Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/wwzfG3opR7lMVQQiUEf04Mvpd2g.roa
File: wwzfG3opR7lMVQQiUEf04Mvpd2g.roa (raw, json)
Hash identifier: ub6cbrVSSCRhd/GXcQrVPzXVrddDXxPiZp65xRgw6NA=
Subject key identifier: C3:0C:DF:1B:7A:29:47:B9:4C:55:04:22:50:47:F4:E0:CB:E9:77:68
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 018CC26D16278DAD11090FBE2DA9BDF4EC6F
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/wwzfG3opR7lMVQQiUEf04Mvpd2g.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 185.252.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:16:27:8d:ad:11:09:0f:be:2d:a9:bd:f4:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30cdf1b7a2947b94c5504225047f4e0cbe97768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:ff:cb:f7:1c:c6:40:24:ad:b8:c8:85:ef:
fe:1c:7b:e6:e7:a6:50:ef:93:09:92:06:dc:26:e8:
2c:9c:35:92:f5:19:52:8e:10:d9:35:31:b2:03:16:
26:d8:02:23:64:1f:12:dc:93:bb:3e:95:2c:96:40:
3c:34:96:c4:f9:e9:3b:2e:4f:23:e2:17:df:60:74:
be:37:7e:7f:d0:0b:a2:99:f5:1a:cc:be:b0:76:31:
92:df:05:69:6c:d5:0a:78:a4:27:23:d7:52:43:69:
93:84:f1:28:68:c2:55:6a:42:53:44:37:39:53:82:
39:77:d7:ad:01:8d:99:70:92:63:49:c1:22:15:7e:
20:4a:33:dd:44:cb:46:1e:d6:2e:a0:3a:4f:76:7a:
9d:b8:f8:a5:78:5c:8d:ba:b4:b4:0c:7f:ef:78:70:
a7:e9:07:19:77:62:b0:e8:0c:07:7e:7f:31:54:e1:
29:d8:66:cd:3e:6e:bc:91:c7:33:60:ec:a4:80:90:
82:16:52:1d:03:6e:1f:30:79:f9:50:1c:c8:77:27:
3e:1a:86:45:74:cd:88:45:54:77:53:e8:57:5c:8a:
41:86:98:77:ef:ee:d0:4b:01:2f:06:1c:25:fe:a1:
47:0b:8c:38:7c:c7:bc:ec:75:0f:64:8b:20:7c:ee:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:DF:1B:7A:29:47:B9:4C:55:04:22:50:47:F4:E0:CB:E9:77:68
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/wwzfG3opR7lMVQQiUEf04Mvpd2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.43.0/24
Signature Algorithm: sha256WithRSAEncryption
23:10:d5:80:19:02:e1:95:f9:3a:5f:ef:79:60:9f:40:17:a5:
81:40:d0:58:29:65:72:2f:8f:90:00:70:33:59:fc:cb:39:55:
6d:37:df:92:74:3e:76:0a:ad:88:3b:fc:d3:09:30:a9:a2:7a:
52:87:27:a6:d1:05:37:44:bb:ca:93:8f:f1:80:52:5b:13:36:
8e:c5:90:b7:ce:20:8c:66:9a:c7:5f:6b:2b:d5:be:7e:ab:a7:
2b:72:1d:04:d2:85:7e:6a:0b:48:11:2a:bc:31:2f:9d:1c:e9:
fe:e0:4d:88:c7:64:d7:fe:81:cd:03:64:fe:a0:01:66:26:24:
48:dc:1b:e8:20:ce:01:26:ba:c5:64:1a:22:c9:ed:b9:e6:34:
5b:f8:be:75:fa:76:5d:57:a0:55:fd:ed:a2:c7:82:84:d2:db:
2c:04:ea:f8:e6:15:98:10:b9:48:cb:3f:1b:42:db:93:6f:40:
ee:16:94:c9:74:7a:b2:4e:1d:7b:ae:86:e6:78:0e:37:ed:db:
af:0d:cd:df:11:84:88:a5:13:cf:60:9a:4c:55:9f:65:6c:7a:
27:71:e4:a5:f2:92:be:17:ad:e8:94:f7:7c:82:b5:e6:cd:aa:
5d:cb:92:7f:06:4d:64:d1:95:aa:13:1e:0c:36:a6:77:11:20:
95:b4:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:58:18 2024 by rpki-client on console-fra.rpki-client.org