Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa
File: wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa (raw, json)
Hash identifier: +/hnPOFf7hNwCCpdMJYdk1ev6cDqz6CkpB8jfLbmfR0=
Subject key identifier: C1:58:4D:A6:C1:4E:C5:44:0D:7B:CB:B1:4C:38:B8:87:7F:06:B3:D7
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 018CC49376435A673BB82C8E6A9B43DFA2BA
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 91.196.240.0/23 maxlen: 24
91.196.240.0/22 maxlen: 24
91.196.242.0/23 maxlen: 24
217.16.192.0/20 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.64.0/21 maxlen: 24
31.25.68.0/22 maxlen: 24
2a02:7720::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:43:5a:67:3b:b8:2c:8e:6a:9b:43:df:a2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1584da6c14ec5440d7bcbb14c38b8877f06b3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:14:0f:27:f9:cf:40:18:95:fe:5b:3c:59:
5e:f7:cf:a8:37:a5:15:8c:20:d6:d6:44:11:ca:c9:
52:9b:15:e7:18:c5:30:59:dc:db:a2:a8:a1:e9:0f:
07:00:cf:5c:3a:c2:1b:81:4e:e8:10:68:fc:75:47:
82:1b:cc:7c:f9:93:47:4b:39:7d:17:4d:84:f2:2d:
31:14:6d:27:89:18:ef:8d:68:04:cc:57:36:f1:b4:
6e:37:55:9b:32:b1:6f:07:cc:26:cd:55:25:6f:45:
c9:f6:48:ea:f3:15:53:48:3a:4a:ea:dc:e7:8e:c7:
98:c1:49:78:01:8b:0d:57:c0:00:a6:dc:12:bd:f7:
12:38:7f:a7:c5:09:01:99:fb:60:96:87:4d:12:c9:
a8:b1:f4:69:75:41:43:6e:36:9c:57:27:70:28:ce:
3e:ce:8b:1c:ab:c6:06:d3:b1:41:14:2d:32:f2:ee:
84:ff:59:50:1f:e6:e4:5d:96:56:82:28:b6:1b:63:
a0:0d:c6:cc:40:ec:b6:0a:d8:16:08:9d:c3:03:32:
30:43:9f:d2:c2:67:5b:56:06:6c:ab:91:e2:0d:77:
4c:e9:ef:4b:60:cb:62:8d:a5:9d:ec:74:c1:f1:6f:
0f:36:ed:5b:be:71:61:68:94:37:ca:3b:70:94:81:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:4D:A6:C1:4E:C5:44:0D:7B:CB:B1:4C:38:B8:87:7F:06:B3:D7
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/wVhNpsFOxUQNe8uxTDi4h38Gs9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
91.196.240.0/22
217.16.192.0/20
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
08:5b:d8:ad:b4:ef:f5:d6:23:65:a9:4a:1f:0d:29:fc:af:31:
f3:af:15:7d:f2:c4:e5:90:6a:82:4d:a7:e2:f5:84:f2:17:e7:
b9:fa:b8:19:8b:85:74:34:9e:ed:6a:24:1e:a0:dd:2e:8b:6d:
e2:47:70:c7:88:c5:aa:46:e4:50:52:aa:ab:8c:24:21:7e:ad:
e0:8f:bd:38:2f:ee:07:b6:46:3c:3a:83:90:ce:1a:02:fe:d9:
e9:60:93:ee:ed:f9:1c:d7:42:b2:a3:89:64:72:9f:61:7d:86:
0d:b4:0f:c2:a6:0b:d0:cb:c4:2d:ea:a1:73:a7:77:81:af:db:
04:04:cc:84:63:ef:13:f7:85:ab:e5:f8:04:13:90:a3:af:d8:
33:bf:43:a2:e3:94:85:0d:f7:90:d9:cd:94:f7:44:7a:28:18:
09:d9:84:b2:0b:1d:fb:52:cc:90:97:e1:b8:33:fa:86:90:fe:
c7:fd:49:53:1a:eb:bb:eb:d6:a5:72:3f:c4:17:15:c1:91:81:
e1:19:74:35:5c:9b:e3:37:a1:36:ec:9e:a0:32:6e:d5:b2:98:
b4:73:8e:4c:9a:e0:f9:0c:d6:61:a0:7c:0c:6d:17:bb:1d:5b:
6c:2e:2b:d0:89:48:fe:3d:88:ca:91:a6:3a:fb:75:64:09:c9:
eb:28:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 20:24:34 2024 by rpki-client on console-ams.rpki-client.org