Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Wxw6s7VkRYd_wAFW2p_ZY7dfZM8.roa
File: Wxw6s7VkRYd_wAFW2p_ZY7dfZM8.roa (raw, json)
Hash identifier: 5+GxroIx/ZRgRVb4ds6A79ncg8Uw2jjzflh2OLc+BUI=
Subject key identifier: 5B:1C:3A:B3:B5:64:45:87:7F:C0:01:56:DA:9F:D9:63:B7:5F:64:CF
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 018CC64B008D9A29DEA697A1E56E32458777
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Wxw6s7VkRYd_wAFW2p_ZY7dfZM8.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1257
IP address blocks: 193.241.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:00:8d:9a:29:de:a6:97:a1:e5:6e:32:45:87:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1c3ab3b56445877fc00156da9fd963b75f64cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:d7:65:1c:e0:f3:82:a9:7d:18:6a:0f:98:
2d:a3:b0:c1:f8:f0:87:2f:57:0b:38:c2:04:12:39:
eb:1d:6c:83:7b:d4:54:9d:41:f2:d2:33:96:49:4f:
93:c8:1a:31:57:27:94:7e:3a:dd:73:ea:3f:94:28:
a8:c4:7c:51:94:af:3f:93:15:6b:ff:af:b8:6e:55:
23:b0:51:c2:f1:15:7b:71:ec:89:a9:4a:a2:21:6f:
ca:0a:59:4c:10:d6:2f:20:9a:7f:6c:0c:9d:fa:72:
74:f3:69:9e:da:27:45:ae:aa:8f:2d:0b:65:5f:7a:
23:8b:10:33:be:31:17:a9:f7:17:0d:5d:81:61:94:
53:3f:de:92:bc:74:95:6c:d4:34:33:58:99:e0:4b:
62:e5:5b:c1:38:06:35:1b:5d:90:14:fd:79:24:66:
d0:50:bd:81:84:8e:5d:cf:5c:a8:cb:b7:0c:d3:f8:
5c:ae:a5:b8:59:13:15:e6:f0:a7:87:18:d9:5b:c6:
50:eb:92:66:49:fa:6e:7a:74:34:82:7f:71:0e:51:
96:9a:38:67:de:13:3d:e6:ab:73:ee:00:5e:1c:c0:
38:41:67:25:1b:75:53:91:73:61:57:23:3c:f1:b1:
7b:2f:e1:d8:40:b1:f9:3e:48:94:02:c0:35:e8:73:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:3A:B3:B5:64:45:87:7F:C0:01:56:DA:9F:D9:63:B7:5F:64:CF
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/Wxw6s7VkRYd_wAFW2p_ZY7dfZM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.250.0/24
Signature Algorithm: sha256WithRSAEncryption
54:54:f9:72:75:3e:78:93:fb:de:bb:bf:90:af:7c:2e:15:8c:
34:40:13:92:03:95:67:eb:b7:13:70:60:05:37:2a:20:6d:4a:
7d:8d:e9:d9:96:b7:ce:1f:87:28:e7:4f:5d:f0:6b:1e:36:e6:
59:7a:bc:a4:e9:53:39:f3:ee:a2:64:d9:7e:1a:9a:0c:d6:ec:
9a:80:9f:fc:b7:e4:de:43:62:b2:0c:54:19:24:35:d1:9c:d5:
9f:90:b0:16:58:d0:1e:29:f5:80:38:3f:87:44:97:38:d2:aa:
f5:d9:cf:8a:4f:eb:60:b8:e1:6c:81:c7:76:04:7d:ef:fa:fd:
7f:3f:da:24:f7:08:9c:a7:e0:77:dc:fc:65:65:55:45:fb:24:
75:98:82:c0:11:1c:0f:03:7d:56:0c:81:77:1e:37:2d:10:22:
7b:e7:c5:b1:f4:64:7b:00:c9:bc:81:41:d3:51:fc:17:bc:be:
55:6f:5b:22:d8:d6:1f:74:4c:3f:84:55:96:47:6a:8c:93:f3:
94:32:81:80:4a:4b:a4:6b:6e:4d:15:f6:57:a3:53:be:53:ad:
ac:5a:e0:c5:07:3b:ee:d7:36:1c:af:7a:31:3d:d7:89:9c:54:
0e:f3:72:d3:34:00:2c:52:8a:ba:24:a0:a1:26:67:d0:22:ca:
23:04:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:58:33 2024 by rpki-client on console-fra.rpki-client.org