Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/wnvrSR-EzKEYcMxLqS_hCf1kImc.roa
File: wnvrSR-EzKEYcMxLqS_hCf1kImc.roa (raw, json)
Hash identifier: +k8mwu9QH6esiFWt5e3eAP87hCuKO5XG2qRfuiXQvK8=
Subject key identifier: C2:7B:EB:49:1F:84:CC:A1:18:70:CC:4B:A9:2F:E1:09:FD:64:22:67
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 018CC8DE5172776455AEAA08A100E0F3AC68
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/wnvrSR-EzKEYcMxLqS_hCf1kImc.roa
Signing time: Tue 02 Jan 2024 06:31:02 +0000
ROA not before: Tue 02 Jan 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60447
IP address blocks: 185.81.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:51:72:77:64:55:ae:aa:08:a1:00:e0:f3:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27beb491f84cca11870cc4ba92fe109fd642267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:81:ef:ba:8c:5f:a6:9d:d6:35:54:79:85:
81:40:eb:ca:b0:bc:33:89:c5:b1:aa:16:be:56:00:
14:f1:29:34:ed:7e:e8:75:1a:96:b6:34:13:c8:4c:
ad:f1:d8:44:82:64:6b:c7:21:53:2f:7f:c3:ab:a0:
c8:dd:64:3c:f1:ff:4d:fa:b4:5a:bd:c6:c9:b6:cc:
46:34:d8:79:dc:19:c3:8e:0c:fa:8d:2d:f8:bf:47:
f6:04:01:d0:cf:2c:6a:8e:f0:23:d9:5a:6c:fa:50:
48:36:b8:c6:50:82:97:07:67:43:c4:f6:86:34:d5:
ce:12:91:34:4b:16:4d:a8:c7:34:9d:27:5b:df:31:
98:e9:97:72:71:88:04:0b:c0:f4:6f:b4:89:b6:c8:
93:86:81:53:5a:89:77:f5:16:ed:82:ed:07:c5:26:
d9:2b:0b:09:c7:c3:e5:51:6a:98:bb:60:4b:27:a2:
7a:b8:ff:6b:75:98:14:99:f6:44:4a:4a:67:a7:7b:
de:e9:56:79:72:ba:77:ba:0b:08:51:95:cb:53:82:
2d:91:fd:69:d3:5b:7a:35:21:76:fa:a5:6b:91:3c:
3e:69:ea:65:1e:57:b3:76:bd:99:ff:f5:d2:7a:f6:
81:ba:ff:db:94:26:f9:66:ed:9d:f2:34:ee:73:7b:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:EB:49:1F:84:CC:A1:18:70:CC:4B:A9:2F:E1:09:FD:64:22:67
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/wnvrSR-EzKEYcMxLqS_hCf1kImc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.123.0/24
Signature Algorithm: sha256WithRSAEncryption
08:54:57:ba:5f:b7:c6:25:3f:21:ea:09:fd:a5:5d:7e:e5:f0:
65:60:0a:50:f1:b8:69:4d:0b:23:79:65:ac:1c:a8:16:f5:c3:
d3:24:be:14:39:a2:f4:4c:56:b6:64:74:b5:ea:59:da:d3:53:
83:fd:2c:06:9f:d4:65:87:61:26:03:19:7d:3a:52:81:ab:d8:
b8:70:33:c9:e5:e3:7b:0d:dd:8d:6b:01:9d:c7:11:cf:0b:39:
46:58:87:71:73:23:97:72:fd:33:69:13:55:fa:e0:47:f8:1b:
43:75:7d:45:5c:ab:09:c8:b9:71:72:1a:a9:0f:7a:57:3a:11:
f8:06:87:10:70:ec:f6:29:24:c9:ea:e3:4e:52:cc:bb:06:a0:
c3:2f:3f:c9:c2:6e:0b:0a:5a:4f:f7:c5:74:b7:95:46:b7:f5:
ae:59:66:90:42:83:08:88:6a:01:c5:d2:16:cc:80:6d:e5:22:
b8:06:8c:eb:cb:4f:46:00:56:48:a3:6a:3c:9c:d9:4a:0a:5a:
54:a7:1b:75:7f:46:de:f6:31:57:b8:de:eb:e0:b6:ab:d9:e3:
10:15:57:15:cd:77:e7:c9:0d:84:c1:fe:2d:3a:a2:38:25:3d:
ba:56:18:cc:80:dd:d7:85:bd:ca:1c:56:8e:46:37:15:10:10:
6b:db:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:03 2024 by rpki-client on console-ams.rpki-client.org