Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/V8G1fHfLgylYxZsBU1g1BPpQew0.roa
File: V8G1fHfLgylYxZsBU1g1BPpQew0.roa (raw, json)
Hash identifier: OwwWG43R3VmEmBmAh/Ub45Oy9vcpxMKP2jrk7yLYXYg=
Subject key identifier: 57:C1:B5:7C:77:CB:83:29:58:C5:9B:01:53:58:35:04:FA:50:7B:0D
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018EEC15596BD84ECD2A8F033A2FEB54E9C1
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/V8G1fHfLgylYxZsBU1g1BPpQew0.roa
Signing time: Wed 17 Apr 2024 12:43:25 +0000
ROA not before: Wed 17 Apr 2024 12:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396073
IP address blocks: 45.142.194.0/24 maxlen: 24
92.118.37.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
2a0c:9f00:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:15:59:6b:d8:4e:cd:2a:8f:03:3a:2f:eb:54:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Apr 17 12:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c1b57c77cb832958c59b0153583504fa507b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:f4:39:1b:3e:1c:7f:c3:97:de:35:56:95:
7e:b9:28:fd:87:b3:a0:b7:a9:66:81:bd:e5:ce:fc:
1c:b2:61:d0:24:fe:84:bb:93:34:40:df:2e:c2:bb:
4f:36:92:bb:f5:d3:9d:15:f7:15:f8:84:3d:a6:2f:
7c:f9:c5:a7:08:c2:c4:19:cb:61:85:00:e2:97:99:
6a:ce:26:22:81:33:5b:ef:50:e4:0d:51:11:7c:12:
65:cc:02:0e:af:aa:cf:2f:a9:d0:a4:1a:c2:d1:9a:
12:38:9d:f3:13:ea:9e:ee:4a:5c:3d:9a:6d:74:af:
b5:53:d1:b0:23:45:99:27:55:f4:01:27:93:7b:9f:
5f:53:f3:10:c6:22:a3:46:49:76:c2:1a:91:2e:6c:
28:71:fb:ab:5c:91:db:6c:74:7e:2b:12:d8:b9:63:
a4:48:23:f3:8b:b1:99:08:46:0c:5e:20:c9:74:78:
22:91:39:d0:e8:ba:93:ea:f3:8b:fe:b1:c5:2a:6f:
04:dd:d3:c2:bc:1d:f8:35:0a:5b:c6:a2:59:43:3f:
12:15:20:7a:74:f4:f0:b2:ec:84:31:3d:06:ad:e4:
c4:2e:54:70:2c:20:e0:d4:99:07:b0:df:cf:f9:aa:
11:76:28:30:c7:d8:c6:7d:ec:7b:f1:3d:9a:35:37:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:B5:7C:77:CB:83:29:58:C5:9B:01:53:58:35:04:FA:50:7B:0D
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/V8G1fHfLgylYxZsBU1g1BPpQew0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.194.0/24
92.118.37.0/24
193.32.163.0/24
IPv6:
2a0c:9f00:a001::/48
Signature Algorithm: sha256WithRSAEncryption
a8:24:6a:3b:eb:42:87:7d:59:46:d9:f8:18:8f:53:74:f0:48:
15:dc:3d:68:89:cb:f1:a2:93:83:b7:98:63:c2:de:02:51:2e:
cc:42:48:55:ec:95:f2:3e:45:45:e0:f2:bb:72:5f:c3:b8:f6:
67:8a:95:1d:ce:a1:53:ff:bb:52:84:d0:e6:5e:7f:73:df:02:
58:ed:ae:41:09:63:4a:e1:dc:f5:7f:6c:b5:17:88:4d:9d:0d:
66:55:0b:3e:18:c1:1a:de:a1:c0:a3:45:69:7a:c5:7b:0d:a8:
20:56:3e:e0:02:e1:5f:45:05:47:a4:e5:4a:0d:66:e8:9a:90:
c5:f6:d8:21:54:5c:f9:74:31:62:11:4b:02:eb:1d:3c:e1:67:
38:bc:e8:b2:cb:1c:11:46:77:ad:ce:e2:4d:d5:f7:e3:af:c8:
b8:e5:7a:5a:3d:c7:3d:89:69:f7:8d:d4:9d:1a:72:36:2e:f9:
71:dc:a4:f8:f1:42:ce:a8:9d:f3:a7:ea:91:66:83:6c:cf:6f:
81:ab:2e:1c:65:49:90:d3:ee:3e:e4:c3:96:6e:42:ca:37:8c:
08:5a:f6:36:10:58:87:16:35:9c:25:c9:a0:57:9d:c1:c4:98:
6e:f6:ef:86:34:ab:34:f7:f6:08:f2:97:a0:eb:16:f3:be:ea:
30:1e:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:31:22 2024 by rpki-client on console-ams.rpki-client.org