Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nWgGhhQG-swydsfpgVmjscjpt1E.roa
File: nWgGhhQG-swydsfpgVmjscjpt1E.roa (raw, json)
Hash identifier: QzFr3jJhvRylX48ufFqaphV+Hx2YTh7aM8fRSsr1uSM=
Subject key identifier: 9D:68:06:86:14:06:FA:CC:32:76:C7:E9:81:59:A3:B1:C8:E9:B7:51
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 018CC4245CE0A7CB57843EB1BE0BF0C4F179
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nWgGhhQG-swydsfpgVmjscjpt1E.roa
Signing time: Mon 01 Jan 2024 08:29:26 +0000
ROA not before: Mon 01 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58580
IP address blocks: 185.254.56.0/22 maxlen: 22
185.254.56.0/23 maxlen: 23
185.254.56.0/24 maxlen: 24
185.254.57.0/24 maxlen: 24
185.254.58.0/24 maxlen: 24
185.254.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5c:e0:a7:cb:57:84:3e:b1:be:0b:f0:c4:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d6806861406facc3276c7e98159a3b1c8e9b751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:9d:18:cf:9b:77:bb:45:75:43:02:40:ea:
ad:23:1d:09:e1:76:26:d1:2f:d3:41:92:09:37:f0:
cf:ce:cb:04:b4:fa:d9:d2:39:ca:68:81:6c:3c:0e:
63:6b:e0:69:4f:d2:aa:2e:08:bd:a2:de:82:f7:92:
5b:1a:40:13:1b:53:7d:4d:5e:ac:0d:ba:48:0e:4b:
94:c1:b3:21:c5:21:e0:4d:0d:7b:54:4f:ed:5d:be:
e6:b2:5a:d4:5f:13:05:55:0e:19:7c:df:d1:6c:0c:
9f:f3:cb:35:b5:e0:23:2b:13:c3:76:6d:90:85:77:
1a:29:4b:84:9c:cf:35:af:f1:9b:b7:4b:97:89:6e:
b7:d2:60:cf:ed:bc:52:80:5a:12:e7:2e:20:df:87:
e9:ec:fc:20:1c:a7:bb:e3:86:3d:67:2e:bf:60:90:
e4:3f:cf:13:ca:3a:60:f4:25:d6:99:e4:e4:3e:fa:
b0:e5:b9:56:68:3e:e5:97:10:2d:89:3c:e5:29:7b:
4e:04:05:45:77:10:ff:4e:a2:47:98:c7:1c:26:94:
53:e7:8b:05:16:ec:57:71:28:23:d8:99:e1:af:11:
ae:44:04:de:82:eb:bd:c2:e6:a7:a3:7a:3b:9e:9f:
c4:18:0b:d3:b7:5e:64:5d:9b:d4:6f:0c:1e:c7:3e:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:06:86:14:06:FA:CC:32:76:C7:E9:81:59:A3:B1:C8:E9:B7:51
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/nWgGhhQG-swydsfpgVmjscjpt1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:22:57:95:ff:8d:0c:1f:cd:65:a0:08:43:47:ef:b0:97:82:
96:a1:42:8d:a1:22:c8:60:aa:23:e7:69:03:f3:ee:24:05:1b:
b2:f2:61:56:36:62:7d:20:13:64:1a:c1:20:ac:cf:02:e5:34:
d8:da:2f:21:dd:66:c4:76:2b:35:87:0e:1d:c0:a3:eb:31:de:
19:86:57:71:b8:e8:82:23:d4:52:a7:99:fb:21:a1:ca:ee:59:
a9:b5:12:7e:87:4e:1f:df:f8:8b:56:c7:43:f5:31:db:1f:21:
01:11:3e:52:8f:ed:53:e0:82:85:73:95:d9:47:66:eb:79:53:
b1:f4:99:ea:c7:2e:17:37:e3:b0:a8:71:f0:8f:b8:81:18:db:
ad:cf:46:e8:bc:54:60:16:75:9b:58:34:0d:03:48:03:86:5c:
f0:33:ad:3d:62:67:ce:ec:ed:87:c7:21:d8:a5:fe:b2:c8:4b:
a5:ac:0b:a8:c8:2b:2a:c9:83:48:6d:09:09:f0:34:1e:84:37:
14:4a:86:0b:00:87:ca:4c:a0:6b:fb:1e:9f:7b:c6:38:6d:28:
dd:5e:03:bb:d5:54:2d:e5:16:b9:9f:c5:37:29:20:d9:6f:40:
23:ed:35:37:48:89:0b:11:78:8b:e5:54:8f:23:21:c6:7c:92:
0e:dc:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:35:25 2024 by rpki-client on console-ams.rpki-client.org