Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wbvKTBNwpOlgCssOzuC4DGVwdjY.roa
File: wbvKTBNwpOlgCssOzuC4DGVwdjY.roa (raw, json)
Hash identifier: vEnrfMY1LAOPw8ijEMTFIJE4sHv33mWCdDLIxrTImzs=
Subject key identifier: C1:BB:CA:4C:13:70:A4:E9:60:0A:CB:0E:CE:E0:B8:0C:65:70:76:36
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0191744C4B74CF19B3AC1C391D054D8D8913
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wbvKTBNwpOlgCssOzuC4DGVwdjY.roa
Signing time: Wed 21 Aug 2024 09:37:22 +0000
ROA not before: Wed 21 Aug 2024 09:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 178.255.221.0/24 maxlen: 24
185.232.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:4c:4b:74:cf:19:b3:ac:1c:39:1d:05:4d:8d:89:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 21 09:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1bbca4c1370a4e9600acb0ecee0b80c65707636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:31:a8:bf:64:75:4a:39:38:4a:ad:e7:5e:
7b:d2:73:af:ed:70:eb:46:55:4a:74:c2:de:e9:8f:
0b:31:df:a1:70:99:93:4b:a3:34:d6:79:5f:ac:bf:
eb:f2:75:d8:0f:e1:c3:a5:be:4a:ad:fc:02:d3:1e:
27:7d:2b:fe:6c:39:fd:87:17:c4:3a:1f:93:39:ba:
af:73:9e:c8:f6:5d:8d:28:11:49:b1:83:91:8e:33:
52:26:1e:8d:49:8d:7c:6e:70:c5:e0:e5:78:a7:71:
01:4e:d7:c2:f9:97:60:f3:72:a6:cc:fd:79:99:e5:
d4:5f:65:f5:bf:9b:d4:d8:d5:6d:8c:9e:ca:98:99:
c8:0f:41:dd:d5:14:84:7a:54:03:b9:4f:3f:fe:59:
34:b7:a2:71:ee:07:de:88:2d:e1:98:39:fc:45:ad:
d4:4f:84:6b:a9:b1:10:9b:fc:06:8c:b7:c6:d9:34:
40:97:e9:6c:e2:6a:22:05:25:23:4a:fe:bf:e1:0d:
86:ba:f9:30:b0:cb:ce:fa:b4:a9:e7:87:ad:fa:18:
a9:6a:50:bb:6c:7f:72:c7:7d:78:2e:99:ac:6c:0c:
4d:e1:9a:43:1e:ac:fc:56:2e:3b:bb:cb:b8:b9:01:
3d:db:5b:93:96:34:d6:c0:63:57:79:ea:a2:9b:96:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:CA:4C:13:70:A4:E9:60:0A:CB:0E:CE:E0:B8:0C:65:70:76:36
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/wbvKTBNwpOlgCssOzuC4DGVwdjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.221.0/24
185.232.167.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:94:07:48:60:e6:fa:cf:e5:1d:b1:98:e8:36:8a:69:38:
cc:77:cc:d5:31:7e:0e:2a:7f:9f:45:0d:c5:e9:43:c2:4e:14:
4b:d8:b2:04:bc:d2:5e:0b:a3:b1:0a:21:03:2d:93:bd:ea:62:
84:2e:f6:12:0a:47:1b:e2:6f:d8:0e:60:4e:ed:df:d0:65:6f:
cd:0c:3e:22:c2:0c:4a:a9:f6:8c:bd:a7:4d:c3:b5:35:5a:1d:
0a:c4:3d:7f:c7:54:f1:ec:be:fa:42:22:e4:fd:dd:c9:ba:fc:
bf:5a:ea:60:02:ff:df:1b:c9:71:af:b7:a5:55:af:e5:b9:21:
10:d6:32:3e:e3:d8:ad:ce:13:29:d6:c2:86:cb:b4:69:06:5f:
ce:29:c4:71:8b:35:03:ff:fa:c5:8f:b7:f5:ed:3d:e8:60:f9:
5e:20:28:38:96:b4:43:e0:3b:24:c2:7e:e5:ca:6b:8f:ad:8f:
d2:a6:e8:d3:f3:a1:f5:6e:49:a0:23:51:5c:9e:b4:9b:8f:78:
25:45:b7:14:ce:d9:40:a1:60:a9:bc:52:b7:80:85:29:f5:9d:
1f:e4:cf:48:45:58:14:ed:b0:cd:c1:3d:45:5d:46:93:18:00:
55:df:3b:0d:5c:3e:a0:cf:0e:32:1f:66:d5:24:3f:6f:25:29:
3a:dd:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-ams.rpki-client.org