Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Wzqa0TNzjVTHhNGdM0fB_JzAXtI.roa
File: Wzqa0TNzjVTHhNGdM0fB_JzAXtI.roa (raw, json)
Hash identifier: xUHRo/eTAWz4jqGp9jdSFZUrKVkC7UNjqQ0YD4rZ0f4=
Subject key identifier: 5B:3A:9A:D1:33:73:8D:54:C7:84:D1:9D:33:47:C1:FC:9C:C0:5E:D2
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 018CC726FD8EE713236EC70B69B761E76532
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Wzqa0TNzjVTHhNGdM0fB_JzAXtI.roa
Signing time: Mon 01 Jan 2024 22:31:10 +0000
ROA not before: Mon 01 Jan 2024 22:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212849
IP address blocks: 185.120.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fd:8e:e7:13:23:6e:c7:0b:69:b7:61:e7:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jan 1 22:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b3a9ad133738d54c784d19d3347c1fc9cc05ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:18:bf:ee:5a:f3:ae:42:ff:df:44:55:7e:
9f:d7:fb:9b:a9:f9:69:20:c7:7f:c5:a5:ba:af:8b:
50:70:af:c7:9f:80:3a:82:ca:12:0a:49:02:d0:b7:
12:b1:0a:73:4b:f5:22:dd:74:15:3c:7d:1d:d5:32:
c7:d4:12:91:cb:bf:7c:c4:54:77:e1:f6:49:b2:bd:
29:09:98:8d:42:3c:09:46:1b:b5:88:08:06:ca:a0:
84:6c:3a:a7:bd:94:bb:db:07:f0:34:33:6a:5f:d8:
6a:d3:59:95:ce:bf:de:50:89:cc:df:0e:f9:ce:11:
ca:9b:4a:ca:9a:f0:e5:84:7d:3f:72:2f:0c:00:3f:
03:47:e2:56:2a:61:c7:07:3a:ac:36:97:a7:c3:8b:
da:ca:62:d2:7b:ad:b1:aa:ad:e6:12:f2:29:2a:28:
28:98:4b:46:80:64:80:ec:2a:9f:fa:1e:34:d2:3e:
f4:2d:9f:81:99:42:dd:96:ec:49:82:a0:13:da:0b:
f0:4e:a0:39:47:c9:e8:0b:d7:96:af:61:97:22:b9:
be:21:29:9d:59:26:aa:93:fa:95:e2:a2:cc:b3:71:
97:f2:38:fd:a7:fd:88:79:06:25:c8:07:00:8c:8e:
32:5c:7d:d5:af:80:b5:38:fd:e7:33:a5:f9:50:15:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:9A:D1:33:73:8D:54:C7:84:D1:9D:33:47:C1:FC:9C:C0:5E:D2
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Wzqa0TNzjVTHhNGdM0fB_JzAXtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9b:a1:cf:7a:f6:ce:75:34:8b:da:81:39:f3:58:02:4c:f1:
6e:5f:54:82:03:6e:a3:83:a1:7e:4b:43:a0:4b:f8:7b:c7:4c:
fd:3d:90:b5:6e:67:cd:e5:bf:20:74:b0:03:29:c5:83:00:eb:
01:ca:ca:27:17:51:5c:57:54:45:ff:a3:6b:8a:b6:3b:52:70:
21:26:b3:34:cd:ba:82:21:89:8e:43:c2:a2:80:ff:f5:fb:fd:
7e:6c:fd:3f:36:6d:db:cb:05:4c:d8:48:f3:f0:26:ec:3d:b7:
20:a7:ee:ec:51:99:65:89:29:51:27:7f:9c:5e:b7:17:10:31:
3d:f5:5b:38:3d:08:2a:1d:72:9d:e6:8a:b7:54:53:48:82:af:
9d:22:38:fe:4d:14:40:d3:4e:68:2c:1d:4a:c0:fb:44:4a:e9:
78:b9:64:e9:df:43:af:7f:ab:5e:bf:0a:b9:b4:51:87:c6:9d:
64:d9:8f:9b:12:43:99:ef:be:40:11:80:f2:d4:4c:a4:37:22:
12:53:33:5c:a9:a4:10:4b:48:19:01:72:5d:00:b6:94:88:14:
59:13:82:cf:67:34:e5:7e:3e:72:cb:a1:08:90:26:7f:93:1c:
f4:3f:a9:25:f3:77:31:83:8f:81:10:54:b8:72:b6:9d:9e:23:
b5:56:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:10:49 2024 by rpki-client on console-fra.rpki-client.org