Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/_WmKSQqR9BqgIRugGn3LhqxTNEE.roa
File: _WmKSQqR9BqgIRugGn3LhqxTNEE.roa (raw, json)
Hash identifier: +Z+tLn54r4SW+kqXQuJWABGoFvJfw21N9z+P0ulKCx4=
Subject key identifier: FD:69:8A:49:0A:91:F4:1A:A0:21:1B:A0:1A:7D:CB:86:AC:53:34:41
Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial: 018CC8DF08386F76E1796249645EEFB3CBAB
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/_WmKSQqR9BqgIRugGn3LhqxTNEE.roa
Signing time: Tue 02 Jan 2024 06:31:48 +0000
ROA not before: Tue 02 Jan 2024 06:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2602
IP address blocks: 193.168.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:08:38:6f:76:e1:79:62:49:64:5e:ef:b3:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd698a490a91f41aa0211ba01a7dcb86ac533441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:70:bf:8d:90:29:d6:37:fc:c0:17:14:5f:
b9:a0:3a:71:51:ec:10:5f:13:4d:6b:e1:dc:f8:54:
c4:1a:1e:22:2b:e1:04:ff:68:c1:ea:12:c0:d6:7b:
ee:3e:63:4a:d6:7a:e6:bc:41:ea:de:29:ff:4d:59:
45:5e:8a:b1:db:b1:48:eb:7d:f0:97:6f:ed:ce:ee:
b5:d4:d7:a0:0b:a8:57:55:f0:7b:47:25:04:17:b3:
99:06:99:9e:6b:b0:ac:50:0c:36:fd:29:8d:64:c3:
b4:1c:fa:50:87:a3:bd:71:f0:8f:9f:f1:1e:4c:ff:
e4:43:c7:c8:40:ed:5b:1b:eb:56:09:20:ed:35:a6:
56:15:cb:80:c8:13:60:96:a1:de:94:ce:0a:2f:32:
c5:35:79:c7:f0:0e:f4:92:df:8b:47:03:7c:a8:72:
b6:1c:77:ec:fd:7a:23:23:e3:6a:5b:13:c8:da:c0:
2b:a0:65:c9:44:02:8c:7a:15:37:80:4a:4a:48:73:
cb:ef:14:be:b8:6d:4a:ec:64:06:22:ff:a8:cb:9a:
1c:e6:e1:44:98:eb:e8:a3:b3:97:b5:a8:2f:7f:43:
00:f8:e2:a7:e1:2d:ba:01:8a:75:ec:ae:1c:cf:a6:
38:31:2f:c7:5d:27:7e:d8:32:a5:f2:1b:1b:88:f5:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:8A:49:0A:91:F4:1A:A0:21:1B:A0:1A:7D:CB:86:AC:53:34:41
X509v3 Authority Key Identifier:
keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/_WmKSQqR9BqgIRugGn3LhqxTNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:24:b6:04:0c:7f:22:be:e4:34:2d:6a:0d:fd:7e:a2:14:f7:
2c:db:29:84:da:88:f8:7d:40:74:2c:59:ae:d8:d2:ff:14:8e:
bf:9d:31:9e:f7:21:38:a2:0d:03:79:69:b3:58:7d:19:07:a5:
64:d8:9c:47:20:77:14:d5:97:13:e0:1e:e3:3f:62:3d:1f:00:
c4:20:12:9b:da:55:ff:f9:fe:7a:e0:56:80:ea:a2:1d:49:8d:
29:9b:c2:18:6c:db:47:8c:11:e5:fc:69:bd:11:71:dd:5d:6e:
56:0d:67:59:f5:80:32:90:e7:5a:eb:b6:fa:89:b9:f6:4c:0e:
b0:d8:65:1c:8a:3c:fd:3e:45:fe:24:5d:31:8f:25:8f:c4:47:
c8:8d:0b:0f:09:4a:00:dd:84:08:4a:ca:f7:20:d1:d7:d0:6d:
07:69:c7:21:c2:17:86:8d:30:56:53:eb:b3:02:a9:09:c8:7e:
41:f5:1c:79:8d:87:ad:b3:ec:01:5a:25:9a:ce:fb:f5:67:01:
a3:64:cb:b5:46:cc:41:f5:e4:8d:9e:a6:11:cd:eb:a4:e5:a1:
76:cf:3a:9d:93:ee:6b:42:b2:50:ed:59:50:12:b4:ea:6c:f2:
e8:97:32:08:e8:04:d5:07:46:ba:3e:ad:27:cf:9f:2d:de:4f:
f5:ad:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:04:30 2024 by rpki-client on console-ams.rpki-client.org