Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/WCdk-7sk4Vr_ewQEt3sB5GPErRw.roa
File: WCdk-7sk4Vr_ewQEt3sB5GPErRw.roa (raw, json)
Hash identifier: e1PSftINUGEG8ingWZnN85IoFw9gxagSidbbKnno+2M=
Subject key identifier: 58:27:64:FB:BB:24:E1:5A:FF:7B:04:04:B7:7B:01:E4:63:C4:AD:1C
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 01924741D1568EFE165A258F38BA5CD8978C
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/WCdk-7sk4Vr_ewQEt3sB5GPErRw.roa
Signing time: Tue 01 Oct 2024 08:45:48 +0000
ROA not before: Tue 01 Oct 2024 08:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214103
IP address blocks: 185.177.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:41:d1:56:8e:fe:16:5a:25:8f:38:ba:5c:d8:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Oct 1 08:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=582764fbbb24e15aff7b0404b77b01e463c4ad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:07:4a:6a:4d:3e:1f:4c:81:11:33:30:df:d4:
ce:7e:4e:da:02:e7:4c:1f:92:e8:2d:05:a0:0c:31:
62:55:c7:55:f4:66:65:27:63:d7:e9:aa:e1:6b:16:
ef:9d:ac:a9:f7:d5:87:6c:6c:b4:d8:11:bf:d3:fe:
30:08:42:1b:8c:29:b7:c1:b1:dd:17:e5:cc:71:e4:
54:79:b6:07:f8:d4:c8:27:16:8c:be:ee:10:09:fa:
77:01:bf:0a:e6:25:01:02:5f:1f:46:71:df:5c:38:
ed:f2:b5:90:4a:41:17:ca:6b:55:da:b5:b0:8e:6f:
5f:d8:38:43:26:3e:59:27:e2:3f:75:9c:58:85:4d:
bd:bf:ab:1e:82:80:78:1a:a0:cb:34:d8:a1:ca:94:
d3:aa:81:d5:9d:79:c9:f0:25:d0:9c:73:fd:8c:9b:
d1:c3:26:e1:c1:13:e8:b1:2a:d9:0c:79:7d:66:fc:
f3:52:1c:13:80:91:e2:63:03:d2:3a:44:c4:eb:6a:
b1:03:5a:eb:51:c4:43:25:bb:84:d5:f2:e2:d2:fa:
6a:82:0b:e0:50:da:6b:f1:f9:42:e5:91:1e:08:ce:
2a:29:ca:a7:ce:6e:6b:c1:ba:26:7f:8e:c8:f7:18:
5c:27:e3:65:17:61:84:68:02:ca:09:2b:fc:42:94:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:64:FB:BB:24:E1:5A:FF:7B:04:04:B7:7B:01:E4:63:C4:AD:1C
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/WCdk-7sk4Vr_ewQEt3sB5GPErRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.43.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8f:78:55:a5:cb:5d:24:ac:9e:9e:0a:c7:d7:d2:de:b1:22:
08:c8:4d:67:79:99:4a:17:b6:bd:7d:21:59:78:2b:c4:50:2b:
f5:3c:62:dc:21:35:3f:fd:65:77:33:b8:aa:2c:46:40:5b:a5:
ef:14:95:cf:b2:20:99:66:68:93:86:3c:1f:ff:fc:6b:0b:2e:
4a:cf:f3:1f:e8:7e:07:23:76:d4:77:c6:17:75:98:99:af:dc:
ed:88:a5:c4:ce:65:6a:38:06:e8:86:91:97:34:00:e3:56:a1:
83:69:d0:59:0e:9a:5f:66:c5:5f:30:65:a8:83:b1:a5:fa:00:
88:9a:68:f7:d5:fa:c7:8b:c9:2d:5b:c8:9d:6c:0e:90:e3:ac:
f3:68:e1:b5:0c:bf:68:34:ce:b7:57:56:58:f9:ff:b9:ab:90:
d8:ae:a5:e8:20:84:e8:85:b3:a4:ee:e6:b1:d5:98:37:8a:b7:
c8:e7:8e:c6:2a:df:c0:57:5f:de:bf:78:1e:6f:84:6b:a9:21:
43:e1:a5:54:35:d7:b6:da:02:ba:db:94:8b:fc:1c:5f:54:21:
e4:28:ed:a7:56:a7:d2:eb:e6:a4:5c:40:5c:4c:bd:81:53:91:
53:a2:90:b7:72:2f:ee:17:06:67:aa:50:88:14:e4:c0:b9:f2:
38:6f:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:33:35 2024 by rpki-client on console-ams.rpki-client.org