Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/wJ5xGL6yh-W-Q34vep8QuzeIcP0.roa
File: wJ5xGL6yh-W-Q34vep8QuzeIcP0.roa (raw, json)
Hash identifier: sAo56QcD8kLOidWS26P3+D0XyKScQOlBdHq6Ryrwxj4=
Subject key identifier: C0:9E:71:18:BE:B2:87:E5:BE:43:7E:2F:7A:9F:10:BB:37:88:70:FD
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 018CC801A753737BD023DD11C05E5490A6BA
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/wJ5xGL6yh-W-Q34vep8QuzeIcP0.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 149.157.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a7:53:73:7b:d0:23:dd:11:c0:5e:54:90:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c09e7118beb287e5be437e2f7a9f10bb378870fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:5d:1f:0b:25:a5:46:06:f5:59:21:99:c3:
de:5e:cd:a9:e0:20:fa:a5:9c:d8:12:a4:28:d4:f5:
d7:08:21:e6:56:42:63:a7:17:67:69:20:f6:5d:28:
db:f4:aa:1e:3b:3c:da:72:d5:67:f9:15:88:7b:84:
8b:f7:ea:27:b6:f8:35:52:fe:f4:ac:6b:7f:88:19:
e6:46:ee:57:fc:5f:19:5f:f1:bb:ab:51:8a:92:38:
71:a0:ce:f3:9c:93:f0:56:84:60:2a:f4:b2:9b:ed:
ac:4b:e5:b0:72:1c:3b:31:52:34:72:c9:79:a9:7a:
8a:8f:4b:dc:28:fa:4d:32:9c:24:a3:32:26:da:9f:
1f:bc:10:8d:c9:7b:f6:aa:d5:92:0f:af:fd:55:99:
6f:56:f8:33:99:a0:c2:36:69:bf:96:35:77:10:7a:
d5:af:4b:fc:da:ba:1e:ee:7b:1c:24:24:0e:e9:73:
1f:4d:9e:25:53:dd:47:20:2b:7f:8f:60:cb:3d:49:
88:5d:fe:7e:2b:a6:8e:f9:7b:de:71:95:0e:1f:8b:
af:49:7e:80:8a:e8:9b:b1:b1:35:84:66:9f:3f:8f:
45:40:fd:c9:75:00:53:46:da:46:c5:6e:bc:b9:3d:
18:a9:70:f2:ac:20:f0:24:77:a1:9f:06:74:55:5f:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:71:18:BE:B2:87:E5:BE:43:7E:2F:7A:9F:10:BB:37:88:70:FD
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/wJ5xGL6yh-W-Q34vep8QuzeIcP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:9e:97:a2:22:39:12:1b:fb:aa:17:5a:c1:21:dd:4b:a2:20:
ca:8f:ea:01:50:2d:f3:fa:d6:52:84:8f:db:c8:74:75:d5:b6:
bc:6a:2a:c0:66:43:4c:10:56:15:50:c9:3d:86:7e:cd:f1:8f:
3b:d0:81:69:19:ac:04:7e:04:8b:72:c4:f6:85:c1:04:d6:b7:
a8:80:94:e3:b2:47:da:43:f7:29:38:ef:d9:d1:b8:d6:42:32:
ee:ec:b4:ba:e0:ef:6e:61:f3:d3:1d:65:66:ed:03:97:59:c3:
54:26:21:13:c7:92:ac:74:79:32:1f:5c:48:38:18:00:14:5a:
55:af:8d:72:66:b5:87:4d:01:92:bd:a6:db:fb:84:cc:87:bb:
43:c2:52:3f:c1:70:fd:9c:b2:56:f4:bf:73:fb:78:07:07:fa:
4d:45:48:f8:e0:e5:a8:13:81:55:ac:55:50:09:2f:70:75:c0:
6b:b3:88:cb:77:e6:be:4a:66:06:ab:d3:cf:8d:7c:14:ea:ff:
92:de:e0:3b:65:f6:d0:e5:9c:58:92:8b:c6:d1:e6:08:43:aa:
cf:d6:87:05:2c:ed:e5:e1:48:f7:f8:08:54:d4:56:79:6c:4d:
c1:24:b0:e0:de:d5:e2:72:60:4b:3a:3d:fe:84:b6:ec:f6:03:
cb:a6:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:06:20 2024 by rpki-client on console-fra.rpki-client.org