Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/w_8_xF9VWs_r2Krpl-1PCEYD450.roa
File: w_8_xF9VWs_r2Krpl-1PCEYD450.roa (raw, json)
Hash identifier: +oml7IUvEh89KNgXJdwh5oQmZF1E6hMbzG/4m8MdGaw=
Subject key identifier: C3:FF:3F:C4:5F:55:5A:CF:EB:D8:AA:E9:97:ED:4F:08:46:03:E3:9D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938339DB2D143E4CEABF6735695C90
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/w_8_xF9VWs_r2Krpl-1PCEYD450.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 79.98.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:83:39:db:2d:14:3e:4c:ea:bf:67:35:69:5c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3ff3fc45f555acfebd8aae997ed4f084603e39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:1a:a6:04:2e:87:7b:4e:52:a1:8a:ab:3c:
83:17:bf:d4:1f:f5:f9:79:77:bc:62:cf:b0:f5:d8:
ae:4e:b7:55:70:5a:1f:f9:05:05:c7:19:b4:fa:09:
4b:27:c8:fc:ad:93:33:60:68:83:b4:7a:b7:c7:ab:
29:cf:71:86:bd:e3:bf:ca:07:8c:99:9d:16:5f:4a:
61:21:73:72:96:b4:e6:77:37:d0:bd:0b:f2:cf:e4:
a0:37:59:8a:47:1f:86:8a:a9:7c:cc:fa:1e:ed:5a:
d2:dc:65:79:96:9a:f6:74:27:10:bd:4e:2f:88:d4:
fa:20:0c:00:d4:af:77:14:3e:ab:ce:58:e9:cb:0f:
b8:9f:9d:cc:ee:8d:10:80:5c:65:ca:ae:ee:b6:dd:
dd:ca:af:fc:8a:20:f7:28:1f:3b:ad:0d:ea:22:36:
9f:22:70:15:6f:f4:05:9a:1d:29:7f:17:93:c2:55:
ce:da:b5:89:6c:72:0d:a2:ba:04:57:86:b7:0a:26:
cf:2e:63:a5:e3:44:b7:91:3c:ec:95:98:56:4b:26:
2d:b9:cf:7e:f4:a7:3a:0a:10:e1:6a:10:93:12:f2:
cc:95:50:ba:07:fa:cb:80:64:62:60:d6:a7:39:ae:
bd:65:bd:ec:06:3b:51:65:55:ee:94:0c:51:83:13:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:3F:C4:5F:55:5A:CF:EB:D8:AA:E9:97:ED:4F:08:46:03:E3:9D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/w_8_xF9VWs_r2Krpl-1PCEYD450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:88:ad:15:02:74:5f:14:c3:ae:82:3d:48:d6:db:a9:5a:1c:
8e:ef:bd:af:c8:72:dd:e5:be:e3:de:9a:66:a7:66:7d:33:7c:
4c:65:a6:23:d2:4b:9d:40:10:a2:3c:94:fd:66:6f:68:0f:e9:
a8:41:36:90:ae:8a:28:22:b8:e3:57:0a:af:52:04:96:aa:fe:
e7:35:86:c1:07:5b:fe:f9:a7:d5:4f:d6:35:8e:66:e0:2b:af:
b3:84:83:59:65:39:52:bb:58:d3:0f:35:c8:22:f8:c9:6a:fd:
51:0d:ee:9a:f9:35:09:ba:8d:e8:21:eb:41:8f:6b:4f:d9:34:
41:cb:07:4d:64:1d:15:73:ee:a8:1c:68:2d:1b:98:7b:dd:1f:
86:81:15:25:7a:51:7e:b3:8a:fd:2d:8b:dc:27:db:89:83:1a:
0d:2b:28:47:52:d3:60:b8:50:43:59:f6:12:2d:e0:55:81:24:
d8:45:fb:a5:09:05:15:d8:06:0b:6d:70:ff:c1:48:03:ed:1a:
70:73:b2:55:84:2d:57:1f:6a:6e:f5:81:d3:66:c7:1f:6d:fd:
17:a3:e0:36:24:76:9d:2f:e1:68:2a:f0:78:b7:74:76:21:23:
eb:d6:f4:66:ee:a0:27:50:55:0c:1f:9a:44:6b:db:e6:ed:6a:
2a:4e:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:41 2024 by rpki-client on console-fra.rpki-client.org