Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WROlWVfrC6TIB_xRPJ_E-F6rMJQ.roa
File: WROlWVfrC6TIB_xRPJ_E-F6rMJQ.roa (raw, json)
Hash identifier: 7iFPXqK3UR2q1Ay4f2fMHp0snC9bh38fb4x/9lXiQJ8=
Subject key identifier: 59:13:A5:59:57:EB:0B:A4:C8:07:FC:51:3C:9F:C4:F8:5E:AB:30:94
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018CC5DC8769059C55EC22EB86C3F7F06828
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WROlWVfrC6TIB_xRPJ_E-F6rMJQ.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33185
IP address blocks: 147.189.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:87:69:05:9c:55:ec:22:eb:86:c3:f7:f0:68:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5913a55957eb0ba4c807fc513c9fc4f85eab3094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:f6:65:be:5e:c4:06:4c:aa:20:0e:73:ad:
ec:bd:1f:95:2d:a0:a2:64:39:40:a0:2d:61:4c:91:
22:99:0a:77:1e:19:bb:2b:c8:a1:f8:b4:58:d6:15:
7f:3d:0e:c1:d4:0f:56:9e:73:25:c3:0b:89:ea:7d:
8e:29:d6:19:1f:30:ce:7e:54:b3:9c:70:0d:2f:6a:
b8:67:8a:21:53:c6:af:db:63:ce:11:a0:eb:9f:31:
9e:23:5f:6f:09:11:74:ed:db:54:41:04:39:af:e0:
15:ae:8b:dd:12:5a:43:c5:e5:21:13:38:8f:65:01:
19:f1:5f:92:1e:25:c1:f2:52:81:a2:7d:dd:b6:c0:
cd:b7:3c:6c:62:7c:e5:b5:01:f7:b0:04:d3:80:6f:
86:3a:6f:2b:73:d7:15:9c:72:ad:75:16:fd:47:9e:
7e:24:c7:91:2f:66:ca:7c:80:b5:29:7e:ac:21:65:
09:62:2e:59:d2:5d:c2:22:75:64:7d:a4:16:4e:f5:
05:ab:34:57:46:80:70:f0:73:07:69:8e:8e:4a:1e:
db:32:46:02:f6:21:4a:21:38:d3:b4:83:0a:60:48:
b1:81:75:88:8d:d0:e9:05:81:78:d6:a5:65:e6:ad:
03:c9:0d:fe:b1:d0:b0:a7:1c:7e:7c:06:c7:00:b9:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:A5:59:57:EB:0B:A4:C8:07:FC:51:3C:9F:C4:F8:5E:AB:30:94
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WROlWVfrC6TIB_xRPJ_E-F6rMJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:49:43:12:fb:b2:68:dd:26:c4:44:d3:ce:9c:ac:65:11:d3:
33:a2:f0:6b:3b:be:a0:c6:c0:d4:96:bf:0f:31:a4:75:0f:a9:
89:58:9d:aa:e7:8a:39:66:f5:d7:d3:42:d7:c9:db:bb:31:4d:
6f:84:bb:9c:ca:62:10:66:b1:c5:3e:e4:1c:f9:1d:ec:ab:ca:
41:6c:eb:f9:91:8e:a1:4c:74:73:79:96:f7:56:65:53:15:8e:
b1:8d:08:e7:e3:86:b3:ac:90:0c:1f:54:07:df:ac:6a:ed:0e:
a2:d7:2f:81:48:4f:c4:74:63:fe:3c:03:9f:28:e8:fd:e4:32:
89:d0:b1:cf:d8:b5:eb:1f:3d:4b:43:32:a5:74:5f:eb:48:3f:
c6:63:8b:ef:6a:76:b9:f0:46:45:1b:47:60:d1:39:52:e7:68:
2d:d7:25:95:64:51:f5:69:28:48:b4:9c:19:af:fd:17:ff:4a:
8d:5c:87:00:4c:19:90:05:c7:a3:99:e6:e1:51:a2:a6:08:ee:
a4:78:31:7d:e3:db:ff:32:3d:76:06:e0:0f:7b:b8:bc:70:76:
fa:2e:2d:79:d3:cc:eb:e3:1c:dd:a8:b1:b4:56:a4:04:01:25:
50:53:4f:86:50:0e:6f:4b:7c:f5:a2:72:3c:2f:86:a3:2d:65:
0f:8b:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:25:34 2024 by rpki-client on console-ams.rpki-client.org