Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/wyzpYLQGWuFPQlkxZD01kVNZJ0w.roa
File: wyzpYLQGWuFPQlkxZD01kVNZJ0w.roa (raw, json)
Hash identifier: QvLH2WWsVuMwpoQQTTZNADzVqUMoBoXgAIFR/jpl33c=
Subject key identifier: C3:2C:E9:60:B4:06:5A:E1:4F:42:59:31:64:3D:35:91:53:59:27:4C
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 018CC72742FDAAD48F32689B5AF3CE2143A0
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/wyzpYLQGWuFPQlkxZD01kVNZJ0w.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198126
IP address blocks: 217.197.110.0/24 maxlen: 24
2a13:a240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:42:fd:aa:d4:8f:32:68:9b:5a:f3:ce:21:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c32ce960b4065ae14f425931643d35915359274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:2a:c2:29:c8:a7:a6:bc:49:a8:af:c2:7f:
8f:75:6e:c5:32:26:8d:d6:62:d8:ed:da:75:23:67:
5f:2c:6f:ad:79:8b:eb:47:6b:6a:4a:5a:03:44:c6:
27:5f:40:cd:e6:f0:56:35:00:18:ed:7d:cd:0c:3b:
30:5f:dc:21:1f:ce:78:2b:6b:c9:6a:5b:b7:51:9b:
a5:b3:87:50:cf:aa:2b:78:27:08:16:c1:0e:7e:0b:
ed:59:8d:b3:47:3c:6f:85:08:64:ee:06:85:7c:7c:
50:8e:56:65:06:bc:c0:b2:ec:4f:5d:61:49:c4:68:
cd:8c:ef:05:69:8d:db:6a:4d:0a:ca:20:c1:21:a1:
71:97:b1:d6:95:42:db:f4:66:3e:a7:5f:3d:c5:39:
81:20:ca:01:c0:56:3f:1f:e2:52:e4:db:32:23:ae:
81:ee:1b:43:1d:2c:ec:f8:8d:3d:0d:e1:68:56:6d:
5e:f9:68:e0:10:c3:0d:bf:f4:ae:b4:2f:1f:83:d9:
8f:d5:86:64:af:da:28:55:ef:ac:66:4a:45:77:c6:
38:93:21:a7:79:5b:99:24:61:d8:d8:e4:75:8e:f1:
86:68:e9:28:3a:dd:e1:b6:df:3a:38:42:b2:ee:6f:
2e:5f:ae:92:a9:a9:b0:40:d6:41:86:a4:9b:de:e1:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:E9:60:B4:06:5A:E1:4F:42:59:31:64:3D:35:91:53:59:27:4C
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/wyzpYLQGWuFPQlkxZD01kVNZJ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.110.0/24
IPv6:
2a13:a240::/29
Signature Algorithm: sha256WithRSAEncryption
0a:8a:42:9d:3a:11:a2:4f:72:6f:e0:ee:d4:68:a6:56:e1:0b:
44:7a:09:71:01:0a:95:d0:e9:e1:09:37:f8:c0:94:e5:34:62:
c2:04:6f:f8:5b:6b:79:6b:b9:84:7f:37:d3:3b:fc:fc:79:a2:
b6:d1:06:f7:97:02:6e:38:cf:d8:4c:a2:97:fa:58:15:7e:fd:
62:5a:18:5b:c2:88:ea:99:1a:15:57:10:1a:16:2e:82:73:ab:
d8:5a:58:c2:f4:1c:f2:3e:cf:f7:ed:2e:a6:86:94:df:8e:62:
49:7a:bb:c5:e1:3f:78:73:bd:75:ca:2d:b4:d4:e2:b8:5f:e8:
21:8a:9e:c1:49:d8:0e:5a:df:a1:f3:25:45:74:37:6f:93:a9:
22:38:19:9d:82:a1:33:1d:e9:59:d0:98:1f:9b:3c:4c:a0:3b:
6b:77:73:eb:bf:ee:fe:4a:13:4b:d6:90:73:fd:bb:02:75:03:
dd:61:88:2e:f3:1e:b4:89:34:13:00:83:57:05:bb:45:3b:53:
54:74:99:21:b6:43:89:ac:b7:58:7e:2d:33:bb:48:a1:65:a7:
51:78:bc:5b:75:6c:e7:e9:7c:c8:aa:c5:08:ba:e7:43:81:36:
57:f8:b7:21:5a:21:b7:8b:81:bd:eb:12:13:59:06:ae:c5:0f:
69:58:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:16:25 2024 by rpki-client on console-ams.rpki-client.org