Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/wGY7r8IEZfBqtDPeBvIGKDDr31o.roa
File: wGY7r8IEZfBqtDPeBvIGKDDr31o.roa (raw, json)
Hash identifier: FnruvgEbj+Jd7zEEu8uypOOheS/usNund8JbrSMLSXM=
Subject key identifier: C0:66:3B:AF:C2:04:65:F0:6A:B4:33:DE:06:F2:06:28:30:EB:DF:5A
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 018CC7275D80710B6117DDFACF1CC3009DC8
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/wGY7r8IEZfBqtDPeBvIGKDDr31o.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39392
IP address blocks: 185.203.84.0/24 maxlen: 24
185.203.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5d:80:71:0b:61:17:dd:fa:cf:1c:c3:00:9d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0663bafc20465f06ab433de06f2062830ebdf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:b7:31:82:29:36:d0:d1:8f:f5:7d:04:94:
2f:a9:77:71:2f:be:b2:3e:dc:b7:b2:ab:61:f8:a5:
3b:91:d6:27:25:9d:8d:bf:1d:61:53:b2:c7:d3:9a:
91:b9:6b:3d:da:d8:a8:a2:62:06:d5:90:63:2c:b5:
46:f2:7b:33:46:cd:0a:09:2b:11:2f:24:b2:ce:38:
c5:26:2c:fe:53:35:6d:5c:f7:c8:c7:35:1b:28:85:
81:44:14:20:10:b7:15:aa:2b:9f:28:c6:88:53:88:
99:23:36:cd:99:19:16:7f:72:fd:1b:46:9e:46:aa:
6a:ac:55:b8:72:e9:d7:bc:26:29:44:4a:ac:f6:a6:
ab:72:51:8a:3f:83:43:07:bf:fb:e6:cc:a1:30:c7:
20:91:0b:aa:f9:38:95:7a:e1:f6:77:4e:ac:12:f4:
01:58:94:8d:00:13:83:ff:01:79:dd:ca:15:52:fc:
72:3f:72:68:1f:c6:67:54:d3:97:e9:01:57:f5:f1:
58:11:52:57:78:07:9a:18:c6:83:cb:b5:23:09:1e:
24:63:b0:4b:76:e9:37:61:fe:da:25:e1:94:ff:3d:
8b:8d:6d:83:e2:68:4b:b2:35:e4:33:04:62:c0:5c:
0a:3e:f3:6d:7b:56:4a:64:8d:90:91:5e:7a:83:9f:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:3B:AF:C2:04:65:F0:6A:B4:33:DE:06:F2:06:28:30:EB:DF:5A
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/wGY7r8IEZfBqtDPeBvIGKDDr31o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.84.0/23
Signature Algorithm: sha256WithRSAEncryption
46:43:aa:43:24:9e:31:57:e9:93:42:27:08:15:ee:3c:e3:8e:
8a:03:e2:94:74:29:27:11:14:eb:50:67:b9:a9:ef:01:97:3b:
a5:45:e0:88:c0:4c:2c:71:f6:39:87:7a:53:46:15:e1:e7:01:
fb:35:e8:7a:f2:37:75:66:30:e0:68:7b:6e:c4:7c:63:c8:40:
d8:81:8a:9a:11:a7:eb:89:cd:0b:98:be:43:c1:f9:7f:0a:fe:
18:07:13:d4:96:84:bb:f2:28:bc:66:b6:17:e4:aa:74:d5:45:
bb:50:f8:a6:8b:89:9c:e0:46:9f:79:77:ce:81:f0:73:63:18:
9b:f9:7a:96:f9:5b:74:93:00:4b:64:f2:ac:2a:b1:cf:57:08:
a0:a9:bd:b8:46:47:c3:10:99:75:0f:18:bf:0f:be:57:8a:78:
b6:06:be:c1:44:74:49:74:5e:90:6e:92:c6:8a:76:12:79:c8:
c3:da:d5:d3:70:32:36:78:62:fa:8b:d1:c3:4b:d4:55:1e:f8:
cb:3f:43:cd:19:00:eb:40:d9:5d:4b:ad:dd:cc:ad:d7:e8:e5:
5b:93:18:3f:77:18:b1:81:b2:78:06:61:c8:89:04:1b:fb:ae:
d6:ad:65:49:c0:6b:6c:9f:81:f0:c5:a3:30:ec:95:a0:94:65:
fd:27:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:57 2024 by rpki-client on console-fra.rpki-client.org