Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/wQjET6DBDqvY5Q1WFkQod2lSqXc.roa
File: wQjET6DBDqvY5Q1WFkQod2lSqXc.roa (raw, json)
Hash identifier: LaWOEgSQltRCkm0aduWkL5ENY3aNnCeiAJQy0oHqW8A=
Subject key identifier: C1:08:C4:4F:A0:C1:0E:AB:D8:E5:0D:56:16:44:28:77:69:52:A9:77
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 018CC56EA7AFF3C2B06C52E3D18ACCC4A466
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/wQjET6DBDqvY5Q1WFkQod2lSqXc.roa
Signing time: Mon 01 Jan 2024 14:30:12 +0000
ROA not before: Mon 01 Jan 2024 14:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52075
IP address blocks: 193.30.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a7:af:f3:c2:b0:6c:52:e3:d1:8a:cc:c4:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c108c44fa0c10eabd8e50d56164428776952a977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:5f:82:88:2b:7a:c6:68:cf:04:17:60:35:
30:f5:62:69:80:c8:31:54:f2:ff:cc:a4:8c:7b:a4:
5f:32:bd:65:a5:b4:1c:b0:f9:b1:2f:37:75:5c:aa:
3b:a7:e4:e4:55:a3:99:7a:43:51:bc:cb:15:e9:ce:
b8:b8:f9:67:7f:c8:e8:f6:14:4f:76:93:c8:2d:07:
77:fb:26:8a:a4:12:d0:e1:4f:be:87:2f:ba:1b:5b:
f8:f8:7c:c7:2d:ea:d9:5f:df:b9:59:e8:77:1a:18:
61:52:ae:b8:62:25:e4:d4:45:e5:48:f6:5a:58:a8:
53:34:64:9a:99:22:5a:03:f9:da:57:e1:05:a8:ad:
6b:28:07:da:23:9c:14:08:a7:03:91:58:98:01:43:
db:98:ab:00:06:18:9e:6f:38:78:ee:20:ec:32:9e:
44:fe:59:2a:f9:76:93:d9:9d:17:1c:b0:4e:1a:d0:
46:70:52:38:ed:bc:6e:2d:31:ec:ed:95:88:61:92:
c5:4b:22:50:99:8a:95:58:62:5a:b3:05:ce:21:6f:
e4:40:16:ab:db:ce:04:a2:c7:c3:bf:36:78:7a:e2:
37:70:38:c9:34:7e:99:49:f5:9d:e2:b4:07:73:9a:
4f:d6:0c:95:cb:06:5c:08:84:44:86:72:68:6f:ec:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:C4:4F:A0:C1:0E:AB:D8:E5:0D:56:16:44:28:77:69:52:A9:77
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/wQjET6DBDqvY5Q1WFkQod2lSqXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ad:0a:0e:e4:ce:86:c0:b8:95:83:57:69:cc:30:36:74:c5:
60:9c:00:56:15:c2:eb:85:29:3d:d4:0d:eb:11:8a:95:06:97:
d2:66:e5:09:5f:f8:14:2a:d6:7d:74:f6:e5:f9:33:47:69:a5:
29:a4:88:95:e3:a3:78:e3:54:c2:c9:15:49:3f:b8:92:b9:7d:
f7:35:ec:c7:aa:bf:8f:6d:f9:20:b9:87:37:b7:b3:5e:42:f2:
8f:29:cc:8d:d7:3d:5c:2b:a5:0e:62:38:bb:a9:6f:66:ff:3f:
63:cf:6c:0d:97:27:69:75:71:44:5e:0d:fd:7e:f8:0c:36:15:
ad:cf:32:6e:18:5d:10:7f:91:40:f2:21:7c:6e:e7:c7:50:74:
e6:98:6b:56:1b:fb:a1:b8:52:b6:07:2e:2a:c7:fc:37:0b:97:
5b:50:46:6e:e2:c4:8c:69:1c:4f:27:01:cc:6c:a6:bc:29:87:
98:2d:c8:ed:e1:d8:d8:dc:41:f7:20:41:d0:2d:82:62:8d:a6:
b1:e7:70:2c:a7:b7:74:5c:ef:be:bc:56:bb:9f:75:ce:24:c7:
3c:42:95:80:0b:49:54:cd:72:20:b6:d0:cd:23:c4:ac:bc:3b:
74:ff:54:44:5c:a5:e2:1e:65:1d:dd:be:4c:dc:9e:6e:bc:30:
7b:f3:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:03 2024 by rpki-client on console-fra.rpki-client.org