Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/wcStVivXsm9-jA5xZI6Pob3tcuo.roa
File: wcStVivXsm9-jA5xZI6Pob3tcuo.roa (raw, json)
Hash identifier: Xq6r3s4EFFQ/lOg5SQWBG4PGgk12DhDLKsfAIglZXGc=
Subject key identifier: C1:C4:AD:56:2B:D7:B2:6F:7E:8C:0E:71:64:8E:8F:A1:BD:ED:72:EA
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 018CC793DE251E2ECFD055DCA124F6E4D94F
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/wcStVivXsm9-jA5xZI6Pob3tcuo.roa
Signing time: Tue 02 Jan 2024 00:30:05 +0000
ROA not before: Tue 02 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50570
IP address blocks: 195.191.152.0/24 maxlen: 24
195.191.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:de:25:1e:2e:cf:d0:55:dc:a1:24:f6:e4:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Jan 2 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1c4ad562bd7b26f7e8c0e71648e8fa1bded72ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:11:24:0d:ce:36:5c:76:f4:1d:2d:1d:5f:
38:37:08:08:5d:47:e7:9e:dd:58:cb:d4:c2:2d:fd:
f3:18:3b:b3:39:90:ec:8b:76:69:b1:ff:bf:1f:74:
8f:50:81:a3:b1:99:c6:d7:bf:00:0c:6a:ef:2e:ba:
d9:e1:50:8b:74:c3:9b:db:99:fd:64:42:82:4a:5e:
05:57:e2:47:6a:69:4d:fe:51:54:c3:13:a5:b8:02:
00:4e:f4:3f:c4:6a:8a:f3:b4:1c:37:65:b0:4e:58:
2b:82:e6:b0:d6:1d:f0:1b:94:ef:38:33:b6:63:3d:
e3:f7:69:f9:d4:27:5d:bb:8a:0c:0b:39:fd:1f:50:
2c:c6:c6:6f:be:0b:97:66:c2:2e:17:be:e6:5c:70:
3f:91:98:d0:2a:0d:4b:2e:d7:eb:c0:9e:ef:d2:02:
26:41:ed:a2:d0:34:1f:c7:4e:f1:7c:50:e5:f4:9a:
8c:4f:9f:b1:0d:7b:99:f3:1c:ef:fb:82:5a:cb:ce:
9a:3f:2b:8f:e9:5d:05:dc:45:09:e5:d4:aa:10:09:
91:0e:55:80:7b:19:02:18:5d:4b:34:7e:7d:4d:f6:
4c:80:7b:ca:a1:d6:08:43:4e:51:f7:06:66:04:5e:
7b:6c:53:19:42:74:ef:e4:0e:17:02:aa:b4:43:be:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:AD:56:2B:D7:B2:6F:7E:8C:0E:71:64:8E:8F:A1:BD:ED:72:EA
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/wcStVivXsm9-jA5xZI6Pob3tcuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:e2:08:71:51:e5:e8:4e:53:c6:50:d4:69:ad:de:aa:75:a7:
41:61:b3:d9:b0:7c:48:8b:bb:d6:59:64:d7:09:f7:5d:59:3c:
66:1e:c1:e7:d7:69:da:41:9f:8e:f7:87:a7:09:6c:10:09:ca:
67:43:ea:97:35:20:30:65:52:ee:c2:68:65:94:76:1e:b5:19:
db:19:75:e9:2e:c5:83:27:a3:12:4f:69:d0:ff:44:2d:3d:69:
0f:43:3e:b5:2a:10:1c:e9:a6:0c:e8:c3:a3:d3:56:b6:38:d3:
8f:0a:ce:a3:9f:fa:54:ef:d4:d1:a7:ca:88:8e:db:c3:da:a1:
02:2a:5a:a6:8d:13:7c:7e:02:f8:70:e4:f9:56:3b:43:bc:12:
17:65:fd:c6:84:65:5d:fd:a0:5a:c8:a7:af:ac:ac:24:b3:77:
93:a1:89:1e:09:4d:8e:4e:6a:28:ba:d5:1d:76:b0:a4:b1:0a:
98:ef:51:df:9b:01:86:87:3f:9e:66:8a:2a:7b:2d:bc:0a:3f:
e6:4b:a2:eb:d0:cd:fe:49:4c:ad:fe:ea:98:e4:22:3f:a5:c1:
b1:f9:a1:bf:b4:a5:19:d9:73:94:ac:9a:19:e4:0c:d3:62:42:
7f:a2:11:27:97:10:9f:2f:0a:ee:6d:c9:73:7b:69:45:b1:6b:
b8:1d:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:31 2024 by rpki-client on console-fra.rpki-client.org