Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/wYxCzHRisC8x4B929ySHrRxI2oE.roa
File: wYxCzHRisC8x4B929ySHrRxI2oE.roa (raw, json)
Hash identifier: C7jyV9c3XWkBNL3FzjOkr1v70IgVE40pdV1JDIdpJzM=
Subject key identifier: C1:8C:42:CC:74:62:B0:2F:31:E0:1F:76:F7:24:87:AD:1C:48:DA:81
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 018CC2DABEE5562103E5B50A1960E536C394
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/wYxCzHRisC8x4B929ySHrRxI2oE.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 149.236.0.0/17 maxlen: 17
149.236.9.0/24 maxlen: 24
149.236.0.0/16 maxlen: 16
149.236.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:e5:56:21:03:e5:b5:0a:19:60:e5:36:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18c42cc7462b02f31e01f76f72487ad1c48da81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:80:b5:cd:95:60:2e:e7:12:34:94:49:ed:
0d:75:b4:64:fd:c4:73:50:0b:d1:ed:ea:8b:89:84:
be:7e:e1:5c:c7:d1:41:08:08:c0:ef:1b:34:a7:1c:
a8:9c:bf:23:11:02:94:ed:cc:e5:c9:f2:76:4a:2b:
1a:c8:bc:11:1d:d3:ec:ef:fd:2a:38:ce:6e:99:45:
78:2d:c2:8d:8b:1c:f7:04:98:aa:1b:f9:41:2e:5e:
4e:db:67:7a:e5:48:78:b9:66:8c:1b:b2:de:b1:6f:
0c:9c:b0:f7:b9:78:cc:08:1f:47:11:2a:e1:61:7e:
ee:82:e3:5b:b2:27:e7:71:21:29:2f:53:cc:4b:fa:
d4:72:bf:d5:21:18:5c:26:07:ea:d0:8f:66:ec:78:
cb:84:fa:e0:5b:c4:00:ab:d4:93:98:92:b4:1e:64:
da:24:90:48:56:db:51:31:9f:4e:18:b0:b8:b4:f6:
ed:de:90:e6:e6:85:7d:8b:83:36:b8:87:6f:ec:e5:
b4:5e:a4:19:77:df:d1:89:9d:ed:c7:9b:ad:8d:86:
35:33:1f:1a:2b:8a:74:c4:e4:0d:fc:7d:ef:fc:f4:
f8:49:60:b2:fe:c6:0b:2f:f7:63:56:ea:9d:c5:4a:
93:2f:8f:3a:eb:34:2d:32:e5:23:e9:a0:92:ce:a1:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:42:CC:74:62:B0:2F:31:E0:1F:76:F7:24:87:AD:1C:48:DA:81
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/wYxCzHRisC8x4B929ySHrRxI2oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:84:4a:f3:52:dd:c6:2b:16:69:5e:00:c5:bc:bf:32:4a:87:
e2:8b:14:7e:e1:1b:cb:ee:3a:8e:85:30:8c:a1:44:6c:ae:f4:
19:21:f7:65:2b:99:ec:0f:02:29:f2:40:6c:08:02:48:3c:ea:
86:5c:82:e6:62:45:3e:1b:36:5b:07:77:8d:0b:51:35:8c:9b:
88:20:fe:97:47:56:6c:fc:73:a2:c9:d8:6d:f9:28:4d:b4:93:
80:00:87:b1:fb:87:48:63:ad:72:f7:dd:88:dd:f2:86:d7:b0:
53:ff:81:43:fc:8b:bf:75:29:44:5f:20:39:50:aa:84:ee:c4:
73:19:e4:77:14:1c:71:0a:4c:3a:13:9d:be:8f:fc:56:7e:2f:
78:0e:ea:03:ff:30:47:bc:d1:8d:b7:66:0a:61:b6:9b:8e:38:
3f:a9:11:a6:65:e7:49:55:e2:19:11:fb:f0:2a:c3:57:84:84:
df:8a:60:17:ae:ab:49:50:7d:5c:42:fc:d1:75:f7:8e:c1:7f:
52:81:6f:22:6e:58:2f:18:fb:65:f5:1b:dd:68:14:a5:15:7b:
e6:75:cb:af:3f:8a:0f:e8:47:6d:5a:04:9c:f8:80:32:b9:f4:
d4:34:da:dd:74:15:23:03:9d:78:00:b7:a0:eb:7e:1b:c7:17:
1b:4e:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:28 2024 by rpki-client on console-ams.rpki-client.org