Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/Wx58tnbrpCM4wI0iUb_F5NrzjQw.roa
File: Wx58tnbrpCM4wI0iUb_F5NrzjQw.roa (raw, json)
Hash identifier: p13mKsdtM2/C8uXHeftpfhM3fv7ud5pnq90ok5HEsxI=
Subject key identifier: 5B:1E:7C:B6:76:EB:A4:23:38:C0:8D:22:51:BF:C5:E4:DA:F3:8D:0C
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 018CC425410E338538887FDA7812BCF7682F
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/Wx58tnbrpCM4wI0iUb_F5NrzjQw.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203775
IP address blocks: 185.124.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:41:0e:33:85:38:88:7f:da:78:12:bc:f7:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1e7cb676eba42338c08d2251bfc5e4daf38d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:db:3c:6d:0b:1e:2e:87:07:dd:05:32:9d:
e1:02:a4:cc:03:8c:ab:2b:9d:b5:14:6d:5b:48:63:
ff:83:78:f9:b5:36:dd:0d:8a:54:e2:6a:07:a3:ce:
f3:ec:49:db:2c:25:f9:66:12:e0:3b:92:f8:ed:4d:
f9:f5:41:7a:00:40:06:ee:b5:72:56:79:cc:cf:ee:
09:25:0d:b9:20:e5:68:c9:58:32:a4:18:44:91:8f:
ec:2c:ee:f7:01:da:e2:cd:3f:09:61:6a:9b:28:b9:
3d:9d:5b:68:ed:1a:19:41:c5:39:1b:3d:5c:bc:50:
25:1a:07:d0:b0:f6:28:90:44:a6:9a:00:73:47:c2:
3d:06:17:f4:95:ec:87:da:5e:a3:e5:d8:16:ad:59:
fe:91:49:cd:81:85:21:eb:54:92:99:71:22:9a:77:
7b:c7:c5:34:bc:07:d1:63:5c:bf:d7:dc:1c:28:c4:
58:ab:fb:41:e6:7d:44:29:45:e9:fd:6d:7f:95:a3:
1e:52:22:97:d0:7f:d7:45:2e:1e:97:d6:d2:ff:bf:
0a:2d:ec:e1:1d:22:8d:23:51:28:44:4f:da:91:21:
e8:be:6c:b3:d1:3a:30:55:c1:78:92:cf:77:bf:e8:
ff:87:7c:b0:a3:9b:3b:70:e3:80:18:c7:ce:80:b8:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:7C:B6:76:EB:A4:23:38:C0:8D:22:51:BF:C5:E4:DA:F3:8D:0C
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/Wx58tnbrpCM4wI0iUb_F5NrzjQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:68:dc:41:5d:92:e6:30:0a:ab:31:4f:d5:ae:04:d0:db:00:
c8:08:1d:e6:c8:2b:37:73:01:78:22:71:2e:c3:c5:67:78:f6:
0e:52:9b:3c:2f:98:92:4e:e5:11:21:00:6f:2c:13:c6:ee:0d:
89:ef:69:64:7c:cb:7a:c5:4f:83:ca:28:c7:ce:0b:3d:1e:b2:
62:0c:79:63:3e:7e:95:18:3d:33:03:36:47:ae:7c:2f:3e:45:
c2:78:89:e7:fc:79:1e:83:e4:57:03:23:0c:01:84:ff:1c:a9:
95:f7:96:a9:3a:b9:d8:24:f2:08:9d:34:7f:eb:14:1e:f4:2b:
2d:92:1c:1b:74:60:78:c6:60:00:ce:04:88:fe:05:af:c6:a0:
9d:79:c8:25:10:3c:1b:4b:ef:b9:39:75:b7:da:4c:5a:a0:66:
dd:2f:7c:bd:d1:7a:ac:cb:fc:ca:45:d5:15:dc:cf:c4:ad:c0:
38:03:53:50:99:61:1d:39:57:69:53:16:a6:e8:a9:71:24:6a:
64:83:37:60:e9:ea:ab:e1:8d:e2:af:d2:06:32:86:a8:67:1a:
d8:69:d6:83:8c:13:c7:cc:1e:95:fc:47:a0:fa:3a:b6:87:d8:
92:10:4b:93:3b:b4:45:0a:fb:13:2f:3f:c8:6f:04:51:bd:75:
c3:74:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:19 2024 by rpki-client on console-fra.rpki-client.org