Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/_wpWeGksyKHE1XvGTjPjrsE2V9s.roa
File: _wpWeGksyKHE1XvGTjPjrsE2V9s.roa (raw, json)
Hash identifier: gXQShIYYYQx5IzhLt7useGM7n79ZAKC5jt93JsYcA+8=
Subject key identifier: FF:0A:56:78:69:2C:C8:A1:C4:D5:7B:C6:4E:33:E3:AE:C1:36:57:DB
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 018CC7276804856A5D8E3E9F7381B5B21F47
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/_wpWeGksyKHE1XvGTjPjrsE2V9s.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40339
IP address blocks: 81.16.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:68:04:85:6a:5d:8e:3e:9f:73:81:b5:b2:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff0a5678692cc8a1c4d57bc64e33e3aec13657db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:d5:39:db:ed:80:6b:7f:b6:4f:20:72:29:
74:8e:0b:48:d3:de:a0:3d:d7:17:e8:d5:c5:df:78:
fe:e5:5a:01:cf:00:d2:d8:62:b2:4a:b5:c6:a2:f2:
7c:f0:4f:8f:1c:df:c7:cf:2a:cc:5b:40:ce:4c:0a:
4a:73:03:bb:18:fa:cb:7e:03:75:0c:7e:31:db:41:
71:e9:6e:44:04:bb:c5:05:e9:36:ca:16:f5:ff:67:
ec:63:95:04:a4:bb:5c:ce:c0:ca:d6:e3:99:bb:d9:
79:4e:cc:13:0e:a8:3e:aa:ae:4f:68:f4:b8:6d:75:
e5:46:43:3b:0d:ee:73:33:6c:c4:41:ce:82:bb:2d:
e6:89:4a:9e:85:fe:0a:17:67:d8:41:dc:a6:74:b8:
2b:82:07:db:91:c8:3d:39:20:6b:14:f5:56:32:0b:
14:d4:6d:54:46:f4:2e:99:6b:71:10:ea:b2:fc:a7:
76:70:3d:17:e3:fe:93:c8:d8:82:0d:6e:a2:a8:bb:
cd:b1:f0:f4:d5:91:fe:a7:e0:44:2b:c4:aa:1e:e7:
14:7d:b2:af:8d:38:5f:00:03:50:18:bb:b6:da:72:
54:63:91:78:41:1e:87:65:ae:ea:53:04:eb:03:4f:
31:ec:26:e5:2b:d1:f6:42:77:9b:72:fc:5f:3e:76:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:56:78:69:2C:C8:A1:C4:D5:7B:C6:4E:33:E3:AE:C1:36:57:DB
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/_wpWeGksyKHE1XvGTjPjrsE2V9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.184.0/21
Signature Algorithm: sha256WithRSAEncryption
51:51:86:07:95:83:4e:7a:e1:fa:31:dd:48:42:8d:1e:ae:58:
71:8a:a9:3a:65:2d:a3:4a:4a:27:93:30:3a:6c:63:4a:00:12:
e6:66:a8:5f:a1:c5:7d:68:ee:dc:d6:03:ea:62:4f:40:a3:8f:
76:20:f3:e1:66:62:43:a6:c5:1a:be:5d:69:5b:97:37:3e:b3:
81:30:d4:50:f7:4e:5a:4c:75:db:b0:9f:3a:0a:a5:3f:8c:06:
6e:0f:e9:2b:ff:9e:c2:30:37:cf:0e:b5:90:6e:8f:9d:06:f2:
69:52:9c:f2:c5:e2:43:d6:9e:a4:42:e7:53:ad:81:33:01:02:
b8:a1:73:15:29:01:99:d5:72:e0:bd:9e:03:4e:14:43:47:69:
4d:4b:f0:fc:34:4e:20:e5:39:8e:1b:f3:cb:35:dd:c1:9f:e9:
38:a1:c3:4f:ef:b1:a8:40:ff:0f:93:79:55:bc:df:9e:f7:db:
8e:2f:c1:74:0e:a7:af:81:40:73:1d:2b:2c:c3:45:e0:67:0a:
d4:da:f9:2d:73:0a:1f:21:41:b9:33:34:43:31:41:52:c4:b8:
c8:32:a1:62:3b:cc:f3:fa:6d:48:c5:19:44:4c:61:8d:5d:e5:
a6:65:5d:2a:15:f1:f6:5d:9b:79:10:7c:9b:c3:e5:aa:a4:4d:
9c:1d:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:31:17 2024 by rpki-client on console-ams.rpki-client.org