Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fwWmsCBic4ZelA-9Tibk1MhVgqw.roa
File: fwWmsCBic4ZelA-9Tibk1MhVgqw.roa (raw, json)
Hash identifier: CC65Oib23EJWqvKn2aFuC7jvnhS8e29DkIagZgB+Y7A=
Subject key identifier: 7F:05:A6:B0:20:62:73:86:5E:94:0F:BD:4E:26:E4:D4:C8:55:82:AC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EF512125521F53D418B469F9BC1C4BFFB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fwWmsCBic4ZelA-9Tibk1MhVgqw.roa
Signing time: Fri 19 Apr 2024 06:36:26 +0000
ROA not before: Fri 19 Apr 2024 06:36:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:12:12:55:21:f5:3d:41:8b:46:9f:9b:c1:c4:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 19 06:36:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f05a6b0206273865e940fbd4e26e4d4c85582ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:46:33:ce:07:79:50:1b:1e:bb:53:b9:4f:
09:47:42:7b:27:fa:0c:aa:06:73:64:88:b5:ea:65:
38:69:fe:04:53:68:d4:b2:4c:8f:4e:cd:31:19:46:
41:e0:b2:33:b7:a1:42:93:b1:57:fb:6e:d5:d6:3e:
06:26:c4:4a:43:46:2e:d0:ae:2d:d2:4b:aa:ee:6d:
f8:56:2d:c9:bb:71:cf:96:6d:e2:0e:8e:86:16:54:
44:bf:dd:3f:6d:74:79:c7:6f:18:4a:47:6c:7e:ae:
98:d8:0c:ff:e0:e3:2a:0b:9c:0b:cb:30:21:15:ae:
0e:c7:4c:97:6b:eb:7b:4e:f6:cb:f5:38:17:e1:f0:
32:ce:f0:e2:17:29:76:d1:cf:db:b2:c2:69:94:41:
d4:e3:80:7b:c9:7f:f7:69:0f:6e:4a:4a:ba:a3:dc:
7c:71:2d:63:5c:a2:f8:84:67:47:2e:fa:c1:e8:e6:
ff:72:19:7f:a0:b0:02:39:a2:b7:51:ef:bd:54:e0:
b5:c1:4e:69:4f:e5:ac:47:fe:5f:60:77:d0:41:71:
a9:e9:b2:06:a8:fd:32:5e:ad:2e:94:42:7e:98:3f:
f6:c8:32:5d:32:ed:2f:e6:ed:55:06:2f:fc:e7:76:
5c:e9:b9:31:c3:e8:c5:d8:ad:27:cf:25:71:10:9f:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:A6:B0:20:62:73:86:5E:94:0F:BD:4E:26:E4:D4:C8:55:82:AC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fwWmsCBic4ZelA-9Tibk1MhVgqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:3d:bc:d2:a6:62:d2:1b:aa:d0:02:40:59:fe:c2:ba:28:
5f:3a:d2:ab:b7:41:d4:bc:43:f8:fc:ba:1b:6e:02:d7:a1:83:
60:31:0f:ac:6c:88:b1:75:db:ca:1b:98:4b:aa:6c:cf:d5:56:
c5:3c:ec:55:30:84:f7:69:8b:ea:64:85:a7:87:b5:1b:cb:0d:
0c:ba:73:7b:06:a3:c5:f0:7b:dc:98:62:94:dc:32:f3:92:6b:
02:dc:07:5e:e9:4a:38:75:aa:94:94:82:bf:ea:57:ca:56:d0:
e8:59:51:c9:9c:f1:ba:47:ff:ef:b2:1d:8d:7a:a0:e4:e9:4c:
a1:d3:7c:c3:72:e2:b2:20:4d:22:79:2b:09:d0:d6:72:8f:04:
ab:c4:62:38:ee:4a:41:c0:bf:ff:82:48:70:01:b4:96:b4:33:
f9:a1:0c:ba:cd:dc:28:b1:58:ac:f2:dd:5d:f4:52:49:37:e2:
29:aa:ea:84:2b:39:b3:bf:a6:3b:aa:ab:45:ff:46:e9:10:85:
a6:68:c0:76:b6:f6:e6:7b:64:ba:21:f1:d5:5a:a3:0d:50:69:
4f:9d:c9:7e:31:7b:65:c3:cc:44:ec:d2:8f:53:df:13:ad:a8:
f8:e5:26:9d:d9:65:0a:28:e2:63:61:db:da:c1:21:3e:34:3d:
de:57:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:57 2024 by rpki-client on console-ams.rpki-client.org