Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/wc-NkHYD5a-81ifWYDtT51kExuQ.roa
File: wc-NkHYD5a-81ifWYDtT51kExuQ.roa (raw, json)
Hash identifier: 6NAeOjLYiqY6PrKpWteJCmHJpKDn9hQLKTr2GIlzdL8=
Subject key identifier: C1:CF:8D:90:76:03:E5:AF:BC:D6:27:D6:60:3B:53:E7:59:04:C6:E4
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 018CC8DF4AACA2F8E1F8B5F50B3AFBF01FE5
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/wc-NkHYD5a-81ifWYDtT51kExuQ.roa
Signing time: Tue 02 Jan 2024 06:32:05 +0000
ROA not before: Tue 02 Jan 2024 06:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6805
IP address blocks: 89.204.128.0/19 maxlen: 19
89.204.128.0/21 maxlen: 21
89.204.130.0/24 maxlen: 24
89.204.135.0/24 maxlen: 24
89.204.136.0/21 maxlen: 21
89.204.144.0/21 maxlen: 21
89.204.152.0/21 maxlen: 21
89.204.153.0/24 maxlen: 24
185.98.140.0/22 maxlen: 22
82.113.96.0/20 maxlen: 20
82.113.96.0/19 maxlen: 19
82.113.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4a:ac:a2:f8:e1:f8:b5:f5:0b:3a:fb:f0:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jan 2 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1cf8d907603e5afbcd627d6603b53e75904c6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:05:6c:a5:40:4c:e9:20:a1:57:2c:1e:ea:
df:32:48:80:25:47:d5:1c:58:93:81:b5:cb:fc:7c:
52:69:70:37:3e:f9:98:c3:d0:f7:03:be:72:81:5e:
ed:14:6d:e3:2c:bd:7d:19:15:5c:14:dd:c8:1f:98:
e8:e1:be:34:19:24:82:74:05:5b:33:13:a7:15:52:
d4:70:ce:bc:2b:ea:5c:19:c0:9d:fa:10:fc:0a:06:
98:9b:b8:f8:c9:9c:ec:ed:a8:73:2b:9f:87:f5:ad:
71:cd:6b:22:a4:8a:92:24:5b:c6:40:23:8f:9b:bb:
60:23:69:07:1e:ef:3f:48:07:71:4c:5c:e4:fe:93:
77:b3:8c:4b:81:22:a5:1d:36:04:13:da:e0:0b:87:
90:49:2b:16:bd:dd:73:3c:af:d1:86:5f:a4:26:3d:
33:a8:f6:95:93:9e:d9:0b:68:b6:cb:10:16:af:86:
92:ef:79:b5:3b:b3:ca:4b:44:95:92:5c:63:e2:45:
c3:08:d0:7a:e2:6a:7c:8e:4d:66:7e:90:8f:1f:4f:
03:5e:a4:5f:da:63:ba:c2:c9:09:37:50:97:02:77:
45:b9:0e:fa:71:9f:47:9c:82:bf:d4:85:84:47:4a:
3e:89:85:f0:54:e8:e5:2d:cc:c3:69:9b:b7:b8:51:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:8D:90:76:03:E5:AF:BC:D6:27:D6:60:3B:53:E7:59:04:C6:E4
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/wc-NkHYD5a-81ifWYDtT51kExuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.113.96.0/19
89.204.128.0/19
185.98.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:4b:c5:b3:77:40:35:a2:2c:97:27:04:0b:b0:5e:a2:a2:1e:
c1:50:43:0b:04:a2:0b:65:56:5d:e8:91:8a:1e:1b:d6:a0:91:
7e:df:15:39:2e:54:55:ee:f6:d4:18:9e:7a:a1:0d:98:a7:f5:
5d:8e:9f:74:13:0e:28:b7:26:44:09:5a:db:58:d1:9f:4b:b2:
11:ce:b8:30:77:50:e1:f3:89:b9:16:3e:5b:78:bf:98:37:3c:
66:6d:fc:5a:2f:d4:31:84:14:87:20:81:ef:c6:f0:67:1b:ba:
be:f7:f7:fc:c0:fd:97:61:06:66:3c:0f:67:f0:32:93:c1:b2:
e5:1c:d5:da:b5:89:9b:db:02:e0:2c:c1:77:51:5d:c2:0f:6a:
22:8e:8f:68:c0:ef:89:96:49:82:85:77:4b:ca:01:d6:05:41:
1b:a5:bf:04:b9:6e:6f:31:2c:fc:d1:ce:2b:9f:9c:24:f8:ee:
61:3a:99:7b:55:55:63:fb:d2:eb:d6:91:21:7a:2f:5d:55:13:
7c:66:a9:04:a0:a6:98:d4:89:12:ea:22:e6:4f:3a:60:96:53:
c9:54:6c:4d:03:67:f2:01:71:9b:1e:57:43:ac:64:51:5c:70:
a9:fe:b0:74:90:48:7d:00:cc:b6:1d:34:3b:35:7e:74:9d:05:
81:52:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:27:39 2024 by rpki-client on console-ams.rpki-client.org