Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wb_n18YmCekk96GP_TI-5jLjK_I.roa
File: wb_n18YmCekk96GP_TI-5jLjK_I.roa (raw, json)
Hash identifier: 9EQI4uQ8fxMuLjd388EOnkEu6mtJuPoPIxZ0C43t9h8=
Subject key identifier: C1:BF:E7:D7:C6:26:09:E9:24:F7:A1:8F:FD:32:3E:E6:32:E3:2B:F2
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 018DFF9409EA011C7BA9BC43CCDE866514B2
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wb_n18YmCekk96GP_TI-5jLjK_I.roa
Signing time: Sat 02 Mar 2024 14:31:48 +0000
ROA not before: Sat 02 Mar 2024 14:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.16.0/24 maxlen: 24
93.126.30.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ff:94:09:ea:01:1c:7b:a9:bc:43:cc:de:86:65:14:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Mar 2 14:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1bfe7d7c62609e924f7a18ffd323ee632e32bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:19:6e:51:32:82:25:42:12:87:da:b4:b5:
87:ee:99:11:1c:92:01:53:f6:8e:69:eb:59:31:dd:
2c:7a:c3:14:92:29:7b:18:b1:20:1d:71:37:9a:19:
5b:b0:41:76:dc:bf:1b:17:25:94:ad:e9:2f:5f:f6:
52:51:e4:db:7a:eb:a6:01:86:4f:8e:42:a8:a5:67:
9a:5a:37:af:6f:dc:80:bd:43:3a:b6:bd:5b:0d:33:
d7:32:48:56:16:cd:7d:e6:9b:5a:83:a8:b1:03:8e:
22:da:bf:f0:1a:bb:ed:a0:5d:cd:e1:2e:01:e4:3b:
1e:d7:32:ac:62:28:ec:76:a3:e6:5b:74:08:a4:e8:
2a:ca:53:5e:c2:cf:7c:a8:cd:69:8b:e3:cd:9d:11:
f3:0c:51:ae:29:42:bd:9f:f4:bc:19:0f:fc:7d:ec:
d1:98:38:a5:11:f8:c0:71:c9:65:7c:a0:87:9d:49:
f7:73:71:01:61:4b:dc:b6:5d:f5:39:1a:f3:e2:be:
c7:0b:18:3a:66:ce:fa:8b:a4:80:3c:d4:bf:0a:49:
83:58:7b:82:c8:76:72:4d:09:96:ed:ee:a2:bd:6e:
9b:1c:17:05:54:17:4b:52:00:58:ba:06:22:de:e0:
a2:b0:4a:74:13:cc:a9:a6:38:d1:b5:d2:c0:63:f2:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:E7:D7:C6:26:09:E9:24:F7:A1:8F:FD:32:3E:E6:32:E3:2B:F2
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wb_n18YmCekk96GP_TI-5jLjK_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.16.0/24
93.126.30.0/24
93.126.55.0/24
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
90:2c:98:f2:52:68:34:3b:a2:89:f5:d4:fd:ec:a0:1a:20:eb:
a9:ab:c8:2c:e6:8e:87:44:0f:94:9f:1d:75:52:cd:c5:64:38:
90:9f:4a:4b:31:ff:ff:75:37:53:04:7d:bf:81:f4:9b:a2:a9:
61:8e:d8:8b:53:87:56:6c:7b:47:1b:3f:4e:74:d2:18:0d:61:
a7:f6:42:d5:b3:09:1e:0c:6b:d7:28:3e:39:ee:1e:22:ae:88:
96:04:eb:ba:8c:41:ef:62:e3:b6:d0:2e:fc:6c:ee:e8:ea:05:
ae:06:d3:6b:44:f2:a3:c1:d8:0f:ad:72:44:d6:f7:26:f5:38:
d2:dc:71:7b:64:ae:42:a0:ce:aa:7e:f6:1b:54:43:3b:b8:f7:
d4:44:b1:30:61:36:ab:fc:6c:6f:50:69:45:30:b6:79:16:3e:
74:a8:08:d8:14:65:87:c7:1b:d0:4e:54:cf:b1:ec:77:15:22:
e5:83:e7:24:24:1d:96:d4:fb:ed:7e:64:06:21:4a:9f:a2:5d:
10:fb:ab:3e:3c:88:1c:80:61:60:c3:22:c5:33:58:45:8c:de:
c7:ab:84:3c:2d:47:b2:12:a3:28:ee:d0:f9:a1:ac:0f:33:fc:
de:69:17:29:20:29:98:04:5b:38:57:91:91:35:7a:21:30:09:
4b:e8:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:50:16 2024 by rpki-client on console-fra.rpki-client.org