Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wBf6dB-aSW-raEOGdU7Oy0A-hB4.roa
File: wBf6dB-aSW-raEOGdU7Oy0A-hB4.roa (raw, json)
Hash identifier: 7P9IFCDUE09AZiB0yw3++yHVsyhvaLBcGpkIXDyBex8=
Subject key identifier: C0:17:FA:74:1F:9A:49:6F:AB:68:43:86:75:4E:CE:CB:40:3E:84:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49340EDC381CFD9B73EF996E42F045F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wBf6dB-aSW-raEOGdU7Oy0A-hB4.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 94.177.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:ed:c3:81:cf:d9:b7:3e:f9:96:e4:2f:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c017fa741f9a496fab684386754ececb403e841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:13:99:06:6c:71:53:b5:a5:f4:2f:47:82:
a2:82:f2:06:dd:61:ae:42:58:f1:58:ce:8d:fe:d1:
30:a7:73:54:45:d4:8a:90:ad:96:ef:53:05:ac:33:
4e:ab:9c:ec:ce:05:87:97:b5:2c:b8:d2:c9:27:7f:
a6:35:63:0e:1f:7e:0b:64:3b:98:a1:4a:84:d6:8b:
07:82:62:45:4d:de:b1:f8:7b:b0:ad:1e:81:d7:1e:
28:6d:08:a5:da:e8:a7:e6:c1:ac:f0:06:37:b9:92:
31:24:f4:dc:24:fc:d5:31:b0:f2:cd:1d:d8:5e:39:
b4:c6:24:01:ec:b3:cb:bf:34:0a:6e:c6:15:5a:ce:
24:18:a9:5c:ba:3d:57:56:e0:68:f7:2b:3b:4a:0e:
35:85:1c:b4:5e:ac:de:85:da:c4:fd:0a:20:74:9d:
5f:f1:5a:d6:3d:04:2c:80:d5:dc:69:a1:36:2a:9f:
40:0a:ee:13:fb:00:1b:cc:54:18:de:c6:cd:cf:a2:
95:f0:73:2f:9f:40:27:1a:0f:db:59:e3:44:c8:b6:
94:74:95:f4:3b:ba:e3:55:d8:e6:70:b1:14:87:f1:
23:4d:a5:98:15:67:cb:2c:f9:1d:e5:e3:61:35:9f:
2e:ac:6a:7c:b4:7b:a8:21:84:29:79:6b:ff:7a:c9:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:FA:74:1F:9A:49:6F:AB:68:43:86:75:4E:CE:CB:40:3E:84:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wBf6dB-aSW-raEOGdU7Oy0A-hB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d0:32:e6:d9:2b:3d:b0:b3:b0:87:22:58:90:6b:18:87:7e:
f9:48:5e:5f:77:31:9b:c4:32:bb:a6:e8:6d:87:c0:32:b8:27:
aa:f2:76:f3:f9:ea:ee:72:45:9d:f4:28:2a:a0:54:b8:6a:00:
99:0a:6b:20:66:11:cd:d2:64:cc:26:0e:04:aa:44:46:ef:da:
60:a6:9b:bd:8f:8a:ff:94:ae:48:1c:d5:c8:71:af:f3:a0:a6:
50:41:79:87:8b:6e:d8:1a:03:65:c2:f4:fd:49:37:d3:88:86:
7f:97:bd:7c:e4:3b:26:07:f5:ec:60:42:e5:b3:3c:69:99:d8:
f1:db:92:72:35:d8:ee:58:70:02:c1:9f:38:0e:69:b9:a5:52:
13:32:cf:9c:6e:9f:d2:11:f2:af:5f:da:0e:50:98:c2:8e:c8:
96:84:12:88:46:cd:2f:e3:31:5d:73:ac:ac:0c:a4:80:4a:b0:
55:93:26:ef:ac:51:8a:d9:94:74:05:e9:dc:19:a0:f9:9a:82:
0e:aa:5c:67:36:c9:a4:10:8d:9d:66:80:3e:51:74:65:11:66:
f1:ac:2b:0c:e5:f7:62:ce:b9:a8:bb:06:aa:7e:bb:85:3f:9e:
6b:11:1f:d1:18:fb:be:22:53:0f:69:44:b4:cb:64:cf:03:a8:
87:fb:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:34:55 2024 by rpki-client on console-ams.rpki-client.org