Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/wJMNiA1PZUWivAv0D_uCSBjKQIM.roa
File: wJMNiA1PZUWivAv0D_uCSBjKQIM.roa (raw, json)
Hash identifier: u5X5HAwEF4SO5AQd/Zabw0+GQMMt5kppua9EtuWqjOk=
Subject key identifier: C0:93:0D:88:0D:4F:65:45:A2:BC:0B:F4:0F:FB:82:48:18:CA:40:83
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 018CC34958FED0F49C9F9FE9C11E8E43D96B
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/wJMNiA1PZUWivAv0D_uCSBjKQIM.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35369
IP address blocks: 185.197.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:fe:d0:f4:9c:9f:9f:e9:c1:1e:8e:43:d9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0930d880d4f6545a2bc0bf40ffb824818ca4083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:8b:3e:81:2f:58:19:f2:8e:81:5a:1b:11:
88:22:6e:a2:19:d6:67:df:c9:b4:7a:ce:03:a0:d5:
0d:87:f1:c0:85:f8:de:11:11:7e:80:17:b7:c3:e7:
95:02:6a:d6:a6:ba:db:bc:c0:f9:9c:08:43:18:a8:
9e:68:e5:d5:60:05:88:8c:99:c0:6e:ee:9b:ed:17:
c6:fe:13:66:db:97:be:45:a6:e1:59:6b:15:ec:ce:
dc:e4:fc:88:8f:2a:bc:17:18:57:06:c9:8a:53:82:
3c:45:98:3e:10:37:71:31:8c:30:15:a1:1d:24:d0:
be:31:ca:76:a9:7f:a6:9a:46:2a:43:cf:15:34:27:
ea:a5:e5:b2:ea:a2:2c:70:b8:be:e3:6a:64:90:de:
99:8f:85:19:12:99:96:bc:90:cd:34:29:51:9b:4e:
63:d1:58:93:6b:68:ce:3b:8a:35:3f:a1:de:95:3d:
50:f4:7a:0a:9a:6d:1e:4c:e3:44:3b:46:66:4d:b9:
c8:3e:3e:65:7c:01:43:6d:74:12:49:b9:cc:6b:b7:
fe:b5:4f:89:3c:17:2c:0b:9e:70:51:f0:97:21:9f:
3a:74:49:aa:39:73:5d:b1:f9:c6:c2:a0:5c:b7:99:
df:6f:18:1c:75:77:fc:62:86:0d:79:4f:76:34:e8:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:0D:88:0D:4F:65:45:A2:BC:0B:F4:0F:FB:82:48:18:CA:40:83
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/wJMNiA1PZUWivAv0D_uCSBjKQIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.181.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3f:4d:21:4a:40:12:78:65:07:62:a0:a3:18:0f:b2:6d:57:
d1:31:5a:33:6b:87:0e:f9:77:61:63:9c:49:3b:da:05:ba:2c:
b7:64:30:5c:7b:47:aa:81:26:d0:b1:00:4f:0b:99:11:0d:db:
ad:6f:96:f3:b0:92:66:93:87:17:08:ce:21:f7:e3:11:81:95:
d9:ec:f3:d9:56:9a:0b:75:8b:c2:15:4a:57:e8:5f:80:ca:d2:
14:d9:01:59:3c:3f:0f:ee:56:61:f5:46:72:22:5c:12:ac:40:
aa:b4:82:d7:18:02:be:6f:16:d8:a3:e3:39:9f:18:7a:bf:d9:
14:c0:f4:52:fe:f7:f1:5e:b8:bc:82:a6:56:08:a1:7e:0d:4b:
1d:9c:17:f5:c0:f6:dd:d2:e7:89:30:8e:83:86:4f:2b:a1:25:
e5:53:a5:1d:da:73:e7:b1:30:1c:7f:3b:93:53:e0:45:c6:ef:
66:d0:53:72:92:b3:85:14:fc:20:2a:e6:44:a0:8d:e1:db:a7:
95:ee:c5:67:25:31:a9:a8:45:89:e4:ef:6c:f7:11:ae:1a:f0:
59:77:56:52:d8:e5:50:27:3e:0f:38:fb:75:e1:10:c5:04:e9:
08:53:57:e0:90:a9:26:63:2f:be:ef:6a:d8:b8:2c:44:cc:80:
37:40:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 03:08:12 2024 by rpki-client on console-fra.rpki-client.org