Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa
File: w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa (raw, json)
Hash identifier: 8KQZb7GYsVixIwNbDFxseW3bdy0fX82eHSBnZCQDuV8=
Subject key identifier: C3:EA:FD:13:0D:08:22:BC:61:0E:33:4C:53:62:29:F3:B8:C8:C0:59
Certificate issuer: /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial: 018CC348FF0A1851EE80705B9DC713321C91
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42184
IP address blocks: 185.153.140.0/22 maxlen: 24
2a0f:8880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ff:0a:18:51:ee:80:70:5b:9d:c7:13:32:1c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3eafd130d0822bc610e334c536229f3b8c8c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:1e:a5:2d:ce:82:b0:9d:ae:cc:e6:ab:bb:
b1:4a:68:52:04:56:bc:2e:60:8c:2e:56:a1:84:c8:
34:e5:a3:50:c8:a0:c8:22:c5:a6:24:e4:9a:be:0f:
40:48:c7:04:a5:cd:fa:08:75:c6:86:f9:94:69:cf:
7f:69:57:b1:b9:bf:eb:60:40:1b:27:c5:b7:b1:65:
fa:d2:e6:7f:93:16:f2:f9:c0:d4:1a:4b:bf:ec:84:
ee:1f:3d:86:a0:ad:7e:28:05:2a:7c:66:34:bd:00:
d7:1d:20:a0:28:c4:ee:57:07:8c:cd:df:b8:7c:11:
4f:86:dc:c0:00:73:95:23:d0:35:10:f0:dc:93:e6:
6a:bc:d1:7a:00:c9:d2:f3:ee:3c:61:15:27:ef:79:
01:80:37:07:41:f3:40:9b:35:be:6d:47:9c:b6:87:
6d:8d:2b:c9:41:8f:75:4e:e2:7f:37:e3:c9:84:1c:
f1:c6:b3:1b:54:49:38:4d:b7:36:cb:ec:e9:14:ad:
0b:53:cf:c6:bd:3e:c8:a9:89:de:89:66:f2:5d:58:
44:db:68:a9:72:f1:8a:d4:cb:61:91:5c:cd:28:d0:
b3:f2:bf:e8:62:fd:96:68:73:ee:7c:3f:11:e8:df:
32:b6:0f:63:f0:89:8a:8c:94:8a:d6:0e:87:ba:a5:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:FD:13:0D:08:22:BC:61:0E:33:4C:53:62:29:F3:B8:C8:C0:59
X509v3 Authority Key Identifier:
keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.140.0/22
IPv6:
2a0f:8880::/29
Signature Algorithm: sha256WithRSAEncryption
4b:13:d6:b8:73:83:92:68:b7:aa:36:6f:44:6f:20:7b:32:1e:
cf:84:55:52:7f:c3:ea:33:d9:b9:eb:ac:1d:39:f9:ca:ec:0f:
7f:f8:26:df:81:84:63:f2:30:47:7a:8f:f1:22:b1:8d:b9:cd:
fb:de:5f:8c:42:df:c9:f9:92:08:07:6f:37:7d:20:dd:97:c5:
91:5b:84:eb:f5:b5:a2:28:ee:96:7a:6f:39:e5:55:6b:28:82:
dd:b4:8e:76:57:4a:64:37:51:f1:26:85:e1:b1:cd:1b:7b:70:
5b:2a:72:3f:bb:06:85:fe:8f:22:6e:f6:94:d8:a4:1b:1c:71:
f5:5c:00:38:c0:bb:27:19:17:93:9c:19:ee:29:c2:86:0a:3e:
d3:66:22:e4:2a:e9:3e:8a:58:6d:cb:cc:98:4b:27:56:cf:cb:
bb:61:ca:e5:32:15:b3:99:d1:f1:f8:da:95:3a:ea:33:1f:88:
52:7a:9e:84:de:ca:98:02:36:92:da:7f:cd:5a:b6:d0:89:74:
21:51:33:41:ae:34:f2:af:c4:81:06:6d:c3:8a:45:66:d4:3e:
e8:a7:2a:5f:f0:30:60:16:a9:63:8c:59:9a:3d:97:14:b4:89:
b6:3a:18:08:9b:0c:02:66:60:4e:eb:40:c4:0a:f6:e2:57:33:
60:62:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:04 2024 by rpki-client on console-fra.rpki-client.org