Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/wMsOz3AXQOjBsWoWLodPOyFasfI.roa
File: wMsOz3AXQOjBsWoWLodPOyFasfI.roa (raw, json)
Hash identifier: WeOKxjC6hdXry8MmMzVaE2aKLRmjlNMw2ySRYlYGpXk=
Subject key identifier: C0:CB:0E:CF:70:17:40:E8:C1:B1:6A:16:2E:87:4F:3B:21:5A:B1:F2
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018CC349073141D74B481EAB6938ECAFBB1E
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/wMsOz3AXQOjBsWoWLodPOyFasfI.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34996
IP address blocks: 90.158.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:07:31:41:d7:4b:48:1e:ab:69:38:ec:af:bb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0cb0ecf701740e8c1b16a162e874f3b215ab1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:81:a5:95:35:16:88:cb:ae:76:0a:97:9b:
90:53:45:32:92:05:be:17:67:9b:5e:ef:aa:0a:f4:
fb:71:12:1b:43:c8:ad:61:4e:a9:00:27:e9:f1:f9:
23:5f:88:f4:1c:9d:be:dc:0f:2b:3f:f5:26:78:35:
40:b3:22:5c:55:88:b7:94:0a:15:3b:af:fb:c2:97:
a9:f9:8d:e5:74:4c:9b:64:75:af:c4:85:14:5c:97:
78:d2:4d:74:c9:36:84:fa:6c:af:eb:c9:82:26:92:
e2:41:e3:a1:3d:0b:92:62:a8:4a:4f:c2:7e:42:1a:
b4:0b:1e:31:28:cc:6d:fe:f3:39:bd:da:5b:f0:50:
59:8d:78:c7:21:73:2e:c8:a6:1e:68:96:20:57:6b:
46:01:99:f6:0c:85:43:f4:2b:aa:4a:ba:78:5b:ef:
72:00:08:41:4b:9b:4d:32:26:53:53:ab:eb:47:0c:
eb:be:78:79:b6:d5:ad:ff:da:ce:fc:38:8f:74:c5:
31:8b:53:b9:fc:43:c3:9d:ed:52:a2:c2:5f:24:d7:
7d:db:78:d5:6f:5c:6d:16:59:46:f2:cd:77:3a:fc:
da:e9:60:51:f4:30:c8:64:aa:3e:86:82:16:26:8f:
69:27:24:70:8d:67:13:9a:a2:90:a0:cd:9d:37:c0:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:0E:CF:70:17:40:E8:C1:B1:6A:16:2E:87:4F:3B:21:5A:B1:F2
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/wMsOz3AXQOjBsWoWLodPOyFasfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.250.0/24
Signature Algorithm: sha256WithRSAEncryption
51:07:83:36:09:25:5f:10:ef:c0:6b:cb:e7:96:97:32:3a:d5:
10:66:b8:13:c0:a7:b8:d2:09:88:55:8c:29:3b:c1:0f:29:40:
46:f5:5c:96:66:f1:8d:55:1d:95:d2:64:d8:05:88:3d:58:f7:
cd:95:c8:2c:97:24:3d:e2:03:de:40:da:b0:01:c0:5b:d5:f7:
56:3a:7c:26:ac:0c:01:f4:52:9e:a3:0b:f8:2a:16:34:49:c6:
18:0e:53:e9:49:f9:a4:1b:57:f7:65:34:fe:9e:9a:42:25:43:
56:cb:c6:2c:08:7b:32:eb:d8:f9:ff:cb:a7:b1:6b:36:b2:d5:
fc:2c:f9:d5:64:8d:d6:c4:33:2d:57:fd:bf:bd:71:e4:d3:f2:
b4:2c:1f:68:73:f7:29:92:ec:3f:06:55:d1:d6:46:4b:8b:82:
c3:cd:6b:67:25:b7:d7:c3:9b:43:ad:4f:7e:37:8b:8d:39:92:
97:92:b9:48:bd:d8:5b:3c:73:e0:6b:b9:cf:5b:89:3f:62:d3:
7b:58:fb:ad:c8:9e:8a:20:e1:b9:45:61:c2:51:18:c8:64:8c:
57:b1:94:bf:f8:85:bc:bf:43:d1:05:90:6f:b0:94:f8:f1:e3:
d4:5c:83:50:ef:b4:d3:21:97:9e:a4:62:9f:28:e2:a6:31:6d:
fc:57:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:12:06 2024 by rpki-client on console-fra.rpki-client.org