Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/wkuD5nNmAPvpt5n3rcu-hOxQPIU.roa
File: wkuD5nNmAPvpt5n3rcu-hOxQPIU.roa (raw, json)
Hash identifier: ZoegR5W/oXLomOj96ASFHChx581O1Fju39gZr0mla5g=
Subject key identifier: C2:4B:83:E6:73:66:00:FB:E9:B7:99:F7:AD:CB:BE:84:EC:50:3C:85
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 0192046434654B008F72B866E0CD5E2B8D62
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/wkuD5nNmAPvpt5n3rcu-hOxQPIU.roa
Signing time: Wed 18 Sep 2024 09:08:48 +0000
ROA not before: Wed 18 Sep 2024 09:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201207
IP address blocks: 185.66.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:64:34:65:4b:00:8f:72:b8:66:e0:cd:5e:2b:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Sep 18 09:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c24b83e6736600fbe9b799f7adcbbe84ec503c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:48:2d:e1:e6:12:b8:36:63:4a:1f:ad:e0:
c8:55:cd:6c:49:2c:0b:b4:76:eb:52:41:f3:c7:f1:
03:8c:28:c6:73:cf:83:3b:66:80:1c:1c:64:b2:1b:
8b:62:2a:aa:1a:0b:b2:47:de:c7:8e:d5:f1:74:32:
ff:b3:f8:03:9d:96:ba:d5:cb:30:0b:48:2c:fc:7e:
53:22:01:06:c5:0f:a4:1f:62:bd:ac:e7:1b:c0:6d:
60:bf:aa:4b:bc:a4:c3:d4:fe:42:a8:8f:a4:fa:6e:
a2:20:a0:d3:81:8d:28:8d:d2:45:e6:b1:22:98:e3:
e8:b5:84:5c:1b:d7:43:f1:c6:f4:48:ce:b5:f8:ea:
d8:58:db:2f:9f:12:22:b7:fc:5b:16:bd:4e:cd:d8:
02:ee:b7:fa:2c:ba:45:8e:a0:50:73:ab:a0:a9:fd:
dd:de:02:0a:51:33:c1:c3:85:88:8d:4f:08:2c:84:
83:34:c3:19:0d:62:1f:de:5c:82:84:d7:c7:83:e2:
4e:92:33:4e:b0:27:c9:11:d9:13:26:76:28:a3:0c:
8d:e6:d1:98:f7:74:a1:46:4e:49:66:a1:58:6a:db:
09:6f:bf:ab:7a:85:25:5a:33:a2:cb:ae:da:55:0a:
13:f5:39:9b:ef:40:e7:e0:2b:d0:5e:ff:ac:c4:14:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:83:E6:73:66:00:FB:E9:B7:99:F7:AD:CB:BE:84:EC:50:3C:85
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/wkuD5nNmAPvpt5n3rcu-hOxQPIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.212.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ef:be:91:9d:24:5e:df:e7:be:e2:20:cb:1c:8e:20:45:66:
e3:67:1d:4b:e5:af:b8:66:8a:96:4e:b9:eb:fc:7b:92:c2:57:
ae:14:c2:ad:f4:02:74:9d:f3:3b:26:cd:ec:1a:fb:bb:cd:a8:
66:25:df:ff:35:b8:bc:a6:6e:09:6a:e1:43:2b:fb:be:ad:74:
c0:81:09:7f:6d:35:61:25:8c:45:f0:08:d2:5c:28:6b:0a:f3:
d2:7b:88:6f:51:3a:9b:61:cc:0a:04:59:23:c3:65:a6:93:88:
33:c2:28:82:be:83:b6:8f:47:90:ac:47:a9:db:1e:2a:61:ad:
8a:61:d6:c2:9a:76:69:e4:ef:27:ea:8f:75:45:d4:b3:47:43:
ec:f2:44:87:a9:29:d5:f7:a0:8f:fc:0d:cc:f0:f8:9a:35:1f:
5c:7f:ea:0a:92:92:af:a9:e8:b9:7e:7c:a3:81:1e:d3:9f:8c:
ec:11:00:f6:a9:12:36:7b:9f:1d:3d:23:b7:8b:8c:19:3b:78:
05:e3:5e:47:04:c8:f6:19:dd:c3:a5:7c:f9:0d:31:d7:85:85:
33:c7:c5:96:88:3f:98:62:1d:49:81:57:53:d4:55:fc:0b:c3:
68:fe:6f:80:58:0a:ac:49:81:b0:05:43:4d:c0:a4:91:22:9c:
9c:30:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:11:04 2024 by rpki-client on console-ams.rpki-client.org