Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/W-9tBFA5wq9Bcqd3MQXOZXGGReE.roa
File: W-9tBFA5wq9Bcqd3MQXOZXGGReE.roa (raw, json)
Hash identifier: lm8n3jLQADNcCvaDf9li1iBfcqtnSAzuEDDnZv6Y9ko=
Subject key identifier: 5B:EF:6D:04:50:39:C2:AF:41:72:A7:77:31:05:CE:65:71:86:45:E1
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 018CC56E190D77533DDF9841E622789ED6B0
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/W-9tBFA5wq9Bcqd3MQXOZXGGReE.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213338
IP address blocks: 185.167.183.0/24 maxlen: 24
2a0b:9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:19:0d:77:53:3d:df:98:41:e6:22:78:9e:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bef6d045039c2af4172a7773105ce65718645e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:0f:ac:b3:6b:ec:77:47:d8:8e:eb:18:2f:
73:9d:7f:74:cc:57:0f:eb:48:c8:12:3d:41:51:40:
c7:59:d7:38:d8:b9:86:e1:e6:7d:78:bc:db:ce:5b:
f4:c8:14:c4:26:fe:e9:9b:50:68:2d:11:b3:ab:b9:
91:1a:b8:3f:a7:e5:04:02:11:66:2f:15:10:36:fc:
6d:53:a9:f9:b1:8c:b7:03:dc:1a:8d:53:e4:a1:7a:
59:45:b5:bb:f7:24:45:58:db:ec:cd:87:b3:85:c6:
17:83:ae:65:24:96:c2:09:e6:f5:d8:e5:70:46:29:
b3:cf:65:62:2e:5f:ee:a6:9d:f3:e8:19:02:b7:e5:
cf:f3:ee:7e:1d:50:2d:2a:85:75:07:be:d1:a0:a8:
1c:e4:e3:ec:d7:00:d7:19:41:f6:1d:cb:41:93:3b:
e2:ab:39:20:eb:2c:05:bf:27:2f:94:cb:16:9b:99:
2e:52:13:ef:38:80:4a:02:db:80:a9:ad:52:05:d6:
b9:0e:94:44:2d:da:0e:bf:25:54:c7:30:13:8a:2e:
1c:dd:7c:d0:cf:94:cd:ac:a0:84:f3:c7:12:f3:76:
1c:5b:63:96:6e:df:18:01:70:5a:10:32:12:b4:cb:
a5:23:cc:54:d7:6a:99:0d:e5:ab:d0:88:d6:a7:c2:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:6D:04:50:39:C2:AF:41:72:A7:77:31:05:CE:65:71:86:45:E1
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/W-9tBFA5wq9Bcqd3MQXOZXGGReE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.183.0/24
IPv6:
2a0b:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:3b:1a:fc:37:b3:d8:75:bf:46:37:cb:e1:f3:06:fd:80:da:
dd:80:cf:e2:3a:9f:2c:4f:ff:c5:64:13:01:df:6f:03:ab:50:
37:6e:3d:2d:52:61:1a:3c:8c:57:56:29:e8:43:93:2d:b1:29:
c5:a3:f0:fe:55:e6:e7:b9:bc:26:7e:3e:2a:4b:db:b1:14:2c:
74:1b:96:14:f2:41:fe:0a:2d:fc:91:35:f3:b9:c9:3c:8a:7f:
b6:23:e2:ef:2b:97:54:18:52:be:70:31:f3:b3:59:05:cc:d6:
38:ca:84:d3:46:65:62:16:27:e0:ae:ba:5c:57:a3:60:27:c3:
e4:fc:8a:b6:c6:1f:35:dd:71:97:2b:de:96:9d:5d:26:f4:c7:
49:20:d3:e8:a8:b8:99:94:4a:c2:68:3c:ab:f6:fd:0a:42:e1:
fd:15:cf:97:4c:07:22:2e:3c:cc:63:cb:ad:52:58:91:9d:79:
6d:c5:75:09:af:26:c6:4f:c7:75:62:7a:4e:ea:ab:f2:e6:38:
78:f0:a7:c0:cc:b8:03:51:57:21:10:dc:dc:86:c3:16:80:49:
dc:4c:bd:09:0b:e1:77:18:c3:f5:53:e0:9c:16:10:68:0f:a9:
de:d6:41:4f:89:fc:ec:35:74:45:37:39:f6:39:3b:c2:a9:43:
f7:72:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:06 2024 by rpki-client on console-fra.rpki-client.org