Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/Wc8FzPG0JYD1xj5g1hysjT09uc0.roa
File: Wc8FzPG0JYD1xj5g1hysjT09uc0.roa (raw, json)
Hash identifier: o8tSvDqyWfBZm+JRvbb8xIhhfv1TbT2VbZoEeGyXaIk=
Subject key identifier: 59:CF:05:CC:F1:B4:25:80:F5:C6:3E:60:D6:1C:AC:8D:3D:3D:B9:CD
Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial: 018CC26D39E4CD979AA7553916C99D47C704
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/Wc8FzPG0JYD1xj5g1hysjT09uc0.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212076
IP address blocks: 185.231.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:e4:cd:97:9a:a7:55:39:16:c9:9d:47:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59cf05ccf1b42580f5c63e60d61cac8d3d3db9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:83:14:84:11:a8:68:5c:f8:14:84:8f:a6:
4a:56:af:b2:ef:38:b8:93:c9:a1:31:0b:dd:59:af:
61:9c:5e:39:46:5f:31:cc:6e:d0:ad:55:52:c1:4c:
37:0f:e8:1e:47:fd:b8:6b:81:09:f5:02:54:fd:d2:
63:9c:50:55:22:42:ab:82:4a:b9:36:55:7e:13:5d:
a1:6c:76:b2:a0:07:58:9d:95:e4:25:86:93:a3:b6:
e8:8c:ec:45:7e:fd:4f:c6:d1:49:3b:d0:69:6f:5b:
08:5e:16:93:54:94:c5:39:e5:e9:cf:a4:d0:15:05:
6c:70:49:84:a2:7a:01:32:ae:ab:fa:22:55:92:8a:
e6:88:94:0d:4f:2d:8d:f9:4d:82:b3:7e:22:0c:20:
70:62:57:67:d4:8d:bb:4e:c4:e7:5c:96:12:db:d1:
04:ff:e5:f6:e8:91:19:33:f0:d9:f9:e3:bc:39:d5:
1f:05:15:1d:56:48:20:d2:1c:e3:a2:e6:38:34:ae:
89:4e:3d:b3:d3:69:b4:cb:73:5c:2c:d9:25:1e:ad:
74:5c:f8:61:12:28:93:a8:4b:45:6a:b5:0d:d9:5a:
74:60:36:4d:1e:e3:99:54:19:e5:6c:ed:9b:8d:c2:
a9:d1:db:0d:d9:71:0e:a8:67:ed:59:e7:7a:8a:19:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:05:CC:F1:B4:25:80:F5:C6:3E:60:D6:1C:AC:8D:3D:3D:B9:CD
X509v3 Authority Key Identifier:
keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/Wc8FzPG0JYD1xj5g1hysjT09uc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e3:8c:67:30:a5:a9:90:77:c8:21:75:1f:89:a5:26:ae:6d:
73:bb:6f:c2:76:84:29:1c:f9:14:32:d5:41:ba:cf:bc:88:e4:
7b:79:d1:3a:b5:d8:2f:d4:a2:9a:41:d8:39:8b:07:bd:30:2e:
0b:78:56:d7:6d:aa:ed:04:8f:46:ba:65:b2:af:0e:b8:c0:19:
7a:22:25:f2:d1:09:ca:54:c1:43:d9:54:98:40:4a:ec:a7:61:
bd:9c:dc:c8:3e:0a:23:7d:bb:19:56:5b:7a:9a:80:84:f3:99:
b0:ee:68:99:db:8c:b7:bf:e1:4b:1c:b3:12:73:bb:0e:eb:95:
ca:55:90:6f:c7:bf:27:df:59:61:db:7f:80:fa:c0:52:1e:4a:
81:36:6e:c8:8d:e7:78:ff:99:c5:82:95:e7:44:36:e5:a2:4c:
73:d0:30:9d:25:87:82:10:ca:23:3b:c6:a3:6f:1f:0c:52:25:
f7:33:7e:cb:aa:14:16:90:c2:1e:9c:de:87:91:9a:9e:54:bd:
ae:11:ba:83:ae:0e:2f:4f:50:b4:08:65:48:9a:2f:cd:00:fa:
76:69:be:73:f4:c0:d5:f1:65:3d:07:5d:28:36:87:93:38:fe:
8d:3b:1b:a7:49:1f:07:27:e4:56:99:e9:3a:b2:90:62:f9:19:
0d:18:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:55 2024 by rpki-client on console-fra.rpki-client.org