Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/wVxGeQuiUF84Pv_FYtgqFS-t3Vs.roa
File: wVxGeQuiUF84Pv_FYtgqFS-t3Vs.roa (raw, json)
Hash identifier: dK6j6lEiXsf02p1oadhltuECT585SYjcwo9qTQVQij0=
Subject key identifier: C1:5C:46:79:0B:A2:50:5F:38:3E:FF:C5:62:D8:2A:15:2F:AD:DD:5B
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 018CC2DB46FBF135E762C04F0BF4C2763AAF
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/wVxGeQuiUF84Pv_FYtgqFS-t3Vs.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20574
IP address blocks: 185.119.100.0/22 maxlen: 22
178.21.80.0/21 maxlen: 21
193.108.42.0/23 maxlen: 23
2a03:900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:46:fb:f1:35:e7:62:c0:4f:0b:f4:c2:76:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c15c46790ba2505f383effc562d82a152faddd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:fb:03:c9:22:30:d7:2a:25:86:d5:23:7c:
ec:ff:1f:a7:0f:ec:9a:c5:b9:66:0e:df:89:79:b9:
ed:7a:f1:df:fd:fa:66:23:13:4c:df:6c:aa:ea:76:
63:87:3f:02:7b:93:b8:27:43:83:11:ea:87:ec:11:
4e:93:aa:93:f1:08:0a:a7:79:15:aa:88:0c:90:df:
52:eb:59:4f:7a:dd:1e:ab:03:75:29:f6:5f:9c:f2:
02:aa:b2:b9:10:2b:57:54:1c:11:44:03:89:fc:f5:
5c:c6:66:2f:58:e9:fd:c5:74:96:40:8b:5d:8f:6b:
93:ea:83:65:82:03:b7:eb:1e:e0:de:97:e4:8d:18:
53:1d:a5:92:76:3e:67:dd:92:fe:c0:a6:a6:ef:47:
23:32:e2:a6:53:67:7e:e0:60:de:3c:7a:4d:25:b3:
fd:55:d3:af:f9:91:13:f3:63:ae:03:f6:c9:20:cd:
5d:a0:81:30:0e:76:46:4f:96:8f:09:d9:dd:50:56:
d6:0b:40:e2:d9:a4:b9:52:93:f2:4d:5c:8e:18:0d:
a3:e3:58:bb:77:13:24:de:df:10:f9:91:b4:d4:98:
fc:e7:99:2b:35:28:40:7e:7a:06:ed:f1:0c:9a:af:
d3:54:b4:12:be:79:07:9b:8b:98:c8:0c:3d:51:8f:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:46:79:0B:A2:50:5F:38:3E:FF:C5:62:D8:2A:15:2F:AD:DD:5B
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/wVxGeQuiUF84Pv_FYtgqFS-t3Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.80.0/21
185.119.100.0/22
193.108.42.0/23
IPv6:
2a03:900::/32
Signature Algorithm: sha256WithRSAEncryption
90:52:54:5b:a0:1d:b0:f5:94:15:3e:1f:05:14:7d:71:19:e8:
d0:a3:67:cb:af:77:c8:94:6f:fc:4d:4a:43:39:32:87:23:f2:
30:f6:dd:ed:52:7d:e4:13:3b:b1:f7:c3:1e:16:25:8d:ad:9d:
c8:b4:ac:97:b4:6b:67:c9:07:26:75:e7:82:12:70:fa:6b:4c:
ab:6c:05:1a:5c:39:44:85:1c:19:7c:91:49:47:47:80:63:94:
cf:72:80:40:ee:4e:97:cf:8d:03:f4:a0:e9:e4:a6:9a:48:e0:
aa:25:38:1c:ee:79:b2:c4:38:d6:3b:24:27:6d:22:47:8b:81:
49:01:95:06:3a:fd:29:42:d4:49:37:39:98:65:8d:98:6f:2b:
5a:cc:d9:ff:55:ea:a7:ec:dd:cf:0d:bd:d7:e0:5b:80:ab:46:
7b:4d:d2:fd:5e:68:14:6f:6b:8d:7f:be:1a:a5:d5:30:ed:15:
d6:e1:f1:49:f5:78:85:0a:c8:89:3a:8b:5a:65:b3:d1:74:87:
e9:ec:53:f6:b8:33:d6:e6:df:ea:af:0e:c7:96:a5:bb:60:e1:
27:fa:ca:1b:26:3f:a0:4e:09:9c:d1:de:5a:b7:9b:1a:c9:d4:
22:e5:99:8d:19:1e:fc:9a:9a:cd:04:b1:ca:16:00:8e:31:88:
c8:39:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:05 2024 by rpki-client on console-fra.rpki-client.org