Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wMrbTlHGCOAKiCCxClUdYhGnwSM.roa
File: wMrbTlHGCOAKiCCxClUdYhGnwSM.roa (raw, json)
Hash identifier: KhnS74yLRe4ooxoWQQxx8uLdz9SGTKZftEVCqtvvi7Q=
Subject key identifier: C0:CA:DB:4E:51:C6:08:E0:0A:88:20:B1:0A:55:1D:62:11:A7:C1:23
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72ADB0CEDDF106DE1A31847B64A63
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wMrbTlHGCOAKiCCxClUdYhGnwSM.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 194.2.86.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
81.255.178.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:db:0c:ed:df:10:6d:e1:a3:18:47:b6:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0cadb4e51c608e00a8820b10a551d6211a7c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:c4:31:93:db:6c:04:e7:5c:96:d7:3b:b4:
9a:d2:4b:3e:a0:f2:3a:d7:f0:59:44:52:6d:6f:bc:
e7:c2:53:a2:40:75:2c:98:03:df:03:c8:14:b5:bd:
b1:e4:75:57:c5:1f:f9:4c:eb:0c:f9:99:ba:6b:65:
54:11:9b:38:ae:5f:74:ad:31:d3:83:00:74:9d:4f:
59:96:56:b6:b8:4d:fb:01:e7:35:85:11:21:14:7d:
36:a7:85:21:a0:57:c2:c4:bd:61:97:f1:2f:34:c8:
cb:2d:ec:5e:fe:0a:80:22:e5:21:3d:61:e8:fd:0f:
f2:24:4f:75:f7:62:d3:6a:b0:ca:ba:eb:41:67:ea:
e4:f6:c6:5f:60:78:e5:94:53:99:db:0d:38:ac:6d:
4c:52:d8:cf:13:07:3c:8a:cb:c7:21:13:56:9b:a1:
25:ed:ec:23:48:e1:c6:58:32:15:6e:74:89:df:00:
59:ad:31:8d:4d:6f:32:8e:ab:b2:63:a2:61:19:bb:
78:bf:84:df:7c:48:35:42:9b:27:54:32:63:e0:63:
4a:f8:80:8c:52:b9:1a:4c:95:24:93:08:6f:e1:44:
c6:31:d5:39:a3:44:de:6c:ba:f0:07:7c:a9:34:fa:
0c:15:64:9e:7b:0e:53:58:b4:45:41:42:ca:a9:49:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:DB:4E:51:C6:08:E0:0A:88:20:B1:0A:55:1D:62:11:A7:C1:23
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wMrbTlHGCOAKiCCxClUdYhGnwSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:93:93:d4:a1:10:78:a7:37:1e:4e:21:6b:1b:06:68:58:f7:
09:57:f2:ff:d7:85:b5:25:c5:23:d4:49:0e:d6:85:48:3f:3b:
83:b4:07:45:9f:5f:9b:60:a2:66:1c:27:d9:c3:42:83:34:39:
59:98:bf:85:2a:38:b4:bd:92:19:8a:58:34:db:a3:99:81:8d:
62:05:be:bf:91:18:fe:38:ac:b2:d4:b1:47:7a:db:49:f7:bc:
f9:21:54:29:46:fa:cd:1b:af:ad:7d:e0:22:c4:50:36:7d:86:
f5:55:f0:c4:68:af:c7:dd:eb:52:2a:0e:3d:f3:74:93:22:04:
29:1b:b3:e1:66:01:80:43:cf:3a:d2:d7:bb:31:e3:b4:57:b5:
3a:2b:9f:ef:3f:96:ab:7e:2f:42:45:51:60:58:c1:76:4e:62:
02:26:62:7b:fa:7f:92:16:51:89:aa:bf:f3:85:77:b9:21:d3:
58:38:cf:55:af:ae:c0:cd:86:08:a5:5e:91:cd:72:b2:0b:4c:
b1:88:98:7a:54:ad:64:d3:c0:07:04:7b:d1:bd:62:dc:17:95:
86:0c:ac:01:b2:92:b1:9f:46:2b:ab:77:0c:1d:35:b4:0b:6b:
64:fe:c3:28:15:84:7b:b2:75:49:7b:1a:d2:ab:65:fa:ee:95:
42:07:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org