Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/RWpe2ZX63sD_n-DJKEgyHCV1BvE.roa
File: RWpe2ZX63sD_n-DJKEgyHCV1BvE.roa (raw, json)
Hash identifier: n946iD8t/a2YG9qYxfaYdPE+5+vKYHWfySkfIYCQj34=
Subject key identifier: 45:6A:5E:D9:95:FA:DE:C0:FF:9F:E0:C9:28:48:32:1C:25:75:06:F1
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 01914DAA6B3A801C6AA9C373A2604D7A2C81
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/RWpe2ZX63sD_n-DJKEgyHCV1BvE.roa
Signing time: Tue 13 Aug 2024 21:34:59 +0000
ROA not before: Tue 13 Aug 2024 21:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207846
IP address blocks: 185.194.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Sep 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:aa:6b:3a:80:1c:6a:a9:c3:73:a2:60:4d:7a:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Aug 13 21:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=456a5ed995fadec0ff9fe0c92848321c257506f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:a9:42:27:8e:27:80:1c:68:6d:66:35:25:
e4:dc:53:df:99:04:06:d5:12:41:b9:4e:01:c0:ba:
f8:36:89:81:68:03:4f:5b:31:7c:af:e3:37:6e:d6:
47:56:03:f7:dd:ab:ba:4e:8b:60:64:10:98:9a:1c:
0a:fd:3f:12:53:13:2e:a8:95:46:4c:43:06:64:ca:
55:fa:d8:f9:1a:5a:b3:d7:bf:3c:5c:6b:7b:02:91:
9e:47:ff:b1:4c:ee:26:2a:30:b1:7b:72:4c:13:52:
b9:11:16:ad:2e:17:74:94:2d:f3:0f:1c:90:0d:cb:
9d:68:19:36:ab:8c:8d:9e:d2:87:f9:08:80:c5:ce:
73:b4:83:f9:a1:54:b1:75:4b:2b:ae:2a:63:5c:34:
ad:e1:45:0b:7c:32:b0:06:d2:2a:b0:28:f9:27:50:
7b:9e:65:43:1c:4f:e9:aa:0f:0a:4d:bd:c0:75:51:
5f:1a:ba:ab:5e:2a:fb:27:fe:5b:0b:08:6c:71:d8:
2c:44:d2:fc:f9:ba:d6:77:0e:e5:aa:72:9e:cd:c8:
ac:4b:59:f7:cb:2f:0e:2c:8a:51:15:eb:94:1c:9a:
5b:32:c4:b0:7e:de:41:f1:7a:61:c1:23:e7:1d:f6:
c1:0f:fb:e4:a8:1c:3b:d2:c3:e5:8f:bd:71:7c:a7:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:5E:D9:95:FA:DE:C0:FF:9F:E0:C9:28:48:32:1C:25:75:06:F1
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/RWpe2ZX63sD_n-DJKEgyHCV1BvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
73:90:e7:d8:8d:66:42:ae:aa:1a:42:a4:19:36:e7:b3:cd:5c:
f4:e4:4a:ce:9e:73:f6:6d:1b:8d:8b:d5:95:34:ce:6a:18:51:
e2:db:02:f7:ab:a8:00:3b:d7:2c:88:f7:d0:8b:81:22:47:b5:
ae:88:25:52:22:20:fe:9f:1e:c0:74:cf:e1:b8:ed:f2:5c:dd:
a0:12:ad:23:71:9e:02:e6:73:d9:71:8c:04:70:12:a2:2b:26:
9d:42:72:50:43:54:ac:14:28:ef:7c:f8:e4:2b:a9:4f:30:50:
ac:28:59:bf:3c:11:7f:84:b1:76:1f:f0:88:9c:dd:3e:85:bb:
99:07:68:b9:1c:20:e2:9a:95:7b:ca:0c:74:e5:bb:2e:5c:46:
e8:70:0e:4a:2c:81:93:be:90:87:f5:3b:54:71:ae:cc:52:b3:
d8:3c:b0:f6:27:ae:17:69:cd:1b:85:af:3b:cb:6a:0c:86:cc:
72:7f:a1:9c:b9:c4:ee:63:1c:22:0e:07:28:c9:56:35:4d:38:
ad:0e:c2:3f:c4:04:aa:aa:d0:cd:63:11:f0:c2:39:6b:b4:2e:
9e:e8:d4:88:55:7c:fa:08:f1:02:18:6e:b7:7f:1e:a5:eb:be:
22:30:1f:a8:c5:58:8a:8d:5b:b5:30:1e:f1:9e:53:0a:81:63:
eb:2f:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 09:07:46 2024 by rpki-client on console-fra.rpki-client.org