Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/w4l41doPapOlO9g9eJSCO-Minek.roa
File: w4l41doPapOlO9g9eJSCO-Minek.roa (raw, json)
Hash identifier: yZTHBFMyar8SpQ+CU5MvMtARzW816/lkB+mqL/JrzC0=
Subject key identifier: C3:89:78:D5:DA:0F:6A:93:A5:3B:D8:3D:78:94:82:3B:E3:22:9D:E9
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 018D8323C39D1BD30D539F23ED57BF222CD9
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/w4l41doPapOlO9g9eJSCO-Minek.roa
Signing time: Wed 07 Feb 2024 10:36:15 +0000
ROA not before: Wed 07 Feb 2024 10:36:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24953
IP address blocks: 157.97.68.0/22 maxlen: 22
185.20.236.0/22 maxlen: 22
185.232.188.0/22 maxlen: 22
2a00:5320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:23:c3:9d:1b:d3:0d:53:9f:23:ed:57:bf:22:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Feb 7 10:36:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c38978d5da0f6a93a53bd83d7894823be3229de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:21:70:54:eb:ed:df:d3:c4:bf:9e:d9:9c:
03:e7:a4:1d:c1:68:2d:7b:d1:a8:ef:35:82:3c:b7:
0f:df:ee:39:41:f8:a1:81:1a:4a:03:c1:17:78:40:
a4:26:dd:5d:88:c5:3c:82:63:d2:af:1d:50:96:28:
a8:37:9b:58:9f:6d:a9:1d:e1:53:b3:2d:3f:84:4c:
50:40:ce:a1:79:f7:7f:15:1d:15:04:54:5c:cf:bc:
f7:1d:e1:7b:9e:37:6a:31:be:ca:2a:e4:fc:b8:28:
a8:30:b1:32:30:33:8a:f8:f8:a8:88:70:c1:e7:f5:
78:d9:83:cb:01:75:ce:8e:07:10:72:2a:70:5c:80:
82:d6:f9:21:08:87:ca:13:95:4a:de:69:86:81:98:
d7:e6:8c:64:ad:a6:b2:be:f4:b4:d9:ea:50:6d:f3:
e8:32:7e:32:e3:2d:4b:02:45:61:ba:47:d6:ce:26:
e5:2d:70:e4:91:13:db:61:83:1f:3d:45:cb:e1:57:
d7:e4:cd:e9:c7:af:3f:c4:8f:bc:77:88:e3:f2:7d:
f3:0f:b8:2e:db:ac:c6:02:b0:8d:0b:53:f1:1b:68:
8e:1f:e7:66:3f:1a:66:ef:1b:6b:77:58:97:1a:6c:
c4:9b:cd:aa:b3:ce:55:d8:d2:77:23:9a:03:42:96:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:78:D5:DA:0F:6A:93:A5:3B:D8:3D:78:94:82:3B:E3:22:9D:E9
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/w4l41doPapOlO9g9eJSCO-Minek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.68.0/22
185.20.236.0/22
185.232.188.0/22
IPv6:
2a00:5320::/32
Signature Algorithm: sha256WithRSAEncryption
37:48:a9:9e:35:10:04:da:32:04:57:2a:b8:1f:01:73:ce:27:
d3:58:34:a2:c4:7b:02:7d:8b:b3:ea:23:b2:9f:58:88:61:43:
fa:23:04:40:34:6a:c8:02:df:e0:de:ce:42:a5:36:ba:de:af:
16:a4:99:39:c5:11:6e:90:a8:e5:de:d7:6b:09:44:50:09:f4:
19:e0:c2:b8:f0:26:13:86:5b:52:82:cd:f0:f9:99:08:28:3b:
17:3f:04:57:2b:97:c8:50:23:63:88:11:19:2f:f6:ea:a2:b1:
30:19:13:c7:44:93:d0:65:47:66:c8:62:b5:05:54:4f:66:7d:
99:d3:73:a2:73:e0:8d:5b:44:22:6a:7a:af:bb:0e:9f:51:7b:
98:e8:85:22:87:fb:24:2b:92:39:9d:65:e2:a3:74:3b:5c:1c:
3e:1c:4c:88:ff:fb:7a:59:56:a7:ed:0d:8d:d0:0a:2b:3f:fe:
0f:10:ee:a9:0c:de:f1:38:16:70:65:b0:ed:5b:c2:65:a6:d0:
f3:95:d1:31:ca:ce:ee:34:cc:c1:b9:c3:a3:92:63:22:47:2d:
c0:b3:39:3f:41:8d:d1:b1:00:7e:e0:11:34:13:e6:c0:ce:3d:
ed:5e:1c:a5:1f:0d:5c:51:2d:26:c8:50:f0:09:ea:23:7c:ea:
8c:87:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 20:02:17 2024 by rpki-client on console-fra.rpki-client.org