Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/wWFXjnPSgCTea18WzZkdoLprYlw.roa
File: wWFXjnPSgCTea18WzZkdoLprYlw.roa (raw, json)
Hash identifier: onLW7ic25y6MB2E/X/i7+6ACSAsVRpOSOQ/jXXMTVwE=
Subject key identifier: C1:61:57:8E:73:D2:80:24:DE:6B:5F:16:CD:99:1D:A0:BA:6B:62:5C
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0192485739506769EF311C8D10EBD79CA8EB
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/wWFXjnPSgCTea18WzZkdoLprYlw.roa
Signing time: Tue 01 Oct 2024 13:48:48 +0000
ROA not before: Tue 01 Oct 2024 13:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 195.210.108.0/24 maxlen: 24
195.210.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:57:39:50:67:69:ef:31:1c:8d:10:eb:d7:9c:a8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Oct 1 13:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c161578e73d28024de6b5f16cd991da0ba6b625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:0f:aa:bc:be:28:12:8e:51:13:98:cc:e3:
a4:4d:3a:2f:29:82:25:2f:fa:46:1a:b1:8d:a2:af:
0c:60:e9:6f:36:2e:ed:23:91:41:8f:2a:1f:bb:23:
21:2d:5c:5c:f5:59:9e:37:95:a4:53:51:d1:95:43:
c0:aa:b7:25:12:31:fa:73:cc:b9:40:d7:0e:a5:55:
7e:31:f2:f3:cf:54:1d:66:a5:19:d7:33:ae:bc:13:
79:7b:bc:65:c1:37:07:d4:cf:9f:16:a9:ca:29:8a:
13:8d:a0:3c:1e:97:48:ec:ef:81:1e:85:cd:ca:64:
ff:a7:71:dd:3c:86:62:1d:d8:8f:4c:94:c7:10:a8:
c3:db:f5:9a:03:4f:5f:82:0f:54:be:d9:25:d1:10:
97:94:49:e5:43:b2:7a:3a:34:fc:2f:08:72:ca:f9:
55:17:63:37:01:34:f5:f9:ae:69:b5:dc:ef:6e:83:
12:a3:f6:c2:7e:b4:3f:04:35:c5:79:ef:bd:8f:91:
02:bc:9c:fc:cb:62:a7:51:7f:ee:0c:0f:e9:6f:bd:
55:15:e3:a8:a0:f5:8a:83:c9:b3:65:f7:e6:47:ea:
8d:8f:e7:53:1e:09:7b:cf:f6:c9:9e:bf:40:cd:04:
aa:08:8b:b8:7d:6f:cf:50:96:7b:7c:68:a6:d0:fa:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:57:8E:73:D2:80:24:DE:6B:5F:16:CD:99:1D:A0:BA:6B:62:5C
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/wWFXjnPSgCTea18WzZkdoLprYlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.108.0/23
Signature Algorithm: sha256WithRSAEncryption
de:71:0b:52:e5:cc:e2:ac:86:7a:df:f7:05:3f:77:65:92:55:
51:cc:1c:89:54:55:83:8f:8d:7c:8a:2a:e9:28:c7:ab:09:17:
de:78:3f:7a:04:cf:00:60:ff:55:f6:13:25:f4:52:30:3d:71:
21:df:0b:92:d0:fc:1a:bd:d1:b7:dc:01:5f:24:36:60:c4:02:
9c:bc:3a:78:a9:52:b4:b9:9e:a5:17:e6:9f:d8:b4:2f:7f:b9:
da:69:5a:61:a2:8a:80:c3:11:b6:f6:7e:b9:2a:26:d3:81:e2:
6c:7b:77:24:cc:54:f5:07:97:94:25:53:93:08:09:06:d2:e2:
3c:c5:d0:b7:07:0d:9a:c2:36:d8:66:f3:d6:03:18:36:1d:cc:
89:5c:6c:a5:d8:e6:45:18:e5:5d:69:89:f5:c0:8f:a0:f6:1c:
5f:54:99:30:0e:16:f5:fb:a0:fd:84:a8:7d:4c:68:8b:81:53:
57:0c:db:f9:7b:1b:97:bd:9e:4b:28:32:02:56:66:e7:a3:94:
0d:3b:73:18:8e:d4:e7:8e:c6:3a:c5:cf:4f:dc:1b:61:64:73:
f7:12:ea:b1:84:bf:e4:17:03:20:8b:95:48:10:86:fe:93:ce:
8d:fe:1d:6d:38:8b:b3:b8:ae:0a:10:56:f6:60:f0:ff:93:c7:
be:0a:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:00:33 2024 by rpki-client on console-fra.rpki-client.org