Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/wb3HN31Vi_WmSOBFsXcLY3AzU_4.roa
File: wb3HN31Vi_WmSOBFsXcLY3AzU_4.roa (raw, json)
Hash identifier: vy+DxnJPmtwxcVAIDikrUgSp0GtzbZ+VYzhwN3110ck=
Subject key identifier: C1:BD:C7:37:7D:55:8B:F5:A6:48:E0:45:B1:77:0B:63:70:33:53:FE
Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial: 018CC5002487AFA139AF584C46252E0F074F
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/wb3HN31Vi_WmSOBFsXcLY3AzU_4.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57752
IP address blocks: 91.236.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:24:87:af:a1:39:af:58:4c:46:25:2e:0f:07:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1bdc7377d558bf5a648e045b1770b63703353fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:5b:e6:17:f9:ab:2f:7d:a4:73:71:c5:2b:
b6:f8:87:f2:2d:77:99:9f:00:42:69:95:79:9a:76:
95:f9:98:04:82:42:aa:28:1a:39:a1:81:ca:8a:66:
a9:85:0f:9a:cc:e7:23:bc:f6:72:df:81:da:f7:2c:
2a:26:0e:11:5a:64:24:ac:d2:95:04:a3:31:42:52:
d7:75:c5:2a:a3:cc:5f:e8:52:11:2f:d9:96:8a:1d:
59:3f:2e:1d:a7:a4:9a:06:e9:08:e2:bc:30:46:39:
19:48:d6:4a:08:be:b2:d2:ca:7d:52:2b:2c:d6:17:
19:7b:66:00:6a:e3:04:a8:6a:0a:c7:13:35:96:d3:
24:03:a5:eb:d2:5a:d2:99:a4:7d:e5:40:99:9a:ed:
75:68:52:ec:49:03:eb:7c:b9:cb:0e:87:b6:3f:ae:
ed:2b:72:1e:06:3d:2c:77:92:5a:55:8a:99:e9:7e:
be:d0:54:74:2d:9d:cc:39:2d:61:7d:69:85:b5:59:
0d:e3:7f:c6:a7:df:df:67:48:77:e6:81:c2:c4:27:
2a:1a:36:95:87:f0:5f:65:e7:1f:86:a3:ee:96:1d:
20:74:b6:6f:f6:6a:a7:25:d4:cf:8f:d2:57:ca:61:
5a:9f:f5:78:df:47:a9:be:34:0d:ed:eb:b7:fd:67:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:C7:37:7D:55:8B:F5:A6:48:E0:45:B1:77:0B:63:70:33:53:FE
X509v3 Authority Key Identifier:
keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/wb3HN31Vi_WmSOBFsXcLY3AzU_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2e:8d:e8:2c:17:a4:ad:af:ad:fa:8f:95:12:5e:d7:6d:c0:
2f:4a:78:8d:82:af:2b:ed:3e:65:7c:bf:4b:23:76:82:1c:0e:
28:07:4d:70:ae:55:24:81:50:34:fc:e7:fd:7c:fb:10:46:ce:
d2:39:33:7c:7c:83:1c:cb:c6:64:08:9f:3b:e0:02:69:77:a7:
f7:d4:27:7d:71:58:7d:80:af:cb:7a:d0:10:67:f1:81:b1:da:
31:29:92:2e:ee:cb:95:fb:2f:cf:6e:75:cb:a2:89:1b:a1:d6:
e5:ed:a4:b8:55:26:6c:4c:5d:00:d4:7d:65:17:60:7c:d8:da:
c3:2a:fd:b0:b8:e8:21:3c:4a:23:dc:1f:6f:9c:b1:29:46:ec:
ec:ca:27:36:1a:6a:32:31:51:d7:fd:8a:7a:5f:46:d6:8d:c6:
de:a9:95:d9:40:27:b6:90:14:8c:f5:0e:af:81:51:28:71:41:
27:c5:b5:58:57:58:f1:fd:37:ff:6e:ea:7a:96:6a:1d:9a:e4:
a0:de:df:ad:ab:10:92:46:1d:da:83:53:99:df:7c:c5:bc:5a:
5e:23:9b:20:05:08:00:bf:56:19:bc:5a:3b:6d:e7:e3:f3:34:
c6:b2:a8:4f:6d:cf:2f:c2:4e:fb:77:a4:78:30:40:0d:9e:31:
55:0b:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:57:50 2024 by rpki-client on console-fra.rpki-client.org