Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WIjVszIabskTifHD9TjKZn0p6R8.roa
File: WIjVszIabskTifHD9TjKZn0p6R8.roa (raw, json)
Hash identifier: 0+Sv/2UEC9O5YCCDXXqnE3lfIuZwEP3+m7lZ9eenJCA=
Subject key identifier: 58:88:D5:B3:32:1A:6E:C9:13:89:F1:C3:F5:38:CA:66:7D:29:E9:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018EAD2E9438A0E0F2FB20A9640420E91426
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WIjVszIabskTifHD9TjKZn0p6R8.roa
Signing time: Fri 05 Apr 2024 07:34:54 +0000
ROA not before: Fri 05 Apr 2024 07:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32002
IP address blocks: 185.165.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:2e:94:38:a0:e0:f2:fb:20:a9:64:04:20:e9:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 07:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5888d5b3321a6ec91389f1c3f538ca667d29e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:ff:7a:a7:7a:2c:d0:a1:ca:cf:db:83:7f:
c0:77:08:e9:91:40:31:6a:3e:ab:f4:d4:87:40:74:
ff:7c:45:75:a3:a7:3d:2d:45:01:c7:43:f5:73:3c:
81:b4:05:09:20:51:17:b0:e2:1b:a7:b0:78:cf:4b:
80:93:ff:3a:d7:30:37:a4:4b:27:41:7a:29:4e:65:
bf:ea:6b:e9:5d:eb:55:4f:54:fb:40:ec:34:68:57:
fd:65:75:3c:18:ec:13:f7:82:6b:14:10:34:9a:15:
4b:7f:33:53:fc:bd:26:73:4e:ab:eb:bd:28:51:f7:
51:ea:17:41:b8:41:18:dd:4c:26:77:56:bf:cb:7d:
f8:11:4f:d8:b8:48:8c:f0:94:d0:58:90:e8:2d:8c:
e2:49:42:58:07:9f:3d:b4:bb:75:7a:16:3b:f3:d2:
56:bc:3c:c0:40:9e:21:49:ea:46:ae:bc:27:91:66:
ad:62:8c:0f:6a:00:70:c3:05:4e:a1:0c:53:cc:54:
47:aa:8e:d2:21:7b:49:9f:e3:f4:63:92:1e:46:32:
e6:b4:3b:e3:e8:74:e4:b2:68:86:cc:0b:14:db:24:
8b:df:e8:82:3d:96:51:29:89:c9:fd:49:3c:ac:22:
b6:ef:da:2d:7a:68:e7:6a:1c:eb:cd:e0:0e:90:1d:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:D5:B3:32:1A:6E:C9:13:89:F1:C3:F5:38:CA:66:7D:29:E9:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WIjVszIabskTifHD9TjKZn0p6R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bb:8b:59:09:e6:71:64:b1:4e:99:69:3f:ce:64:56:5a:80:
27:78:cc:b9:b7:62:83:f3:19:ec:9e:aa:5f:24:81:ea:24:20:
af:29:11:61:e8:82:3b:ac:c3:0d:2c:97:44:f2:6e:aa:86:03:
0b:07:c3:bf:57:bc:28:34:79:87:ba:b2:1d:7d:1b:0c:14:ad:
9e:7b:59:91:95:d0:4b:78:58:b3:d0:b1:50:ae:8b:ed:08:b5:
06:42:8e:c5:0d:ee:55:c6:89:b3:05:cf:6c:cc:9f:c7:d4:19:
22:d5:0b:b5:5f:d8:0b:48:7a:27:ff:84:df:9c:00:a6:c0:c7:
85:ae:ad:35:1d:5b:97:70:9f:2d:00:11:90:1a:c7:28:ac:de:
c6:75:a1:11:76:95:86:49:2f:43:98:36:4e:a3:0e:bd:6e:80:
cc:46:a4:39:07:09:50:14:ca:d3:42:75:c2:29:1c:9b:55:cf:
73:0f:93:9f:e1:27:85:f4:42:98:7d:de:6b:bc:d1:53:90:03:
b8:a4:e0:b5:21:e0:df:37:fa:57:7c:55:66:19:33:11:20:4e:
f6:0d:a7:c6:ef:5b:f5:b0:f6:15:17:82:24:ce:bf:dc:92:af:
fc:a7:29:35:bf:a6:53:50:0f:da:00:82:06:18:0c:e8:9d:48:
2b:97:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:50 2024 by rpki-client on console-fra.rpki-client.org