Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/W7pUbXgtSNveuxn1b9tTbpsDTjM.roa
File: W7pUbXgtSNveuxn1b9tTbpsDTjM.roa (raw, json)
Hash identifier: 1GTcVoKBMCK62vzD34siR9t/U5gleTwOcsPDbS2008Y=
Subject key identifier: 5B:BA:54:6D:78:2D:48:DB:DE:BB:19:F5:6F:DB:53:6E:9B:03:4E:33
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 018CC26D8704176605EE1AAA4F432992CE60
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/W7pUbXgtSNveuxn1b9tTbpsDTjM.roa
Signing time: Mon 01 Jan 2024 00:30:07 +0000
ROA not before: Mon 01 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205629
IP address blocks: 185.228.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:87:04:17:66:05:ee:1a:aa:4f:43:29:92:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jan 1 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bba546d782d48dbdebb19f56fdb536e9b034e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:26:d6:57:b8:86:99:32:82:f1:26:f6:1d:
9b:4b:4f:3a:c7:ef:3e:b0:9f:92:f3:6d:05:d0:76:
0c:0d:49:5a:d6:13:05:46:d4:29:72:cc:97:1d:d2:
25:bc:37:da:1c:03:f4:ae:68:62:cd:a8:2f:16:81:
d0:7b:b2:5c:8d:f5:ab:6b:2d:9f:e0:ad:8b:15:7d:
a6:2a:94:af:d4:07:f2:98:17:12:b4:0d:8d:12:f4:
fc:0d:31:a4:f5:cc:f7:ea:be:48:a7:75:aa:fd:0c:
46:2d:b3:d9:ae:11:f3:c6:03:bb:52:b0:3d:e9:62:
ef:a8:9d:6c:2a:73:7b:5d:4a:dc:2a:e3:38:c5:ce:
20:c1:0f:6a:3d:5f:a5:e3:ef:5a:5b:48:e9:eb:ec:
31:d0:cf:00:7b:32:06:f4:bd:fe:64:cc:a1:34:14:
23:d2:85:c1:76:44:d8:a7:fb:a4:b3:50:15:40:07:
37:ee:7b:58:bc:83:4c:af:e0:8d:1a:82:9a:67:89:
4d:41:fc:05:63:01:70:c2:25:7f:ed:bc:51:e3:4e:
ec:5e:3c:18:63:07:3e:d1:c4:59:ed:28:dd:d4:ef:
28:8b:d2:b2:97:b3:30:51:27:0d:cc:ce:f2:e5:a4:
de:a6:f1:32:d0:a6:16:6d:66:d5:84:fa:f8:e7:25:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:54:6D:78:2D:48:DB:DE:BB:19:F5:6F:DB:53:6E:9B:03:4E:33
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/W7pUbXgtSNveuxn1b9tTbpsDTjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:07:4e:37:7e:58:69:f5:ef:05:53:c5:cc:48:cd:c3:35:9a:
b5:50:cf:18:a7:55:e5:cc:e9:5e:0e:f3:89:f7:30:33:36:d9:
2d:80:b4:af:4c:2a:0f:3b:c8:ae:e5:25:67:b6:36:a5:eb:3e:
ed:d1:f8:c6:36:fe:32:cc:66:5e:8b:1b:7e:20:1a:45:ae:2e:
fc:97:7a:c3:cf:ab:dd:7d:44:41:9f:e0:ce:36:d7:d8:d5:3d:
a0:dd:b8:33:1a:d1:9d:dd:9b:0b:ed:b3:b9:0b:f4:2f:7c:de:
50:f1:b4:73:5f:e3:e1:f6:46:43:1a:8e:5b:37:4e:20:46:1e:
16:da:71:1e:6a:5f:ba:b3:a1:f1:ae:22:7a:07:a0:2e:bb:76:
78:c3:1c:f7:c6:b3:42:8a:2c:24:06:38:64:79:e5:bb:c3:fd:
99:4e:4c:48:25:f2:8d:80:85:c6:4c:45:db:f7:14:04:f2:26:
f7:87:3f:ed:41:54:ad:07:ad:87:d1:a2:0c:0f:4f:22:aa:aa:
02:9e:c4:95:6b:5d:f8:b2:c9:0a:22:eb:08:c2:d2:2d:be:e1:
45:13:73:72:7c:8e:ad:ac:ff:91:e1:fa:f9:d6:66:fa:de:a4:
ef:da:8f:62:76:a8:de:ff:29:8e:b8:fa:b8:24:04:54:25:3c:
68:ca:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:07 2024 by rpki-client on console-fra.rpki-client.org