Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/wGU6BNaqCnP4VbyiTSPYD_tSCws.roa
File: wGU6BNaqCnP4VbyiTSPYD_tSCws.roa (raw, json)
Hash identifier: Ebg7TVZzFHyzDArMdPQ7JfeVhF675uCGl8fautdEQpE=
Subject key identifier: C0:65:3A:04:D6:AA:0A:73:F8:55:BC:A2:4D:23:D8:0F:FB:52:0B:0B
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 018CC9BB8E8AD5E63011EC242FDA8C7F95C6
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/wGU6BNaqCnP4VbyiTSPYD_tSCws.roa
Signing time: Tue 02 Jan 2024 10:32:41 +0000
ROA not before: Tue 02 Jan 2024 10:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.218.37.0/24 maxlen: 24
2a02:ef80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:8e:8a:d5:e6:30:11:ec:24:2f:da:8c:7f:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jan 2 10:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0653a04d6aa0a73f855bca24d23d80ffb520b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:d2:fe:77:4a:4b:63:e3:d2:de:e5:d0:51:
31:e7:a0:d4:88:b5:df:7c:15:6b:32:5f:4e:f7:31:
1c:48:15:81:c6:d7:69:ef:d8:da:f2:1b:7d:9b:d8:
e4:7a:2e:fe:a3:40:b7:3e:01:32:59:0e:1a:6e:18:
41:49:37:ee:e4:7f:65:b4:c7:9c:fd:ae:ff:21:77:
64:31:67:53:8e:92:b8:f8:31:f9:c4:ab:2b:5b:d4:
80:a0:9d:5b:87:a0:04:5b:bf:8c:17:9f:2f:26:5d:
eb:55:60:35:27:f6:dd:56:d5:a3:fb:ac:bb:9a:56:
b0:a6:56:f9:97:d5:ae:be:bd:37:a2:29:c8:02:03:
3a:41:4c:36:89:cd:d5:13:71:db:65:fc:f8:29:ae:
c0:0a:ea:d8:14:5e:d2:83:f4:89:81:4b:f4:5d:8d:
69:f8:95:23:cf:26:d3:f6:9f:e0:c2:3b:14:0e:70:
88:bc:ea:a2:49:2a:8e:73:2f:9c:97:ef:7c:1c:cb:
72:db:34:7e:3e:6f:0a:9d:35:9f:89:1a:aa:cc:c6:
d3:e6:61:89:5b:a5:3c:3e:07:5f:21:a8:03:fa:c4:
22:72:f4:01:cb:7a:8a:0a:19:b2:b4:45:87:3f:43:
b2:11:7a:81:61:2f:2f:39:d8:79:4f:90:0c:e0:70:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:3A:04:D6:AA:0A:73:F8:55:BC:A2:4D:23:D8:0F:FB:52:0B:0B
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/wGU6BNaqCnP4VbyiTSPYD_tSCws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.37.0/24
IPv6:
2a02:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
0f:84:5b:6a:a0:a1:b2:f5:2d:07:ca:38:22:d7:dc:de:13:66:
0e:a8:ec:34:ee:9b:2d:72:dc:5c:29:98:e2:d3:d7:78:e8:a9:
b4:19:f8:64:4f:9e:e6:9e:3e:c3:6f:38:57:f9:28:c5:ad:a9:
3c:1a:3f:e9:dc:db:60:b3:9b:fb:b6:94:40:be:34:1d:71:29:
28:17:84:85:ec:69:09:e1:52:6e:71:bf:72:ca:50:6a:d3:56:
70:b1:10:76:47:88:76:6e:b8:f7:f5:cb:12:64:8f:2b:bb:39:
49:84:8a:83:3c:37:ed:19:87:bf:b7:35:ff:13:93:59:9b:89:
aa:6a:f8:60:6d:2b:e6:f2:1d:ca:f0:71:80:f9:c6:d2:e4:cf:
08:64:54:b7:bb:ad:06:42:db:fc:c0:a7:39:12:45:14:4c:44:
39:58:ab:eb:02:3d:0d:75:56:54:a8:d2:c2:84:b5:eb:f8:8f:
5c:4a:01:15:18:87:19:7e:0f:a5:f9:18:f6:f1:3f:fc:49:0c:
09:e6:e4:af:a4:ca:ef:eb:0b:0f:52:9b:d7:cd:28:ea:06:50:
80:34:47:95:ed:8b:05:f6:8b:0d:b4:b6:67:b8:96:47:b1:f7:
ad:8f:a5:d2:69:b2:18:d5:d8:94:ee:b8:81:8a:c9:b0:cd:3d:
c4:7e:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:39:14 2024 by rpki-client on console-fra.rpki-client.org