Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/WFycaWyv9q66VIya56DZwVf9s-s.roa
File: WFycaWyv9q66VIya56DZwVf9s-s.roa (raw, json)
Hash identifier: BZlyibHfZC63TPMam/q5T9eU90bgDmwiPBMXySkYXOY=
Subject key identifier: 58:5C:9C:69:6C:AF:F6:AE:BA:54:8C:9A:E7:A0:D9:C1:57:FD:B3:EB
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 018CC7945BABB2DDA3D7D46337E699A8C316
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/WFycaWyv9q66VIya56DZwVf9s-s.roa
Signing time: Tue 02 Jan 2024 00:30:37 +0000
ROA not before: Tue 02 Jan 2024 00:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.231.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5b:ab:b2:dd:a3:d7:d4:63:37:e6:99:a8:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jan 2 00:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=585c9c696caff6aeba548c9ae7a0d9c157fdb3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:76:56:c2:51:04:2b:e1:aa:15:1f:e0:32:
c7:48:d2:83:5f:15:10:24:e9:26:50:9e:a3:01:73:
2d:2f:e7:49:82:64:1c:44:31:0b:65:97:68:8d:20:
50:5a:7a:c2:ef:63:44:fa:96:34:e7:1f:0d:77:60:
93:57:db:90:ad:d1:15:46:15:bf:e2:8b:f4:35:1c:
b8:a0:23:99:7e:82:48:eb:e8:da:b3:0f:ca:f0:3b:
df:5f:e9:48:f5:18:33:5a:40:45:4b:fa:a8:37:68:
95:49:2a:7c:e3:e3:3a:ca:07:f5:04:c6:59:aa:06:
08:39:e1:25:da:0c:11:75:01:d2:be:f8:b9:8f:2b:
86:fd:94:03:a4:ad:da:5e:4a:47:06:b1:53:d9:ec:
b1:3e:14:12:da:8b:b6:8e:dc:85:10:55:5b:2f:4c:
59:95:27:84:13:0f:6b:bd:4e:03:57:4d:b9:3f:5e:
91:cd:ae:8a:a8:d6:e3:ff:ed:95:e9:68:43:5b:06:
5b:69:da:be:d5:87:10:26:dd:bb:1f:d3:b9:b8:24:
ab:a6:6f:b5:61:42:8b:62:4f:4f:a3:de:57:2b:ad:
36:45:f8:e1:fc:65:a3:f5:16:27:8e:b2:31:80:32:
71:e9:06:c9:a9:f5:87:12:5b:a8:0a:b7:49:da:e1:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:9C:69:6C:AF:F6:AE:BA:54:8C:9A:E7:A0:D9:C1:57:FD:B3:EB
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/WFycaWyv9q66VIya56DZwVf9s-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.35.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a7:7c:71:12:87:7f:51:3e:1c:96:50:5d:98:e8:24:e1:1e:
2a:64:ae:bd:3b:b6:97:3c:02:b7:ea:7e:c1:34:b1:84:10:c4:
2c:87:dd:e1:e2:42:9d:96:9f:39:c7:4b:a7:7f:f0:e9:99:4d:
c3:09:e0:32:07:78:7f:a0:98:a9:1c:d7:41:49:40:25:d9:f7:
64:07:83:d6:a2:cd:7a:c8:3c:f9:ac:58:df:8d:6c:39:6b:5b:
61:ed:a8:44:ff:b7:7f:c3:e0:f7:5b:a1:cb:db:a7:2c:2e:0f:
e5:e8:83:8f:43:ea:b0:bb:1b:3e:94:8e:e4:ef:fd:8a:ff:74:
33:d1:d3:bd:58:10:b8:0a:02:c7:67:7a:25:87:48:4b:65:1a:
c8:6c:31:91:90:fd:0f:84:31:2a:26:b3:69:1d:99:a9:1b:d4:
14:d6:11:58:43:3a:bd:1d:01:65:a6:a6:8d:62:1e:ad:0f:a9:
62:b2:48:f8:b9:0a:28:c8:ac:83:85:f3:59:05:68:96:6b:ec:
8f:27:a0:09:13:43:eb:14:a3:7c:91:f7:cf:52:2f:11:f5:b3:
56:3f:d5:77:ab:9a:2e:d4:86:ab:79:cd:ac:0d:77:6a:c5:51:
7b:cc:37:43:40:8f:d3:21:21:c7:43:ca:f2:82:a7:be:3e:23:
80:53:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:38:28 2024 by rpki-client on console-ams.rpki-client.org