Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/WNEgePGEKQltlXUVRL8AdpkS13w.roa
File: WNEgePGEKQltlXUVRL8AdpkS13w.roa (raw, json)
Hash identifier: 5OVG1C1yay7VNc0Fqs5oSuogTMkMmg1Z/qxSd89ui8k=
Subject key identifier: 58:D1:20:78:F1:84:29:09:6D:95:75:15:44:BF:00:76:99:12:D7:7C
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 018D7DEC01A6078EF9714B57575B06240D58
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/WNEgePGEKQltlXUVRL8AdpkS13w.roa
Signing time: Tue 06 Feb 2024 10:17:15 +0000
ROA not before: Tue 06 Feb 2024 10:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20765
IP address blocks: 185.84.216.0/22 maxlen: 24
193.96.96.0/21 maxlen: 24
193.102.32.0/22 maxlen: 22
194.45.0.0/22 maxlen: 22
194.45.6.0/23 maxlen: 23
194.115.4.0/24 maxlen: 24
2a05:a880:8000::/40 maxlen: 40
2a05:a880:de10::/48 maxlen: 48
2a05:a880:de52::/48 maxlen: 48
2a05:a880:de56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:ec:01:a6:07:8e:f9:71:4b:57:57:5b:06:24:0d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Feb 6 10:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d12078f18429096d95751544bf00769912d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:98:42:3a:af:6d:f6:c6:76:5f:d1:04:e4:
c4:49:7f:af:5e:97:de:c5:fb:11:b3:1c:7b:33:ef:
63:96:2e:55:86:00:f1:e3:22:c2:d7:ac:43:df:56:
1b:c2:22:d5:2b:45:e9:b1:6c:5f:db:4c:6f:40:e3:
a0:94:c9:5f:0f:28:2f:99:3b:1d:8f:8d:99:f7:95:
1d:8b:b4:0f:e0:65:dd:82:5a:84:38:a5:25:98:75:
a7:80:8b:bb:a7:40:24:42:80:d6:dc:44:24:6f:54:
ca:a6:51:c2:b4:67:4c:4b:50:c3:cf:e4:55:80:a0:
8a:d3:72:5d:92:cd:a9:0d:f4:28:be:7b:7e:14:01:
10:8a:a4:a5:a9:bf:00:56:60:6b:2d:17:27:1f:f7:
99:14:bc:10:57:b9:19:6d:70:8d:de:07:7d:fc:ef:
a9:fc:94:fe:2e:33:aa:98:cd:c3:31:67:2e:86:dd:
a7:7c:f1:5f:58:cd:7f:f9:a0:e2:d3:7a:3c:da:35:
53:0b:f1:7e:67:17:54:e4:2a:91:21:83:e5:1b:6b:
bf:b6:a5:f2:08:bc:bf:83:7c:33:ca:bc:c2:ae:4d:
a6:47:45:5a:dc:16:22:7a:6c:51:ab:a6:a3:31:47:
4b:cd:57:62:68:f9:8e:ba:3e:c3:9f:1e:db:e2:ca:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:20:78:F1:84:29:09:6D:95:75:15:44:BF:00:76:99:12:D7:7C
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/WNEgePGEKQltlXUVRL8AdpkS13w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.216.0/22
193.96.96.0/21
193.102.32.0/22
194.45.0.0/22
194.45.6.0/23
194.115.4.0/24
IPv6:
2a05:a880:8000::/40
2a05:a880:de10::/48
2a05:a880:de52::/48
2a05:a880:de56::/48
Signature Algorithm: sha256WithRSAEncryption
94:57:5e:21:b3:ff:37:8b:60:fe:68:b0:f3:d4:47:c3:cb:96:
9c:56:29:a3:3d:af:f5:3b:75:92:99:22:ca:8e:39:93:76:92:
be:f2:fa:13:d1:b4:c3:d3:f4:99:d3:d4:b1:31:b2:d1:2e:4b:
70:0a:4b:a6:26:e6:b0:8b:41:ce:e9:6a:ff:dc:6f:69:44:63:
99:31:37:7e:4e:f5:94:a4:fa:38:7b:70:ea:32:5a:a1:86:66:
cb:81:92:00:5a:31:d6:e4:d5:1e:d8:fd:a7:2c:5e:ac:d1:f7:
c5:64:e2:d0:c0:f4:95:a2:64:33:68:d7:3c:6a:2e:d9:12:f2:
57:81:5b:ec:b2:18:92:0c:ef:38:09:21:c4:aa:6b:3a:be:fa:
24:cc:5e:03:f1:b0:be:35:b8:a6:0b:d6:38:c9:7e:0e:65:2e:
c2:73:5c:0a:05:d3:05:70:53:33:8c:2d:3c:c7:0c:97:36:eb:
08:79:05:81:de:98:b2:c7:80:80:ba:a7:e7:64:cd:04:be:3c:
9e:2d:eb:bb:7d:bf:16:af:a7:46:5e:bd:e6:ef:92:d0:7b:20:
0d:41:6b:55:3a:e6:92:67:4a:24:1c:a8:aa:0f:c8:8d:d2:39:
68:f0:8a:1d:17:3d:3e:f6:fd:3e:3a:84:a9:21:78:0e:6c:79:
64:18:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:11:38 2024 by rpki-client on console-fra.rpki-client.org