Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa
File: wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa (raw, json)
Hash identifier: saFKoBQJKoTjCE1VttiJGx/rV5j5vAfPADVNJLNG2CI=
Subject key identifier: C0:05:9D:4F:66:FE:32:8D:29:E3:77:87:D7:73:9C:F4:D6:FE:BD:72
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 018CC86F23AE84298F9AE320A1BB4FF61C3B
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa
Signing time: Tue 02 Jan 2024 04:29:35 +0000
ROA not before: Tue 02 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.193.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:23:ae:84:29:8f:9a:e3:20:a1:bb:4f:f6:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jan 2 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0059d4f66fe328d29e37787d7739cf4d6febd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:56:45:14:36:fa:ae:3d:40:66:03:e0:a9:17:
72:17:55:e7:01:e6:2e:4d:58:5c:89:fe:96:c3:e8:
57:d6:fa:7e:b7:16:58:5b:03:f0:aa:f7:f6:94:11:
12:e1:a6:4e:ee:ec:45:8a:09:9d:fe:93:8c:f2:d1:
31:ab:07:b6:1d:c1:5c:b9:ff:af:c5:ac:35:12:15:
53:e9:42:21:ec:04:b3:fc:9f:7a:73:c2:4b:8b:7c:
5e:ff:c0:f1:fb:bd:4b:04:7b:62:d9:f9:a3:02:6d:
67:27:01:b7:21:ae:28:2b:50:91:c4:68:45:16:30:
6d:e4:41:39:6b:7a:2d:6b:a3:22:42:63:d6:ed:11:
ac:ef:f8:9b:b7:71:33:9f:f1:8e:08:16:8f:51:40:
f9:13:d8:fc:be:b3:33:8b:b5:9d:12:5c:6f:87:39:
40:65:3a:4a:fb:5c:f5:e2:4f:5f:58:a1:93:51:be:
d5:86:fe:c4:0e:e0:ef:cb:6f:78:fd:a6:61:e8:4c:
f7:b8:ed:6a:67:cb:30:5d:29:0d:e3:9a:c4:14:82:
37:32:82:14:75:7f:aa:a6:53:08:1a:ca:2b:8c:84:
c4:d9:63:e7:47:e4:42:14:4e:32:1c:88:3c:b5:22:
1a:08:f7:0f:39:e8:19:3b:b1:32:0e:8d:87:9f:cb:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:9D:4F:66:FE:32:8D:29:E3:77:87:D7:73:9C:F4:D6:FE:BD:72
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/wAWdT2b-Mo0p43eH13Oc9Nb-vXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3f:dd:86:f9:ae:af:92:0c:3c:b8:30:59:db:b6:f9:ec:c2:
3e:70:16:a4:1c:42:7a:a1:09:b5:f7:27:2e:d5:30:d9:58:5f:
de:1b:a8:86:aa:27:2d:12:b0:c5:1c:19:6e:19:0d:42:fc:f2:
c3:56:37:68:b6:66:7b:3b:23:0a:2a:b5:04:f8:50:9b:84:0c:
a4:29:d9:9e:56:1f:72:a3:f5:4b:7b:b4:47:a6:40:be:2a:01:
c0:6e:75:f4:ee:fe:d9:47:2e:b5:f6:c0:27:8d:fd:14:79:f3:
4b:28:11:53:df:0b:c3:ac:90:29:e0:55:16:e9:72:b2:c6:f3:
c7:89:80:06:8e:a9:d5:d3:d6:64:50:77:c3:22:3a:03:d4:58:
4d:49:5f:65:fc:31:57:e5:70:84:f1:95:69:d9:60:1b:a6:81:
46:b0:e1:fd:ad:6f:14:a8:d3:5c:5c:fd:15:9a:c1:6b:80:6e:
f7:f1:3c:95:98:b0:44:4a:b8:62:93:b4:7d:13:5c:a2:57:98:
bc:05:14:91:6e:e5:5c:a0:02:a4:bf:63:18:56:ba:9f:b7:d1:
17:11:17:cf:24:83:de:85:59:ca:93:02:27:9a:fd:60:7c:33:
76:12:2f:33:3a:8c:c3:ed:59:d1:ac:88:2b:48:5f:69:e2:45:
36:58:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:51:01 2024 by rpki-client on console-ams.rpki-client.org