Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Wjt5DcA8KqFcKxQnY9GsN2W3vq0.roa
File: Wjt5DcA8KqFcKxQnY9GsN2W3vq0.roa (raw, json)
Hash identifier: Vg+W1nOt5WMw83vLdp6qheYDKXQwiI+l3Sg5b14bzy8=
Subject key identifier: 5A:3B:79:0D:C0:3C:2A:A1:5C:2B:14:27:63:D1:AC:37:65:B7:BE:AD
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 018FC4B8967277C4392365C687DE8BF0779A
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Wjt5DcA8KqFcKxQnY9GsN2W3vq0.roa
Signing time: Wed 29 May 2024 14:19:42 +0000
ROA not before: Wed 29 May 2024 14:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.214.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:b8:96:72:77:c4:39:23:65:c6:87:de:8b:f0:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: May 29 14:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a3b790dc03c2aa15c2b142763d1ac3765b7bead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:85:8d:fa:49:ad:b2:5c:b4:d2:5c:0e:be:
28:61:fe:51:ff:fe:00:8d:88:f2:dc:85:d8:b2:9d:
3f:1a:58:99:f2:78:a1:13:44:2a:a5:3a:c3:fe:53:
70:12:61:84:8c:97:7c:6d:d1:95:f8:d2:1e:20:c6:
6c:4a:7e:8d:99:52:eb:86:80:8a:f4:4d:67:71:1c:
c2:a2:10:66:9d:55:1e:e6:94:df:0f:83:f5:2e:bd:
d6:c5:ca:ff:f6:87:e6:03:ba:bc:ae:3f:19:c0:4c:
3a:3d:85:79:99:ee:bb:c7:15:f5:8a:29:59:a3:5c:
20:45:d4:2e:2d:5f:8e:59:7d:bf:21:46:69:2a:ae:
5a:86:14:1e:45:f3:f0:aa:2b:ff:f5:bf:02:4c:2a:
52:c7:13:21:2f:38:7c:88:b2:1c:96:47:bb:c9:4e:
9b:56:1c:e1:3d:87:48:35:2c:46:9e:84:f2:d8:5f:
54:ba:c8:8e:0a:7e:82:25:8b:68:bb:81:a0:4f:43:
c5:96:ba:2f:cf:7a:97:cf:d0:34:ca:06:c6:77:70:
ff:02:c2:09:c4:a1:96:d5:07:a6:39:1f:17:64:95:
14:5b:e6:39:5a:7a:5d:7f:99:0b:f9:23:42:bb:ed:
6e:74:67:ec:86:af:fc:ca:e5:ed:49:fb:6a:71:23:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:79:0D:C0:3C:2A:A1:5C:2B:14:27:63:D1:AC:37:65:B7:BE:AD
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Wjt5DcA8KqFcKxQnY9GsN2W3vq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:e6:44:4f:bc:8c:da:f7:4b:8c:2e:aa:c1:d1:84:63:a8:
17:66:73:f1:9f:bf:67:5b:e0:d9:7d:f7:ea:f8:ca:e8:9d:9c:
eb:3b:7a:15:f4:8f:6c:49:ac:d8:44:7f:6a:b9:10:ab:1e:03:
58:aa:aa:6a:32:c8:83:da:85:79:78:3e:5e:ef:4f:79:63:b8:
0e:dd:cd:73:a3:b3:1a:f8:8b:05:2f:13:bd:3a:28:f6:3b:dc:
40:0b:a5:05:04:49:c8:1a:09:0e:19:06:62:33:ea:d3:fd:23:
cd:60:6f:81:e8:c7:79:c8:c9:5f:6d:87:2b:f8:13:38:73:18:
5b:c7:04:a7:4f:89:0e:52:c6:20:38:26:a2:3c:83:d2:8c:c3:
d4:cd:04:2d:59:fb:f7:8e:e4:bb:ca:a1:13:36:19:d8:3f:83:
00:6c:e1:03:0c:64:b0:49:fc:fa:ec:20:47:58:2e:4e:f1:73:
d4:65:9f:a7:db:b3:e0:27:9e:2d:7c:fb:c1:04:6f:77:c1:ce:
ca:6d:85:88:27:b5:9a:98:6a:91:5f:c0:85:b9:a2:25:22:0e:
e9:4b:e4:58:10:f1:d9:89:e8:e6:fb:29:0e:b5:7c:8e:1b:d7:
3d:83:ca:ba:b4:89:af:47:5a:3d:ea:38:01:21:c6:49:31:e9:
ca:44:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 12:41:50 2024 by rpki-client on console-ams.rpki-client.org