Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/4WTR_sKm65nSX28ISX3qws06mP4.roa
File: 4WTR_sKm65nSX28ISX3qws06mP4.roa (raw, json)
Hash identifier: 8GNE7+y30MD5aM1Ec+H20qCtBOsHTruL2533Ue/4QEc=
Subject key identifier: E1:64:D1:FE:C2:A6:EB:99:D2:5F:6F:08:49:7D:EA:C2:CD:3A:98:FE
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC501096DCAFC1AC53CCC07B9FDC3BE1B
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/4WTR_sKm65nSX28ISX3qws06mP4.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42041
IP address blocks: 31.128.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:09:6d:ca:fc:1a:c5:3c:cc:07:b9:fd:c3:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e164d1fec2a6eb99d25f6f08497deac2cd3a98fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:84:f9:12:3b:35:40:ff:da:8f:c5:fa:9a:
73:e2:f8:b5:bb:15:26:48:40:c3:5c:c4:41:fa:e2:
43:cc:2c:0e:9a:cd:3d:1e:ec:2a:19:8e:1d:14:14:
6f:59:c4:a8:83:5f:fc:d9:fd:cc:cb:0c:51:d7:8f:
b5:12:a0:2b:21:30:d8:4f:be:8f:0a:db:9e:c3:7d:
fa:60:a2:e9:ae:1a:c6:b8:f9:5e:9e:84:64:b4:49:
f3:38:dc:c9:40:a5:20:22:0b:b4:5c:c5:d3:ce:30:
ab:12:b3:4d:e6:ec:41:9d:7b:20:b4:bc:f1:1c:32:
04:9c:77:e6:db:23:58:70:4d:32:fa:28:bc:8e:bd:
fe:1b:52:b3:ea:70:f1:c6:b3:41:06:00:d6:d1:35:
4d:03:74:5a:1f:9c:c2:3b:93:6a:b0:2e:90:31:03:
62:8f:16:17:07:77:2c:fd:08:3d:54:01:96:3f:8a:
45:a1:8a:0c:a8:19:66:a2:6e:73:c0:f3:9f:48:ec:
eb:99:e4:49:a6:7e:fe:e9:24:73:bc:7c:1b:6f:c2:
61:aa:d3:62:fb:89:57:45:c8:c4:50:69:9b:aa:20:
04:83:e0:86:2a:ca:97:21:76:83:2a:c3:96:f7:dc:
18:0b:a8:d9:bb:84:80:df:b9:53:6f:38:59:84:16:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:D1:FE:C2:A6:EB:99:D2:5F:6F:08:49:7D:EA:C2:CD:3A:98:FE
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/4WTR_sKm65nSX28ISX3qws06mP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e0:26:ca:01:af:7b:37:73:52:21:3e:42:24:84:63:68:b6:
48:4d:68:fa:11:18:a8:b6:13:2a:f8:68:31:ee:e9:06:96:11:
7d:f7:e1:c1:c1:cc:86:3a:ac:bb:03:1b:a8:2d:1d:d9:67:6d:
3f:b0:47:c7:eb:a8:54:d9:b7:5d:55:af:14:f8:23:eb:e4:6a:
87:cb:a4:a8:b8:02:fd:ae:7b:26:14:cb:90:0a:15:75:2f:59:
0b:27:39:31:dd:03:ab:3c:0e:e2:92:0c:1c:a7:0b:77:98:95:
14:a6:e9:2b:a4:ee:d2:84:ca:6a:97:70:26:fb:b0:8b:d0:60:
8f:79:43:85:92:7d:c5:e5:4a:da:61:d0:81:79:15:e7:cd:38:
69:b8:7d:cc:c2:06:64:1c:a4:12:24:91:6e:cd:2b:01:a8:18:
2e:b5:a9:d0:2e:98:89:15:73:26:6f:7a:80:b9:63:93:66:8b:
7f:7e:1c:f6:18:4a:7d:83:7e:3f:e8:ee:65:61:af:f1:16:6c:
18:41:a2:56:53:4e:41:11:72:76:b7:4c:b9:c1:df:63:b3:69:
8c:2c:16:37:c8:ae:b3:80:73:cc:4c:2a:88:01:81:8e:4e:93:
57:04:15:a5:f9:ca:3c:c9:2c:80:36:ee:cc:13:0f:56:8d:4f:
00:b1:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:42:06 2024 by rpki-client on console-fra.rpki-client.org