Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/wYE1og_u5MCFzJ0CIxwfbIqrxPw.roa
File: wYE1og_u5MCFzJ0CIxwfbIqrxPw.roa (raw, json)
Hash identifier: pWoha6DhUNA6GLnOPqyABvS6X7LGxB5GtKWenOmr9m0=
Subject key identifier: C1:81:35:A2:0F:EE:E4:C0:85:CC:9D:02:23:1C:1F:6C:8A:AB:C4:FC
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018F81F4F3A491252D1A93195D66D6408985
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/wYE1og_u5MCFzJ0CIxwfbIqrxPw.roa
Signing time: Thu 16 May 2024 15:11:04 +0000
ROA not before: Thu 16 May 2024 15:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43647
IP address blocks: 213.148.18.0/23 maxlen: 24
213.148.20.0/22 maxlen: 24
213.148.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:f4:f3:a4:91:25:2d:1a:93:19:5d:66:d6:40:89:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: May 16 15:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18135a20feee4c085cc9d02231c1f6c8aabc4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:bd:71:45:8a:19:c0:5b:67:b6:d3:71:7d:
d3:16:d6:8e:d2:bb:ca:8d:dd:9f:09:70:fb:23:e9:
01:c7:a3:e3:66:e1:24:af:2b:e8:bf:d2:1f:42:59:
cd:21:5a:2f:52:77:01:96:85:3f:54:34:ef:bf:49:
16:93:37:a0:68:37:d7:fc:80:00:af:55:46:6b:75:
34:6f:16:40:87:c4:47:86:9a:61:ab:fc:bc:09:65:
b4:5a:6c:b8:06:d3:86:0a:96:3b:6f:a9:b5:2f:f5:
b4:4a:11:2b:1e:f4:22:d5:0c:52:79:92:e1:61:89:
a5:df:c4:9d:da:f2:e2:25:c4:cf:03:d8:ec:a6:a7:
20:2b:77:3e:63:01:64:57:e6:bc:db:2d:2e:d2:09:
dd:28:e4:0b:7e:b4:ac:cd:8e:3f:7b:84:4e:0b:60:
c0:c6:e5:9c:e2:e6:51:39:78:76:a3:36:b6:22:f5:
71:fc:0a:eb:f6:91:49:50:05:1f:43:e7:eb:b8:c4:
63:57:7f:e4:58:ee:6a:d0:7a:59:06:e2:8b:96:34:
4b:fa:c7:3c:99:2e:49:27:6e:5f:62:2b:fb:81:15:
3b:23:a5:1a:1c:dc:da:d4:74:7e:f0:5a:2d:c2:dc:
cc:64:fa:cc:02:b6:34:0e:1a:26:7e:4b:5d:e7:f4:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:35:A2:0F:EE:E4:C0:85:CC:9D:02:23:1C:1F:6C:8A:AB:C4:FC
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/wYE1og_u5MCFzJ0CIxwfbIqrxPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.18.0-213.148.23.255
213.148.28.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a1:9e:9d:16:7a:21:f1:f5:b6:6b:78:0d:79:cb:03:88:da:
2f:76:a4:73:44:66:4e:95:d3:10:09:6e:cf:3c:3b:00:a4:13:
4d:fe:45:10:00:32:c7:d4:e5:b6:0d:30:c6:e2:bf:da:38:d5:
59:d8:49:c6:bc:0d:99:ea:eb:16:dd:02:e2:fa:19:97:07:0a:
19:42:fd:9c:e2:9b:8c:a5:93:8e:ea:25:b6:af:7a:d2:79:b5:
73:3d:03:48:db:20:d0:f0:60:7c:b6:02:66:c8:07:ad:5e:6e:
a8:f5:d1:bf:4f:60:f4:b0:72:6b:6e:17:67:52:95:a3:12:0e:
50:1f:5f:11:98:8e:27:03:fb:85:47:ba:0e:89:48:4e:c8:64:
b3:f3:14:1f:58:bf:34:74:97:e2:d7:a5:06:f7:94:8f:cd:70:
ef:73:a5:37:b2:64:eb:a5:c6:bd:e4:61:af:9a:f6:2b:d8:5d:
cf:9d:8c:cd:84:eb:02:05:60:7b:71:e2:74:8d:fb:64:e3:b7:
87:5f:65:c5:f1:63:df:ef:35:bd:40:fa:60:a5:3a:fb:bd:af:
90:42:a2:34:0b:5a:c4:67:a3:c8:35:b5:93:b4:a5:89:8c:9e:
cb:d1:e9:3b:3c:a4:e6:10:16:c6:ef:4c:89:be:56:45:ca:5c:
e2:db:d0:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:33:13 2024 by rpki-client on console-ams.rpki-client.org