Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa
File: dWwErd_mokXXmN_P8kENBCE0PMw.roa (raw, json)
Hash identifier: ueFTlBSG5L4FgExCeEcGiYqa4Qs9VKvoJjX2L/pdPVc=
Subject key identifier: 75:6C:04:AD:DF:E6:A2:45:D7:98:DF:CF:F2:41:0D:04:21:34:3C:CC
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 018CC492CB8EB0F5180D20E6C68740E1DEC3
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa
Signing time: Mon 01 Jan 2024 10:30:03 +0000
ROA not before: Mon 01 Jan 2024 10:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202625
IP address blocks: 185.158.196.0/22 maxlen: 22
2a07:af00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cb:8e:b0:f5:18:0d:20:e6:c6:87:40:e1:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Jan 1 10:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=756c04addfe6a245d798dfcff2410d0421343ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:95:a7:09:cd:bc:43:79:76:24:bd:e3:4d:
b5:54:4e:09:dd:64:bb:63:ac:7c:57:3c:cb:8e:a6:
06:da:a6:71:0f:63:d5:82:97:6f:f0:ab:8a:7d:5b:
7d:2d:63:4e:cd:0d:5b:62:ea:d2:22:1e:ca:70:d0:
55:35:c1:9c:6b:4a:0c:f0:f9:78:53:36:69:c1:1e:
c8:5b:d7:b5:a3:53:61:8e:14:d6:07:d2:53:af:ad:
53:c4:da:c0:11:7a:73:55:48:b2:a5:b5:b6:8d:d7:
1c:d0:8e:63:a8:8b:56:8c:98:98:e5:26:1f:24:cd:
87:39:f7:ac:d1:de:0a:7f:cd:b4:b0:c7:0b:6a:04:
ba:7f:08:d9:39:a1:f4:da:ea:e0:9b:f3:a1:53:18:
9e:51:80:56:1c:df:00:f0:9e:b1:56:45:12:9f:64:
3b:42:7d:d2:02:9f:55:8e:c9:c9:83:6c:c1:32:82:
6e:b5:6c:1c:f9:67:46:f6:48:d9:b5:f9:dc:2f:2d:
53:ed:2b:a9:29:32:53:11:b5:33:b1:e8:f1:fe:7f:
e5:06:b7:b9:b2:a1:5f:f9:07:00:ec:71:ad:a1:84:
1e:49:1b:d5:0c:0c:68:eb:d1:17:e0:16:7a:9f:7f:
34:36:0d:92:87:8e:ca:fb:f4:ea:b4:94:26:83:42:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:04:AD:DF:E6:A2:45:D7:98:DF:CF:F2:41:0D:04:21:34:3C:CC
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.196.0/22
IPv6:
2a07:af00::/29
Signature Algorithm: sha256WithRSAEncryption
56:fa:07:2c:bf:52:aa:70:05:5b:e0:38:01:16:de:a1:a3:54:
70:d5:5b:06:29:64:54:ab:56:b0:78:a2:75:5b:c7:83:b6:8a:
97:a1:df:4b:59:6b:54:da:7a:a1:61:b9:a3:a9:ec:fb:cb:1d:
0f:9f:3f:30:0a:ce:1c:b0:2c:ea:8e:e7:94:6c:f6:41:0d:91:
16:81:99:fb:03:26:ec:7e:cd:e7:0b:e3:fb:af:54:9b:22:21:
9f:e8:4c:f3:a0:06:42:15:70:52:aa:f7:fc:07:fe:e1:a5:77:
6a:29:6d:cd:3e:5e:35:eb:de:fc:bb:14:55:e1:50:dd:53:70:
f4:51:fb:72:c4:5e:18:e2:af:8c:00:1f:d5:88:0a:5e:b7:be:
99:6a:7c:7d:09:a6:99:25:a7:22:bf:be:38:ae:2b:60:6e:70:
72:79:e5:46:60:64:4f:79:69:f9:55:bf:f4:3c:f8:2b:52:18:
ae:4b:78:86:6c:0d:0a:67:05:fb:27:38:85:2f:b7:0e:61:f9:
1a:9a:c6:58:da:00:22:5d:fe:ba:b6:26:79:95:7d:cf:cd:c8:
4d:2c:af:5f:8d:22:65:e3:f3:1f:33:b3:d8:78:0f:c5:e2:c2:
80:4f:a3:a8:bb:fc:40:09:6f:67:42:d1:08:f7:81:d1:fb:15:
1c:ea:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:37:39 2024 by rpki-client on console-ams.rpki-client.org