Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/W9DCSjXw0HxU6KxPtJmjpTWLjgc.roa
File: W9DCSjXw0HxU6KxPtJmjpTWLjgc.roa (raw, json)
Hash identifier: kM5j8n/Qgip/PnNZol50cOZPUBc2hpGFTIW1jBSgX3g=
Subject key identifier: 5B:D0:C2:4A:35:F0:D0:7C:54:E8:AC:4F:B4:99:A3:A5:35:8B:8E:07
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 018D16B282D9A4DC5A792C41A01651D64707
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/W9DCSjXw0HxU6KxPtJmjpTWLjgc.roa
Signing time: Wed 17 Jan 2024 09:13:34 +0000
ROA not before: Wed 17 Jan 2024 09:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206903
IP address blocks: 185.172.152.0/22 maxlen: 22
185.172.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:b2:82:d9:a4:dc:5a:79:2c:41:a0:16:51:d6:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 17 09:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bd0c24a35f0d07c54e8ac4fb499a3a5358b8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:5a:01:a9:47:eb:53:74:29:99:02:b4:7c:
78:f9:44:08:1a:b3:1c:5a:41:ad:67:0b:78:bb:11:
c9:64:e4:50:ad:2f:e5:4f:a5:71:cc:02:07:81:4a:
c5:af:04:5c:2c:36:09:00:77:27:42:ad:d3:9b:1b:
9d:8b:61:33:5a:d2:ac:16:26:3b:42:b2:f5:fd:a5:
d5:64:c6:60:a6:72:9c:55:70:dd:5e:4d:37:a5:7c:
28:d4:0b:74:79:e5:62:c0:5f:5f:cf:1c:af:74:6d:
1a:5c:12:79:25:75:d0:b8:98:3b:08:12:9f:cd:df:
14:a1:1a:6d:3d:1e:89:49:0e:0c:38:93:51:ea:92:
92:71:85:30:f8:25:90:f7:fb:0f:54:8b:c0:53:57:
ac:12:01:a6:2d:d1:17:d5:74:47:bf:6f:32:e1:d2:
ff:5b:70:09:e1:f1:ef:93:19:e4:76:28:c2:25:85:
35:79:f1:f9:e4:13:46:95:60:ad:d7:9d:43:fa:8c:
9a:83:e3:bb:4c:9c:3b:5b:12:df:0d:db:ba:6b:30:
a4:d0:29:35:6b:60:5e:c0:37:cd:c3:f1:43:dc:e0:
f9:20:31:51:9d:a1:b0:4f:d3:82:d9:ac:3e:5a:f5:
16:a5:06:04:b1:f7:93:aa:3b:03:72:6f:38:83:1a:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:C2:4A:35:F0:D0:7C:54:E8:AC:4F:B4:99:A3:A5:35:8B:8E:07
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/W9DCSjXw0HxU6KxPtJmjpTWLjgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:84:08:4a:38:24:33:58:d0:6f:83:93:c5:37:92:d5:a0:b1:
9c:ed:42:4e:90:a3:4a:e3:dc:64:19:09:66:05:8c:30:c9:f4:
1a:8d:1e:82:67:41:6b:08:99:fb:6a:d0:7a:40:1c:ea:68:d9:
00:08:00:1f:b5:30:15:4d:29:89:8b:69:8f:8b:a0:d2:b8:7e:
7d:54:fa:76:ba:d5:03:f6:e5:2c:d4:7c:4a:27:f2:af:e3:86:
30:12:df:99:8c:c4:1f:58:68:52:3b:de:92:41:0d:cb:0a:4d:
b4:95:31:fd:68:81:6b:49:18:92:f5:82:2b:3b:02:0c:4a:25:
76:5d:fc:b8:9c:21:0e:88:5d:5a:b1:7c:c9:2b:00:4a:8a:93:
9e:89:05:16:d9:13:7c:42:16:ce:a5:04:d0:21:81:d2:06:63:
ee:ba:a0:ac:10:15:46:c4:a2:b1:ef:c1:a4:e3:29:f1:e3:ef:
a3:a9:67:62:5b:23:d8:14:75:c7:ef:7a:d1:92:1e:1f:74:d3:
da:29:3d:76:84:1c:3b:4f:6d:73:b0:3e:06:fe:c4:28:cf:5c:
b1:96:3b:5e:ac:ae:36:99:a8:ea:b4:f8:d8:3f:5a:b8:5d:2d:
9d:e0:fb:f4:ef:27:f3:52:a2:bc:e4:f5:70:a9:ee:86:2f:45:
6d:f4:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:55:07 2024 by rpki-client on console-ams.rpki-client.org