Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wr6sdCOd3IYIZAxwxa4PXK3RQpU.roa
File: wr6sdCOd3IYIZAxwxa4PXK3RQpU.roa (raw, json)
Hash identifier: BWcDWOVyyjiVuhhvpAJ/nuLtTRhoN2sZJQUIEcIRhQo=
Subject key identifier: C2:BE:AC:74:23:9D:DC:86:08:64:0C:70:C5:AE:0F:5C:AD:D1:42:95
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93439A6D3B806DE1804477ABECBC7
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wr6sdCOd3IYIZAxwxa4PXK3RQpU.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35621
IP address blocks: 151.237.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:34:39:a6:d3:b8:06:de:18:04:47:7a:be:cb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2beac74239ddc8608640c70c5ae0f5cadd14295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:ba:d5:18:ed:b9:a7:76:9b:8c:a1:dd:f2:
12:9a:24:d2:3c:0a:b6:dc:dc:e7:9c:bb:15:44:b6:
32:c7:0d:55:74:c3:86:34:4f:33:df:0d:a9:5f:27:
8b:c2:3b:b1:6b:17:b0:c6:a9:0a:03:e1:0b:e0:71:
80:27:e8:32:1d:37:66:c4:26:c8:c4:79:62:30:71:
59:52:f7:88:0b:da:06:16:6c:08:16:e4:cf:a9:75:
da:4f:b3:86:51:20:f7:52:78:c4:5f:b3:90:5c:ea:
87:92:a2:6b:f5:4e:03:1a:7f:99:8e:5b:0d:b6:ef:
6c:58:7e:9a:1e:65:15:71:10:37:fb:2b:27:8f:c8:
6c:0c:43:eb:63:1a:48:ac:d4:1f:66:56:2c:1a:6a:
c7:c6:f9:e8:74:99:e5:0d:a1:12:81:e4:64:a0:11:
82:0f:66:bd:c5:1a:5f:6f:88:62:7c:6f:c8:e8:47:
1d:e1:e0:ac:fc:51:ef:d1:eb:a4:19:c0:48:cb:bd:
45:44:95:e3:6a:9a:8b:33:69:e9:48:71:c0:0c:f6:
bf:56:ec:a6:09:86:95:21:fb:66:64:17:ac:52:e9:
6b:c9:d7:22:69:70:0d:23:3f:7c:8a:06:49:24:5c:
b1:63:59:7f:57:42:fc:93:22:fe:c2:69:20:9c:7f:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:AC:74:23:9D:DC:86:08:64:0C:70:C5:AE:0F:5C:AD:D1:42:95
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wr6sdCOd3IYIZAxwxa4PXK3RQpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c0:c9:e4:56:5e:8d:c5:36:5e:da:39:50:5f:7f:df:e5:4b:
75:f6:d1:1e:85:9e:23:dd:0c:52:bf:0a:e4:00:ff:cf:5c:ba:
93:29:a0:41:ee:4a:74:7c:2e:fa:9f:f4:f7:4f:c7:81:d5:fb:
aa:f3:78:b7:75:07:14:46:66:68:a7:99:44:6e:e5:44:c3:3b:
d7:5e:66:f9:95:89:3f:3a:da:dc:c2:7e:ed:17:f6:4c:d2:d3:
69:d8:b5:ba:a6:b6:bc:a2:77:b2:1c:ed:16:b5:d8:94:82:e9:
c6:5c:2c:e9:6e:34:4e:50:17:a8:ff:38:0d:f0:f4:c7:12:cd:
74:5c:e8:61:3f:d7:f2:da:5c:2b:e1:da:33:28:0f:49:0d:86:
cb:35:62:13:59:9b:73:ca:b1:4e:b5:cc:a6:70:eb:27:27:7e:
48:5f:67:91:1e:d7:64:8e:b7:dd:7a:c7:79:25:a1:07:35:03:
46:2f:1a:19:02:f1:86:b1:41:96:4f:2f:7a:67:42:9b:63:bc:
35:e0:a2:de:fb:a9:94:11:21:6d:ff:af:e1:ae:6b:14:80:81:
ba:24:ce:2e:0b:27:5e:fd:aa:88:31:2f:93:93:10:d8:bf:63:
af:88:4e:8a:e5:93:85:12:66:4c:2d:a9:e5:8b:1a:99:92:48:
85:84:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:54:50 2024 by rpki-client on console-ams.rpki-client.org