Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wAqunWDrypnJ-F2V84SWEXdL4PQ.roa
File: wAqunWDrypnJ-F2V84SWEXdL4PQ.roa (raw, json)
Hash identifier: IYZ1m2vl2Vj5h3lCjOOrUas1xAX4EIhvf/tCyZ9PWnI=
Subject key identifier: C0:0A:AE:9D:60:EB:CA:99:C9:F8:5D:95:F3:84:96:11:77:4B:E0:F4
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018CC801789445AF67193D499A428C3FFF62
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wAqunWDrypnJ-F2V84SWEXdL4PQ.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.212.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:78:94:45:af:67:19:3d:49:9a:42:8c:3f:ff:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c00aae9d60ebca99c9f85d95f3849611774be0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:d5:3e:dd:4c:f1:16:1b:a8:3b:fb:07:65:
1d:7c:55:62:25:ed:0c:5a:2c:6b:d3:7e:05:a9:61:
40:73:82:68:ef:6d:5e:a0:b0:e6:22:17:dc:90:eb:
e5:c2:01:c0:10:ba:f2:9c:35:5e:07:8d:76:9b:4c:
df:74:16:53:1b:2b:f5:98:77:bd:0f:ad:44:71:14:
b9:f4:47:46:6a:d7:09:9a:88:1e:52:3f:b7:a1:46:
01:04:73:40:80:be:cf:a5:c5:b2:6c:73:c9:f8:8a:
71:94:19:1f:0e:1d:da:4c:90:93:35:23:eb:58:95:
c4:36:59:78:9f:be:d1:6a:1d:80:e9:93:e9:23:0e:
5d:28:06:13:6f:4e:bd:4a:8f:8e:8d:b3:4b:22:36:
10:2f:70:e8:29:d1:f8:db:a6:04:05:63:49:9c:bc:
da:52:2b:18:67:8e:71:1f:2d:6f:3e:eb:45:dc:06:
48:1b:fb:f5:d1:af:cf:4f:ff:8a:8b:a3:f7:e9:88:
c4:f8:ea:ec:f9:f4:ed:b7:8d:41:87:fa:0b:9b:c5:
38:46:02:03:f2:41:3c:8c:4d:48:fb:e4:09:69:d3:
66:96:03:78:77:b1:ac:19:eb:c6:b8:06:27:fd:82:
9c:eb:85:e1:b7:c0:e1:0c:df:4e:79:37:5b:e9:61:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:AE:9D:60:EB:CA:99:C9:F8:5D:95:F3:84:96:11:77:4B:E0:F4
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/wAqunWDrypnJ-F2V84SWEXdL4PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.204.0/23
Signature Algorithm: sha256WithRSAEncryption
30:0e:69:5f:c4:42:d4:7b:d1:63:83:b9:bb:b2:0f:20:53:27:
17:e5:b6:38:e9:07:6e:6e:9a:f5:d6:84:13:61:e9:2e:4f:d9:
53:7d:75:13:df:11:7e:34:3b:80:d3:46:bf:51:92:4a:28:90:
f3:96:9c:bb:06:6d:f0:a8:9d:b7:3c:b8:f6:35:be:c6:d2:fc:
9d:97:59:c5:6b:78:78:1e:e0:b6:94:eb:db:22:43:8e:af:c2:
a4:84:a3:0d:fa:57:f7:c4:99:e9:da:44:a9:1b:7a:44:4d:e1:
5a:c0:55:2f:4f:77:37:21:fa:e9:83:07:0e:b4:56:fa:39:db:
73:34:a6:23:dc:a6:e3:af:98:59:48:6a:c3:54:88:6b:bd:10:
28:44:51:6c:09:2d:3c:07:48:cf:a8:b8:1e:21:91:89:fb:dd:
05:0d:dd:a2:6d:56:d4:51:88:da:59:d8:31:5a:bf:56:ff:93:
eb:58:ae:11:8a:13:0b:33:60:e2:2b:db:73:ea:d2:32:65:99:
0b:c9:fd:b0:a9:71:4b:e4:30:9f:cb:fc:9c:05:4f:2f:b6:56:
d6:bb:2e:b5:f4:0a:3a:f1:e9:5e:ac:86:32:24:7c:89:8a:f8:
d5:3a:24:26:3d:f0:fa:96:a5:7d:55:39:52:fc:4f:0d:3c:28:
c2:a9:7a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:04:54 2024 by rpki-client on console-ams.rpki-client.org