Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/tWnzTgN78MkT6UQ8bC3_WWVNP50.roa
File: tWnzTgN78MkT6UQ8bC3_WWVNP50.roa (raw, json)
Hash identifier: MUi3UNJGMi1/BtpMNRayTg71MMYErKBO4rtZ8k6DRto=
Subject key identifier: B5:69:F3:4E:03:7B:F0:C9:13:E9:44:3C:6C:2D:FF:59:65:4D:3F:9D
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 01916BEB377E8CB972823E53B3BC909E2C88
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/tWnzTgN78MkT6UQ8bC3_WWVNP50.roa
Signing time: Mon 19 Aug 2024 18:34:22 +0000
ROA not before: Mon 19 Aug 2024 18:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51395
IP address blocks: 185.237.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:eb:37:7e:8c:b9:72:82:3e:53:b3:bc:90:9e:2c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Aug 19 18:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b569f34e037bf0c913e9443c6c2dff59654d3f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:3c:3f:61:98:64:40:8d:a6:20:df:29:de:
79:4e:c8:a5:b6:9d:88:be:4d:82:f1:6b:6a:cf:6e:
3a:bf:7e:fe:5c:65:f2:38:99:cc:80:4c:53:2d:61:
c4:67:ee:ca:20:26:af:5c:df:da:5c:ef:71:f3:79:
30:41:07:5e:dd:8d:04:f9:b1:0f:66:39:a4:40:e4:
16:40:0f:e3:dc:dc:8e:a3:03:07:7e:6a:50:b0:f9:
57:59:12:9a:29:86:f5:0b:ee:7e:77:6f:2e:c0:ca:
d4:48:74:67:1e:8d:e9:74:5b:bb:3b:f6:96:dc:a5:
11:cd:1c:2e:50:e0:d6:3e:a4:57:ba:51:40:b5:e9:
0f:2e:f9:96:87:4d:83:8f:01:45:ed:b8:1c:b7:f8:
9e:c7:61:c8:71:7a:15:5a:f7:67:f5:24:bf:1e:da:
0d:d1:18:7c:9c:5a:0c:b9:33:71:17:c0:b5:3b:98:
9b:a2:bb:0b:8a:79:f6:66:c1:4b:ae:dc:da:db:35:
6c:eb:c8:90:ea:12:70:a3:09:fb:7b:d6:7b:41:00:
43:ff:3f:27:df:08:f0:cf:a9:f2:db:22:0f:c6:c1:
cb:64:2f:7e:28:78:05:28:d3:4c:98:0f:00:8e:e8:
89:72:04:a6:82:56:af:37:2c:f9:74:7e:45:c5:89:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:F3:4E:03:7B:F0:C9:13:E9:44:3C:6C:2D:FF:59:65:4D:3F:9D
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/tWnzTgN78MkT6UQ8bC3_WWVNP50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.100.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c6:de:db:6e:90:4e:47:95:c9:e7:90:44:93:0b:0b:ae:15:
5e:3f:ef:c5:b5:fc:94:94:7f:8d:86:09:37:4a:d4:7f:20:4d:
62:97:90:03:1f:74:84:46:2c:1e:ab:24:2b:ff:04:fc:8c:4f:
0a:ce:99:4a:1a:98:06:b4:86:00:ac:6a:0e:af:bd:28:d0:8c:
ef:85:f2:f2:1c:68:b6:86:bc:93:8a:c9:5a:57:f7:3d:47:82:
97:78:94:3b:0c:90:be:90:5d:d5:5c:bd:32:f3:09:fd:32:05:
f9:cb:30:49:22:47:35:59:9a:e1:c8:c4:a2:c4:f2:82:b9:3e:
d5:b7:63:bf:21:c8:e7:53:d7:e8:8e:2a:12:fe:ac:c7:c3:35:
ba:e1:29:d1:85:ba:8b:ba:34:16:43:4a:ff:31:e6:7c:e0:43:
80:9c:68:81:c6:2a:cd:b5:7e:24:d7:80:0c:d3:27:03:64:97:
8b:c3:2e:69:94:9e:de:24:2b:a3:59:a6:89:67:f1:4d:40:0c:
27:92:9a:4c:21:7d:c6:18:fa:c3:ec:de:e8:ba:f6:e4:ae:17:
0a:3d:12:d7:f4:85:d9:1b:90:07:35:1a:c8:54:58:ec:b4:1d:
18:f8:78:04:f6:8f:7a:32:36:58:0b:73:c2:03:f1:20:08:3a:
aa:a6:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:56 2024 by rpki-client on console-ams.rpki-client.org