Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/cwvKU8W0KCySWa6zqN8ceB0AoXA.roa
File: cwvKU8W0KCySWa6zqN8ceB0AoXA.roa (raw, json)
Hash identifier: JKqcY9WoS9/dSu84LpVthW7Z1wfR+y2tdw+reAd0UbI=
Subject key identifier: 73:0B:CA:53:C5:B4:28:2C:92:59:AE:B3:A8:DF:1C:78:1D:00:A1:70
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 018CC726E3F3E17D6E08AD97651CBEFB5470
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/cwvKU8W0KCySWa6zqN8ceB0AoXA.roa
Signing time: Mon 01 Jan 2024 22:31:03 +0000
ROA not before: Mon 01 Jan 2024 22:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41940
IP address blocks: 194.60.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e3:f3:e1:7d:6e:08:ad:97:65:1c:be:fb:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Jan 1 22:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=730bca53c5b4282c9259aeb3a8df1c781d00a170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:4f:20:29:09:f0:93:1d:ee:0f:b3:72:f8:
0f:c9:ee:32:a6:55:43:fe:ea:aa:d1:de:8f:73:ed:
ac:95:3f:07:0c:d1:f4:06:6f:fc:bd:e7:86:60:d0:
d7:73:12:43:22:26:29:aa:90:70:51:0d:18:79:e4:
fe:6c:45:22:07:49:d4:b4:b7:bf:ef:c4:71:0b:bd:
86:f7:70:fe:73:ad:10:48:40:7a:af:9d:2c:0d:00:
20:00:8d:ff:e9:1b:37:18:6f:85:2a:e7:ab:ba:95:
06:2b:c8:1c:97:bf:11:41:00:c3:ac:e0:c6:67:b0:
5a:20:5d:3f:97:08:92:9f:c0:6b:45:5c:e9:0b:7b:
bd:5c:f6:5e:a2:1a:f6:0e:9b:94:19:be:37:c4:ab:
04:f0:b7:00:90:c1:c2:18:fc:b9:1c:57:03:a1:11:
33:be:e1:eb:bf:b7:fd:79:fc:0a:f5:00:b9:e3:10:
77:7a:d3:1a:86:37:10:f9:80:ff:37:4e:29:ec:ac:
c4:c2:2b:13:a1:34:ff:da:29:22:7a:93:2b:06:a5:
d7:bf:f9:32:e1:e9:8b:8a:1b:9e:59:c1:cd:77:49:
5a:e5:eb:d0:2a:e1:29:27:05:05:13:97:c1:bc:b7:
59:7c:54:b9:93:2a:dd:56:4b:fb:25:11:d0:2d:58:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:CA:53:C5:B4:28:2C:92:59:AE:B3:A8:DF:1C:78:1D:00:A1:70
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/cwvKU8W0KCySWa6zqN8ceB0AoXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.77.0/24
Signature Algorithm: sha256WithRSAEncryption
75:77:30:4f:09:ab:12:23:69:02:e0:cb:0b:c1:e2:d1:05:02:
d1:2b:4a:e8:a0:89:06:3a:07:5b:66:e9:1b:03:5d:77:de:aa:
61:66:dc:b3:a4:a5:a2:38:33:97:df:f5:24:7f:f2:0e:5f:c1:
95:d0:0f:19:b7:ef:57:36:a7:9c:f8:11:ee:45:fc:78:34:da:
c7:ce:87:72:d3:d8:c9:af:a6:55:84:54:26:67:86:19:0a:7c:
bb:fb:3a:63:51:26:e3:e6:69:39:29:a3:82:fe:7a:88:12:ef:
73:de:35:1f:61:18:c5:48:c3:69:37:a6:b7:41:e2:a4:ea:ec:
02:34:fe:18:71:f6:16:f1:8c:75:93:96:03:ff:38:14:4b:8c:
23:06:a6:54:73:31:b2:9e:d7:30:e3:1f:5c:41:4c:3d:21:24:
d3:07:d0:f1:5d:95:c8:fa:e9:d6:13:75:69:d5:ad:21:27:10:
69:e8:ee:94:de:18:54:d2:ba:ab:de:24:a2:ae:6d:a6:5a:55:
6b:bd:fb:68:26:49:b0:19:8c:7b:9c:f5:23:a0:b0:84:75:ce:
b2:d6:4a:f6:81:11:68:78:30:d0:6b:89:40:54:d3:fb:c2:04:
45:2b:c0:1c:ef:eb:f0:4b:3f:2f:ad:ea:cb:77:de:62:5b:0a:
f1:52:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:18 2024 by rpki-client on console-ams.rpki-client.org