Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/wNhfuSVsVjXLFZtyucGb9o2bToY.roa
File: wNhfuSVsVjXLFZtyucGb9o2bToY.roa (raw, json)
Hash identifier: hYgLdXFncnfg7WBng2YWWzDyMpaz0so79ummcwN2nCc=
Subject key identifier: C0:D8:5F:B9:25:6C:56:35:CB:15:9B:72:B9:C1:9B:F6:8D:9B:4E:86
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 018CC64ADDC7DA0E3AA3FE75B81D3D6F874A
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/wNhfuSVsVjXLFZtyucGb9o2bToY.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140693
IP address blocks: 157.23.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dd:c7:da:0e:3a:a3:fe:75:b8:1d:3d:6f:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0d85fb9256c5635cb159b72b9c19bf68d9b4e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:a9:c3:bd:c7:ed:66:9d:1d:5f:0a:c1:09:
00:95:23:4c:70:75:1c:79:26:12:78:22:0a:0b:e5:
56:fc:15:0c:5c:6c:c1:a6:0b:6c:97:4d:44:8d:bd:
6b:bb:4a:82:ef:a4:48:d6:7c:11:72:85:7a:38:7e:
0f:27:ed:cf:85:c6:4d:76:f3:6a:d8:29:bc:70:0f:
5f:9b:cb:df:09:f7:f7:e6:bd:a5:b0:56:34:c7:31:
05:5b:49:46:e2:8a:64:aa:52:db:f1:ad:a2:1e:b0:
e7:46:e8:6c:49:63:50:66:dd:b7:8c:b4:24:3e:7e:
d4:72:15:a0:cf:43:12:66:79:52:c0:f1:47:f9:ee:
0e:5a:b6:36:9a:e3:45:6e:c3:c5:e9:5e:28:6e:4f:
76:a1:79:e9:d2:bd:64:f3:bc:ab:81:45:4f:27:88:
74:46:72:7d:c6:f5:11:7a:bd:62:ed:ab:a7:dc:66:
29:7b:59:56:20:ac:2a:5f:04:ac:7b:f1:bc:1c:03:
71:ec:85:f4:f8:65:58:fc:0a:d3:cb:c9:fa:d5:bb:
a2:15:e5:86:5d:b1:f9:5b:60:a1:64:d2:c2:99:6b:
fb:c6:bf:31:7f:c8:da:20:a0:a6:24:f0:a6:dc:46:
a1:b9:23:6b:e0:40:26:a6:6c:25:5e:60:f2:97:f6:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:5F:B9:25:6C:56:35:CB:15:9B:72:B9:C1:9B:F6:8D:9B:4E:86
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/wNhfuSVsVjXLFZtyucGb9o2bToY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6d:ac:51:23:5a:be:bc:c9:81:df:38:da:f0:60:ea:00:70:
7e:ad:03:dc:22:5b:b9:70:59:a7:42:fe:80:d4:0a:cb:2e:67:
80:aa:f5:aa:8c:3e:bc:aa:d5:b8:d5:16:c4:54:f7:86:43:df:
cd:7d:64:6a:3f:60:17:54:f7:e9:32:83:13:cb:23:90:a5:54:
9c:3d:33:7e:96:ca:ab:83:96:13:0d:23:3f:fb:36:0d:be:5d:
c2:a9:08:bd:05:bd:d2:56:f0:3e:0f:8c:ab:5c:71:3c:c6:30:
67:a0:8d:b3:27:7c:48:95:97:70:a1:3d:bb:35:65:7f:5a:aa:
92:fc:6d:5c:3d:a9:f5:ce:6f:9f:23:70:15:9c:d2:99:25:08:
a5:5f:ad:96:ad:98:6e:45:b1:8d:90:c4:a9:77:bb:e6:c0:25:
4a:a8:4a:20:57:a1:91:88:65:82:dd:9f:7c:9a:e5:72:59:79:
6d:f9:89:18:60:75:6c:60:1d:37:3b:36:2f:c6:a2:59:44:d0:
84:16:d0:6e:26:6b:62:02:dd:90:eb:b4:97:19:64:e5:88:ec:
cf:d7:b0:08:fc:ef:4c:e7:62:76:77:ed:ae:8c:26:ba:1f:9f:
e2:6d:7d:34:31:76:85:9c:69:2a:d2:e8:bc:82:6e:be:db:8e:
85:cf:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:07:12 2024 by rpki-client on console-fra.rpki-client.org