Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wrQEMrrc0P4MpJ12PYit6C35UfA.roa
File: wrQEMrrc0P4MpJ12PYit6C35UfA.roa (raw, json)
Hash identifier: SujDAn+Gskj6HLDzQSGH1D6FPQOhQ94VStmMgUBLPcc=
Subject key identifier: C2:B4:04:32:BA:DC:D0:FE:0C:A4:9D:76:3D:88:AD:E8:2D:F9:51:F0
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 018CC26CF95837E437231CC0AA9BA2B3EA6F
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wrQEMrrc0P4MpJ12PYit6C35UfA.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 185.128.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f9:58:37:e4:37:23:1c:c0:aa:9b:a2:b3:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b40432badcd0fe0ca49d763d88ade82df951f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:14:2e:c9:00:8c:55:69:e2:cf:a5:bf:4b:
5b:d4:43:13:37:5b:21:4c:78:84:ed:8b:2b:fd:9b:
6d:ef:a1:62:d5:b5:c7:6b:c9:42:8e:95:6f:5b:ef:
c0:1e:0b:eb:26:e7:b2:ac:46:ca:5c:29:cc:f9:bf:
0c:2a:ee:72:1c:b9:09:0d:11:25:6e:28:3c:60:b3:
34:f3:f8:2c:bf:2a:27:98:ae:71:74:02:0d:ba:11:
8b:fb:57:0c:76:ec:60:f4:a4:47:4b:11:52:71:ed:
c2:d4:10:63:71:b8:75:30:11:50:14:2a:32:7e:ec:
40:2a:3a:73:90:1f:54:21:dc:63:b6:ec:b9:f5:03:
28:68:33:94:a6:ba:e4:52:72:20:d5:4e:2b:04:c3:
ef:64:9d:b5:de:45:cf:43:3a:51:41:b7:61:77:56:
7a:7b:72:08:09:ee:85:9f:aa:20:b5:71:80:e5:3f:
9f:4b:2c:bc:dc:e2:9c:4e:cb:b9:7b:65:ef:33:0a:
ef:1d:2a:3c:aa:99:f6:ec:af:3f:4f:53:c7:a8:56:
aa:d0:56:ae:b3:92:3f:23:03:a7:3d:42:e3:0d:8c:
01:66:ee:f6:f7:dd:46:36:a1:39:84:23:10:bb:b3:
ed:42:c6:8f:6f:36:4c:a8:00:ba:60:1e:93:47:ef:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:04:32:BA:DC:D0:FE:0C:A4:9D:76:3D:88:AD:E8:2D:F9:51:F0
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/wrQEMrrc0P4MpJ12PYit6C35UfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f7:79:87:dd:1d:2d:d4:01:df:4d:95:d9:cb:3e:b5:69:0c:
71:fe:86:84:6a:3b:bb:81:33:8e:b7:b9:e9:3a:8e:5f:d0:e5:
6d:9c:94:5f:4d:b6:41:e0:c2:a9:d6:f2:cb:68:d4:75:41:50:
55:d2:ef:be:17:90:34:48:8c:5c:4b:3e:a6:5a:4b:17:ab:36:
e7:98:31:8a:b2:2a:bf:50:b5:85:b9:6e:cb:2b:1f:25:73:67:
63:d1:94:35:55:75:da:fd:4c:07:24:c4:f3:30:c0:6e:36:cd:
f2:4f:a0:70:d2:ef:c8:6c:7f:f4:fc:87:5c:6f:f2:b8:ee:06:
e8:e6:5d:59:1e:7e:e4:f3:d7:79:15:24:47:6c:5f:c4:ca:f5:
ad:3f:5b:95:e0:dd:ab:8f:dd:3c:30:36:38:b0:d0:f8:2e:3c:
07:61:38:fd:fe:3f:89:88:76:b9:c0:51:88:1f:99:a3:78:57:
80:bf:6f:30:e9:2e:ea:40:4d:76:e7:18:c3:0d:8e:0a:2e:6d:
21:71:55:92:b6:c2:a5:5a:9b:1b:c6:6c:a5:d1:6e:09:0f:69:
ba:e6:c9:44:e7:4c:c6:02:e8:cb:19:42:a7:28:f4:51:81:06:
3f:b5:7b:89:40:bb:8a:9a:f2:93:08:7d:66:60:4b:47:79:4f:
0a:93:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:34:49 2024 by rpki-client on console-ams.rpki-client.org