Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/w3yMeGH1-LDA1cQ5GYIN4PHiYdw.roa
File: w3yMeGH1-LDA1cQ5GYIN4PHiYdw.roa (raw, json)
Hash identifier: wrVo/X1hMS1tdkDikL3MZk0yS9AkkY9VaUWnKTHifjY=
Subject key identifier: C3:7C:8C:78:61:F5:F8:B0:C0:D5:C4:39:19:82:0D:E0:F1:E2:61:DC
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 018CCA99A2D385F73D449DB756C60CBCA107
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/w3yMeGH1-LDA1cQ5GYIN4PHiYdw.roa
Signing time: Tue 02 Jan 2024 14:35:15 +0000
ROA not before: Tue 02 Jan 2024 14:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209087
IP address blocks: 46.26.164.0/24 maxlen: 24
77.231.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:a2:d3:85:f7:3d:44:9d:b7:56:c6:0c:bc:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 14:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37c8c7861f5f8b0c0d5c43919820de0f1e261dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:6c:80:a3:25:6b:c2:1d:d2:ad:2a:0f:63:
90:01:07:da:ce:27:81:17:a8:40:d4:5a:8e:e6:ff:
40:ad:37:81:17:23:62:21:98:eb:9d:37:6b:5a:2e:
88:16:f1:f1:8b:38:5d:c0:a4:b3:9d:6b:4c:2a:31:
74:86:89:67:fe:d9:45:19:2f:f2:b4:27:22:33:0f:
6a:d2:09:20:b2:9e:e4:10:68:b3:52:be:29:c8:4e:
67:63:48:88:52:c6:d5:dd:86:15:21:0a:93:8f:19:
b7:2c:ed:e5:d1:0a:29:cc:0c:c2:0a:59:aa:48:e6:
b1:41:5a:da:b4:27:fc:7f:77:37:54:1d:13:f4:13:
04:8d:39:3e:f0:14:b3:f7:c8:79:90:86:7f:6f:47:
0d:86:0c:25:9c:43:e8:83:70:a8:79:1a:33:69:f4:
8c:44:3d:2c:90:be:7c:0e:ab:b6:19:b7:ef:d7:ee:
4f:6e:03:25:c9:9d:f4:55:ef:75:ea:f0:f8:91:5e:
ff:e1:a5:8d:cf:d7:f6:6f:11:fd:f0:9b:aa:91:35:
0c:39:40:4e:8a:0c:1d:99:4a:e6:85:6f:85:40:11:
99:b4:18:49:4d:26:79:aa:11:e2:b1:01:f3:ff:c0:
75:76:ce:30:28:54:32:21:e2:46:55:b3:cc:24:4a:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:8C:78:61:F5:F8:B0:C0:D5:C4:39:19:82:0D:E0:F1:E2:61:DC
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/w3yMeGH1-LDA1cQ5GYIN4PHiYdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.26.164.0/24
77.231.181.0/24
Signature Algorithm: sha256WithRSAEncryption
53:66:13:b6:65:31:a3:82:ca:c9:2b:85:2e:c7:bf:59:38:4c:
ed:54:1d:41:4a:b5:ea:12:b0:b5:54:0c:b8:5b:30:9d:82:e1:
9a:1e:21:f3:4d:e1:9c:d3:94:26:44:d8:c3:7f:39:46:7c:73:
28:8c:2e:d8:5e:04:62:70:d2:90:c5:c6:1f:d4:b1:c6:91:ba:
83:e3:d7:0d:4b:ae:ba:a2:3a:d0:ea:71:a0:d4:d7:19:31:cf:
ad:2b:39:77:38:0b:8b:15:e9:cf:66:f6:67:d5:fa:3c:a8:0d:
58:d1:98:a8:aa:3e:ee:69:cc:b8:47:7e:7a:e9:07:93:58:b7:
9c:28:91:dc:3a:2a:59:5c:d8:91:98:c7:c6:f8:ec:73:7a:b8:
13:19:09:65:38:8b:4f:5f:c8:59:cf:9d:a4:ce:18:d9:34:7d:
91:3d:93:a4:36:54:09:67:8d:cc:b2:5b:a4:29:1a:f0:fd:59:
17:0d:04:da:8d:32:48:01:c2:a9:53:5a:43:df:b6:4e:8a:16:
2c:cf:1b:48:e1:30:bc:02:07:6e:01:88:1b:d6:34:53:3f:c8:
84:41:07:2a:bc:5a:3f:8e:f1:82:d0:51:93:7f:59:58:bd:a3:
a4:74:b1:d3:5a:62:42:84:ad:63:98:63:2d:35:6d:9a:b1:3a:
12:2a:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:36:12 2024 by rpki-client on console-fra.rpki-client.org