Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WeO6eOAoehKboYH89gKliL8BTGk.roa
File: WeO6eOAoehKboYH89gKliL8BTGk.roa (raw, json)
Hash identifier: tvqXHpH1oGXVuqRsbyO5jvANHqqkZ/ayIlUi1aZRTNY=
Subject key identifier: 59:E3:BA:78:E0:28:7A:12:9B:A1:81:FC:F6:02:A5:88:BF:01:4C:69
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500B2DEBB72045F830B4A68C0F0F14A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WeO6eOAoehKboYH89gKliL8BTGk.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139648
IP address blocks: 95.214.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b2:de:bb:72:04:5f:83:0b:4a:68:c0:f0:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e3ba78e0287a129ba181fcf602a588bf014c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:3f:cc:af:c7:3a:b3:c4:54:e6:a7:2a:e9:
d0:97:7b:7a:54:0d:c7:54:58:6c:d7:a6:e1:0b:eb:
cd:44:bd:42:14:a5:6d:0a:74:f0:8a:a7:05:67:fe:
f8:33:5e:52:08:65:a1:4c:d0:b5:67:46:e7:a0:db:
c2:d3:d2:17:35:c0:f1:74:5b:76:c8:de:0e:6d:4f:
6b:2f:86:58:0b:a7:4f:20:be:76:fa:0f:cf:79:c4:
ae:fa:12:d5:1f:1d:fb:e9:b2:e7:d6:77:7d:24:9e:
13:93:00:b3:df:8e:ed:84:19:af:fb:01:40:70:32:
48:c1:e2:c9:55:1b:0b:ee:0f:0f:42:2b:0c:76:10:
8c:e2:c4:3d:74:ee:e3:c5:8b:1a:c3:5c:30:b1:e7:
52:50:f6:7d:75:5f:50:0a:4d:35:bd:4f:f3:fe:77:
22:98:64:6e:fc:1c:12:5e:65:24:a3:e8:ff:dd:07:
3d:fc:cc:51:4e:9f:b1:e8:8a:5f:26:a4:ba:32:14:
d6:38:d0:29:1e:da:f7:f0:c6:7b:4f:cb:c7:d1:49:
24:93:b9:32:a7:f9:58:87:52:37:c1:b5:bc:ad:37:
e1:0e:41:2c:be:7a:a2:97:44:91:6f:93:ac:e9:73:
92:1b:4f:8d:50:1a:34:a5:6c:b1:6c:29:f2:4f:09:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:BA:78:E0:28:7A:12:9B:A1:81:FC:F6:02:A5:88:BF:01:4C:69
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WeO6eOAoehKboYH89gKliL8BTGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.178.0/23
Signature Algorithm: sha256WithRSAEncryption
af:90:b8:a9:ff:ec:c3:5c:ba:3d:e8:be:af:1e:18:e8:ba:e0:
88:8c:5f:ca:38:f0:e8:0f:73:29:c4:02:b5:e8:39:cc:23:69:
56:8b:6c:0c:21:df:83:f3:f8:12:01:bc:8c:0c:9c:66:2b:b3:
47:1d:4c:75:50:17:a1:92:db:18:55:a2:10:3c:90:ec:15:b2:
29:cb:e5:74:71:50:94:7a:df:ab:27:8d:0c:70:19:15:ac:41:
06:87:c5:ed:18:12:59:d8:c3:cc:45:4c:dc:64:55:e4:0b:7c:
7b:1b:80:6a:fc:08:91:46:ff:73:47:1e:e4:9b:39:74:b8:16:
9c:c0:1a:4b:9b:32:c3:3a:cc:5e:0f:f2:c5:4f:96:c6:74:09:
1b:09:d9:fc:a1:84:0f:5c:5e:fe:38:05:22:e2:b0:cb:24:71:
36:58:2d:d7:27:3c:e2:95:17:7e:3f:bc:46:a5:69:18:bc:fe:
98:69:5d:5b:3e:b0:96:50:92:15:0b:69:f8:e9:05:b2:5b:53:
87:0f:45:93:af:80:67:16:f2:70:5a:e4:ee:52:c5:7b:21:aa:
35:90:c6:17:90:19:50:03:06:ed:d3:29:e4:1a:57:b7:7b:de:
bb:e6:b8:51:70:48:8d:f1:26:04:1b:95:b8:4a:0f:2c:2e:48:
72:ba:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:26:58 2024 by rpki-client on console-ams.rpki-client.org