Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/7wgZniSfbaf8ORoZQpX3HIo4n_w.roa
File: 7wgZniSfbaf8ORoZQpX3HIo4n_w.roa (raw, json)
Hash identifier: jgqVyJavCyt4WrnxMTnoCPDvTKF3MnH3ATcmUzns+Sw=
Subject key identifier: EF:08:19:9E:24:9F:6D:A7:FC:39:1A:19:42:95:F7:1C:8A:38:9F:FC
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 018CC26D273CD7B06DC676D4B33112D50DE1
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/7wgZniSfbaf8ORoZQpX3HIo4n_w.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39405
IP address blocks: 185.40.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:3c:d7:b0:6d:c6:76:d4:b3:31:12:d5:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef08199e249f6da7fc391a194295f71c8a389ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:69:db:0e:19:f1:6b:96:8e:9a:c9:37:f6:
fe:02:59:9a:50:47:d2:b5:b9:76:91:19:ea:42:8f:
24:9a:40:65:2d:2f:89:bd:dc:2a:62:39:00:fe:73:
d5:7d:fd:ac:4f:6b:ff:15:84:30:fa:10:89:c0:ef:
a6:1f:d3:fd:90:4a:0d:57:46:ee:bf:08:0e:a2:3f:
a4:aa:80:70:83:38:eb:b7:e8:22:cd:e2:00:65:fb:
fa:a2:e4:fb:ea:61:5f:5e:24:46:21:c6:22:c2:4d:
f0:4b:69:e1:f1:22:c6:2c:95:55:50:2d:0f:04:3b:
8c:a4:b7:ad:cc:46:c8:92:65:6f:9c:bb:53:2a:72:
28:1b:0a:10:20:f1:8a:d1:b8:6b:33:e8:a1:7a:b5:
b4:7f:69:cf:3c:4f:38:82:da:f7:7a:29:7e:62:a2:
4d:ac:68:c5:71:a2:e7:41:d5:d5:88:63:16:4b:fe:
e0:9d:4e:ae:f3:37:bf:ef:cc:94:8e:b8:57:7a:61:
0d:9d:f3:e8:de:9f:03:4f:3e:c1:c9:da:40:e0:f3:
a5:67:d2:29:e7:dc:9b:b9:c3:7d:c1:c5:ce:65:dd:
e6:46:fe:b2:42:22:60:59:aa:0f:35:61:39:25:f2:
39:af:47:80:8e:4c:35:a8:50:68:fe:bd:28:7f:c9:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:08:19:9E:24:9F:6D:A7:FC:39:1A:19:42:95:F7:1C:8A:38:9F:FC
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/7wgZniSfbaf8ORoZQpX3HIo4n_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:2d:b0:df:4b:f7:11:4c:f8:28:c4:11:f5:1a:ea:44:e1:5e:
7a:95:bc:c4:c8:a5:d7:fb:78:af:24:b0:89:a7:ae:a0:d9:56:
3d:aa:b0:bb:08:43:e8:07:5c:da:d4:40:cf:1c:85:44:46:94:
2a:26:e7:3f:75:00:e3:27:2d:74:f5:04:86:ac:a4:e5:02:a5:
d2:3b:0d:25:40:c7:ef:39:63:6a:38:de:a7:01:30:3c:3c:30:
19:c0:58:78:52:b6:fc:63:62:90:b2:64:12:26:5d:9e:6f:10:
19:39:59:7f:58:96:98:26:c0:b9:7b:08:ff:fa:4e:09:4d:8a:
2e:5d:65:22:e2:37:92:73:49:7a:43:99:f9:3f:02:01:a3:fd:
ca:3e:0a:b6:02:fd:45:1b:5f:9f:a3:49:06:b2:c9:35:19:55:
de:eb:ee:88:97:45:14:8a:40:ee:ee:f9:e9:98:8b:d9:f0:36:
1e:fd:2c:8e:18:43:76:7d:92:bf:88:84:92:c1:ad:2e:2e:83:
31:6a:5c:c4:59:9e:92:84:a9:66:4e:f8:86:68:3a:29:59:a8:
99:2a:ca:37:4e:11:f1:f1:fa:91:c9:e0:07:28:b7:bd:a8:ac:
9a:28:37:ec:c5:40:12:00:48:d5:60:74:44:07:e4:b1:e0:65:
7b:54:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:55:29 2024 by rpki-client on console-ams.rpki-client.org