80:16:00:fd:ef:92:b2:82:f5:24:7e:57:57:8d:f6:
14:68:b6:07:1d:66:9a:04:d2:55:c0:00:8a:80:9b:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:E3:CB:49:DE:56:9C:97:86:BB:28:42:31:E5:B1:E5:FA:3C:5E
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/wDLjy0neVpyXhrsoQjHlseX6PF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:65:bc:5a:24:30:30:bc:b5:66:31:8f:6a:f1:e5:4b:5c:ae:
79:72:3a:09:4e:94:d6:b0:21:a8:f0:43:6e:78:58:94:18:9c:
7d:c4:8c:a0:dc:10:52:7e:10:19:c0:63:f5:1e:a0:b8:38:24:
6f:cb:22:25:ce:88:d9:6c:4a:99:f3:f8:b9:b8:3d:93:55:60:
5f:74:3d:94:5e:a4:71:bd:d4:04:8d:45:96:af:25:91:fc:d2:
b0:50:95:4b:2e:51:fd:0a:48:59:8b:c6:b7:63:9c:44:c9:8d:
e7:a0:ba:23:f2:49:45:38:73:c1:b9:53:b4:64:57:9d:39:a7:
38:68:3b:dd:be:d1:1b:ed:03:4e:36:b1:96:d8:7f:18:65:84:
5f:52:06:52:93:f4:60:2a:77:b9:f0:3e:fd:dd:c6:f4:f1:18:
e8:5b:c3:2b:95:65:f2:21:3d:8b:67:9c:5d:ec:b2:c2:1a:47:
58:bd:10:9f:5b:f4:44:96:10:05:ae:f0:64:bf:7a:35:09:20:
f8:d1:5d:5b:cc:5b:92:60:a4:a8:f7:9a:85:b4:cb:ef:b0:ba:
79:e9:6d:3a:ab:e6:3c:2d:14:12:fc:e7:13:ed:e6:28:06:5e:
22:42:d7:3f:e0:59:94:3a:b5:42:26:2f:ed:3c:69:77:dd:85:
99:fc:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:51 2024 by rpki-client on console-fra.rpki-client.org