Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa
File: wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa (raw, json)
Hash identifier: yzyC4AJ2XcGUFp8+ppGndT5z/Hw6CdxIjyZyN3S7fnQ=
Subject key identifier: C3:06:90:F5:EF:1F:CE:A1:E8:CC:B2:5C:FD:81:B4:68:D2:77:D3:2F
Certificate issuer: /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial: 018CC64A7A3DC464200A390821849AEAA0C0
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 193.33.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7a:3d:c4:64:20:0a:39:08:21:84:9a:ea:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30690f5ef1fcea1e8ccb25cfd81b468d277d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:81:48:c6:fe:a1:4d:fe:21:2b:6e:2d:47:
77:5f:2e:c8:ce:3a:14:98:02:57:05:04:43:c4:67:
85:eb:34:7f:33:f2:71:65:4c:e9:90:4e:cc:33:f2:
c3:3c:13:9e:e3:9d:01:e0:eb:45:e3:e8:25:6f:e3:
49:7a:21:11:20:bf:68:00:ad:a7:33:1f:07:05:e9:
68:84:b5:dc:8b:6d:1c:b4:53:5f:19:dc:69:71:65:
3f:93:c0:39:f6:4b:84:ed:9a:e6:9c:63:fb:13:e6:
69:68:e1:91:3b:96:30:cd:1c:18:34:bc:95:4a:45:
82:69:e8:2c:f4:e2:de:7d:53:98:7f:82:b8:06:bc:
93:fa:72:3b:55:04:ee:88:9a:92:6f:f9:02:04:7d:
e4:b4:94:47:a1:f7:46:0c:ee:c7:5d:98:50:78:42:
95:37:e2:9c:d6:8e:88:09:d6:71:a0:dc:46:87:41:
4c:92:5a:f0:e9:76:4b:bc:de:9b:93:ab:f0:6a:f3:
f4:c8:2b:9a:3d:08:f9:06:fa:bd:a7:0a:69:32:0a:
7e:28:8d:93:f8:b8:f8:75:44:e8:4d:5e:3a:b9:22:
cd:55:2e:ce:5b:1e:89:db:4d:cd:b3:71:4c:f1:1f:
6d:12:21:3f:09:69:01:fb:c3:b8:ba:96:a0:55:b9:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:06:90:F5:EF:1F:CE:A1:E8:CC:B2:5C:FD:81:B4:68:D2:77:D3:2F
X509v3 Authority Key Identifier:
keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c7:4a:ce:24:22:0e:87:cc:c4:fe:5c:fb:3f:4d:73:7c:6b:
77:06:45:96:01:da:1c:86:7c:4e:03:9f:22:7b:64:96:ce:c9:
c1:bc:86:e3:4d:f3:70:11:fe:e7:1b:98:a1:d3:48:8f:93:c0:
ce:55:66:1b:41:b3:2b:e5:27:00:2c:3a:ea:0a:ea:7e:4c:2d:
ff:45:12:2c:9f:88:14:28:35:9b:6a:e8:ea:1c:10:02:1d:5f:
7d:24:26:5c:7a:a8:43:89:a5:b0:12:3a:ca:d3:7e:53:e5:fc:
28:86:a1:06:cf:c4:18:88:7d:bd:78:94:cb:4e:c8:40:6d:54:
4a:0a:3d:e3:9d:88:12:4b:ae:99:b6:e8:fd:a9:03:c3:9a:07:
7f:00:63:83:88:26:38:61:40:13:f7:d2:a2:11:1d:4c:81:47:
1b:2b:d4:9a:62:c3:29:d9:38:6c:ea:86:bb:71:b3:fb:8c:15:
1e:47:41:4a:a0:58:49:97:1b:5a:df:55:e1:12:7a:ae:ed:f0:
80:2c:2a:41:78:88:f0:7c:2b:6a:8d:d8:1d:66:09:bd:00:51:
d7:d0:f9:09:9f:64:76:2f:a9:c9:e8:75:09:c6:7a:f3:f5:b5:
61:cd:2a:9d:d4:f6:1b:11:2a:28:e7:c1:fd:38:6c:f6:dc:af:
ae:87:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:09 2024 by rpki-client on console-fra.rpki-client.org