Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa
File: W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa (raw, json)
Hash identifier: BerVcfPZ2HZHF6RnVrk+EkQyhTlfHfBMrzTP71NoXd4=
Subject key identifier: 5B:C0:B8:01:71:B1:12:80:93:D2:FE:16:90:1C:1A:43:43:C2:4C:C7
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 018CC2DB19CC668A960AEA66E11894D2A8A2
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49169
IP address blocks: 91.212.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:cc:66:8a:96:0a:ea:66:e1:18:94:d2:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc0b80171b1128093d2fe16901c1a4343c24cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:13:01:cc:68:2b:65:e7:ff:80:f4:22:b6:
85:6f:0a:53:29:76:31:99:23:41:2e:9d:4f:49:90:
42:38:58:09:57:03:df:b7:6a:a7:18:f1:40:aa:fc:
96:12:fc:1f:2b:a5:50:c2:76:73:c7:5f:d4:97:c8:
aa:ad:a0:19:0d:83:9d:bf:1b:7c:ff:70:aa:8d:86:
54:78:6a:b6:bf:87:ef:f2:04:1e:ca:e1:10:1e:76:
c3:7e:13:57:16:76:71:43:77:ef:82:2f:a3:f3:45:
4b:3f:24:fc:2e:50:f4:c7:74:91:9e:fc:6d:ee:9a:
46:2e:6e:f3:9d:9f:5a:c1:2d:66:58:b4:b6:98:08:
bc:c0:22:fe:db:71:44:cb:07:4e:6f:d8:b4:a0:8f:
38:33:48:78:7b:26:41:5f:e0:50:ff:dc:85:14:11:
aa:94:4a:8f:86:f7:0a:ce:02:93:7b:72:e5:c7:65:
87:53:18:35:aa:b1:e5:3b:29:f1:72:9f:30:ea:03:
3d:84:ca:58:68:ad:7a:49:b4:91:7e:99:70:1a:19:
25:c8:0d:6f:c6:3d:47:c7:1e:07:07:42:0b:d5:24:
5b:1d:75:a1:4d:c0:18:fe:7b:18:a2:13:2e:14:17:
93:34:a2:3c:a1:75:07:f9:03:4e:48:4f:66:e6:69:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:B8:01:71:B1:12:80:93:D2:FE:16:90:1C:1A:43:43:C2:4C:C7
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.162.0/24
Signature Algorithm: sha256WithRSAEncryption
95:49:e7:0b:05:71:4f:76:02:c8:b9:7e:7c:da:c2:5c:6c:15:
af:4a:dc:20:34:7c:9e:2f:0a:d0:ff:19:20:e6:06:8d:b4:9f:
fa:1f:75:27:e2:a8:f6:85:17:d0:ae:86:da:2c:89:87:64:01:
37:94:c5:ec:a9:d6:19:2a:64:df:f9:14:45:c8:02:d5:a1:12:
b4:6b:bf:f3:86:c5:4a:ee:aa:61:9e:83:43:20:31:56:3a:ca:
6d:15:69:fc:91:c0:35:2c:6d:9b:6c:8d:db:1e:36:ad:34:20:
6b:5c:0d:35:f1:ac:f0:2d:6e:61:14:c3:aa:c0:62:c5:82:84:
70:9f:dc:ed:9a:e5:dc:4c:90:2b:af:75:8c:f3:07:d7:83:b4:
15:01:7a:93:c6:80:83:b1:a9:9a:ae:71:ad:2f:06:81:ab:3c:
f7:8b:12:fc:75:71:e9:28:cc:ac:9b:34:49:d7:80:b4:95:74:
cf:7b:85:61:11:d5:e4:e1:39:89:b3:2b:9d:54:8d:7d:8c:da:
66:53:76:a0:3d:b0:5a:76:f9:a7:e1:6c:54:38:f3:77:52:32:
83:79:e4:36:85:d4:c4:0c:5a:35:b7:ca:41:03:32:43:2b:20:
2e:ee:64:fe:5e:b5:60:56:63:db:0f:c0:de:5e:28:23:be:a0:
c1:98:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 03:01:38 2024 by rpki-client on console-ams.rpki-client.org