Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wvyPvAKuwc-ET04gJXDvs4UeTP0.roa
File: wvyPvAKuwc-ET04gJXDvs4UeTP0.roa (raw, json)
Hash identifier: PObyliJf5xS576pVGMB70hrJjon0XWBBON131Hwz3HE=
Subject key identifier: C2:FC:8F:BC:02:AE:C1:CF:84:4F:4E:20:25:70:EF:B3:85:1E:4C:FD
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8A6C2C71FFB311C67C0396839526
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wvyPvAKuwc-ET04gJXDvs4UeTP0.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210948
IP address blocks: 185.65.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8a:6c:2c:71:ff:b3:11:c6:7c:03:96:83:95:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2fc8fbc02aec1cf844f4e202570efb3851e4cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:ad:ed:79:a9:2c:81:52:28:50:af:b5:06:
80:a5:5b:f4:72:7d:80:e4:35:a0:f0:9c:56:e9:fd:
9a:78:b3:cf:ee:bd:3a:57:bb:8e:cc:63:f4:cd:68:
7d:84:3a:4c:c0:23:48:eb:2d:d2:97:9f:21:2c:90:
10:bc:c7:ae:8a:63:df:a5:23:9a:d4:36:14:5d:de:
dc:b2:10:78:d2:cf:87:bf:9f:eb:08:f2:96:36:da:
90:c3:d2:b9:a6:a9:67:9e:cb:42:12:c5:4f:11:c5:
84:b4:28:b2:b2:9a:34:12:f8:4b:0d:25:0d:d5:01:
0c:c9:90:dc:f2:b4:0e:5c:87:5f:c2:19:72:d5:d9:
9a:09:34:da:f0:52:a2:da:01:a8:00:50:fb:52:e3:
95:54:07:ac:b7:76:00:73:4d:a7:40:dc:9d:9f:26:
eb:04:b4:a6:1e:16:5e:0b:a4:f0:d0:4d:06:be:c0:
9b:78:ab:fe:e4:94:45:7c:0c:22:f3:94:a9:ba:a3:
73:17:2c:46:bd:f1:f0:7f:f9:24:f7:ad:cf:08:58:
f5:9f:bb:8a:a3:8f:44:17:65:dc:e1:23:24:f2:37:
06:fc:ad:d5:51:45:55:09:07:1f:a6:6c:85:bc:73:
cc:dc:c5:99:1b:67:8a:09:c8:80:32:ec:32:26:19:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:8F:BC:02:AE:C1:CF:84:4F:4E:20:25:70:EF:B3:85:1E:4C:FD
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wvyPvAKuwc-ET04gJXDvs4UeTP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:70:2b:0e:d6:ab:92:eb:6b:11:6a:9a:12:5f:0b:d6:ba:7d:
3e:42:49:50:04:7a:a3:4c:3f:84:83:ac:f3:c3:16:28:46:18:
68:3a:36:9b:5a:45:0b:48:aa:ec:65:ef:85:71:1d:81:7d:c2:
95:8e:e2:ab:fd:82:9b:34:36:bc:a1:0b:d8:90:7e:fd:dc:e6:
a7:a1:15:b5:96:cc:43:49:72:e9:84:e8:72:f6:92:0f:23:76:
5e:f4:83:de:b2:a0:bf:fe:83:2b:2b:a6:2f:88:61:dc:a5:18:
f6:18:54:f3:fb:22:16:49:74:b4:fb:08:b3:bd:b7:d6:fd:b3:
13:f1:07:8e:55:3f:b7:f0:b6:e4:e8:7d:de:c3:a0:ec:bd:0d:
0b:25:db:ed:41:61:9a:f2:17:cd:9d:0b:c0:bd:dc:75:15:24:
51:67:94:bd:7a:9f:2f:db:10:26:71:83:03:43:3d:06:92:bf:
c2:4e:1c:9e:8a:99:02:f6:f5:bf:01:55:39:38:68:84:84:26:
10:3b:25:f3:55:c2:14:f4:f4:e6:ed:f6:23:3d:39:5f:41:06:
91:c2:7d:55:7d:2f:5d:37:ed:d4:0a:3c:9b:30:6f:56:14:16:
eb:02:2c:ea:39:ae:a1:d9:ac:7f:ec:a0:62:74:ce:47:33:48:
bc:f8:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:06:22 2024 by rpki-client on console-fra.rpki-client.org