Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wIWK8lRj1yVND4E9BG6sSAmMyOU.roa
File: wIWK8lRj1yVND4E9BG6sSAmMyOU.roa (raw, json)
Hash identifier: 7of0H4AEtswUHfGkYxkJNTIBN/LU/Gr7bWOx7uHqU5E=
Subject key identifier: C0:85:8A:F2:54:63:D7:25:4D:0F:81:3D:04:6E:AC:48:09:8C:C8:E5
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019265F02234EA1A96234B6BA112996741D6
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wIWK8lRj1yVND4E9BG6sSAmMyOU.roa
Signing time: Mon 07 Oct 2024 07:44:49 +0000
ROA not before: Mon 07 Oct 2024 07:44:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 178.171.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:f0:22:34:ea:1a:96:23:4b:6b:a1:12:99:67:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Oct 7 07:44:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0858af25463d7254d0f813d046eac48098cc8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:31:79:bd:41:da:04:5c:b0:e0:8a:31:05:
99:01:85:f4:18:04:61:f4:81:6c:34:f5:cf:1d:f6:
cd:69:bb:08:89:0d:ae:0f:94:ea:a5:d3:06:02:ae:
93:fb:f2:0c:53:c2:86:30:0a:09:40:e5:1a:3c:8d:
ce:17:78:2b:7a:73:49:50:b1:42:7c:bc:c5:f4:cc:
18:88:8d:31:cb:6b:da:b1:9d:86:3b:06:1b:88:1d:
a4:f1:c2:b1:f1:75:ae:0b:a1:43:bd:d1:14:b9:0d:
1f:53:91:48:76:76:bf:d3:54:4a:96:79:5e:65:95:
63:f7:aa:df:69:1e:43:ff:42:ce:1e:33:1a:de:5c:
67:2e:52:c4:c2:e4:5f:70:91:dc:73:d7:11:1c:e5:
27:bc:df:4d:05:32:5a:95:7f:45:26:87:69:98:d7:
39:da:5e:e0:67:39:b3:05:58:d4:f0:8e:04:5f:e5:
2b:bf:96:79:6b:91:93:c0:50:92:d6:3b:e4:ef:64:
19:df:d0:07:e9:9e:cf:c8:4c:55:f5:8b:b8:41:37:
86:40:db:f3:2c:2c:f2:a6:27:28:0b:dc:03:7b:aa:
e6:23:64:32:f5:56:58:40:5e:11:f2:12:25:35:10:
ea:13:bb:6c:82:84:fb:f1:91:d1:8a:9d:89:d2:78:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:8A:F2:54:63:D7:25:4D:0F:81:3D:04:6E:AC:48:09:8C:C8:E5
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wIWK8lRj1yVND4E9BG6sSAmMyOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e4:4b:0d:a0:d9:b9:bd:f8:ea:ed:ac:4b:45:92:e0:ea:b2:
ed:84:29:3b:7f:74:b1:27:18:f9:fc:a2:9c:be:4b:a3:fd:84:
4b:0f:40:f3:ce:87:3e:24:cb:29:f4:93:8c:56:be:02:8e:31:
af:95:0e:9f:cd:6b:2c:e3:ad:44:cc:e5:54:25:f5:d3:f8:68:
3f:7a:79:cb:92:ee:cf:45:85:78:35:09:a2:46:d4:88:8b:11:
4e:f0:dc:16:46:65:66:03:9b:d5:46:62:dc:96:34:7a:f7:0a:
f6:ce:51:8d:5e:92:96:da:c7:93:45:81:a2:0e:79:cc:26:f9:
6b:80:cd:98:f5:4f:79:1c:42:5a:5c:6f:f6:fd:6d:47:9c:86:
79:87:c0:0e:eb:dc:96:9b:c0:35:82:94:83:3b:8c:2e:84:01:
69:b9:cc:c7:11:1f:b5:92:4b:19:02:dd:22:ee:4b:ed:c9:99:
4f:48:17:05:d9:27:67:b2:f4:d6:d0:18:98:4d:9e:2b:61:e9:
ff:f7:2f:d1:a8:e2:61:b7:27:10:65:24:ef:2c:a8:6b:c4:96:
38:18:58:47:bf:83:6c:9f:2e:d0:ae:2d:45:72:08:b9:d9:81:
d0:87:cc:96:73:aa:57:af:d1:36:c3:8c:40:5b:84:e7:f9:63:
db:8c:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:05 2024 by rpki-client on console-ams.rpki-client.org