Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/wt_f5rDi4IMl0oLJ8XLZqOLBMNw.roa
File: wt_f5rDi4IMl0oLJ8XLZqOLBMNw.roa (raw, json)
Hash identifier: 0IYkI2u5/eF9GXqFONza1Xl6VHZrsReW2Xm6gSQfrck=
Subject key identifier: C2:DF:DF:E6:B0:E2:E0:83:25:D2:82:C9:F1:72:D9:A8:E2:C1:30:DC
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 018CC94E52AA1CC59A3EE7D6A3EA98C1BCFF
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/wt_f5rDi4IMl0oLJ8XLZqOLBMNw.roa
Signing time: Tue 02 Jan 2024 08:33:22 +0000
ROA not before: Tue 02 Jan 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205780
IP address blocks: 185.206.98.0/24 maxlen: 24
185.206.96.0/24 maxlen: 24
185.206.97.0/24 maxlen: 24
185.206.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:52:aa:1c:c5:9a:3e:e7:d6:a3:ea:98:c1:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Jan 2 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2dfdfe6b0e2e08325d282c9f172d9a8e2c130dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:90:9e:06:31:4e:a2:9c:b0:b9:44:39:51:
85:96:f0:d7:ed:cc:78:77:f2:f3:96:dd:17:27:ae:
0a:04:38:5a:05:58:cd:cd:97:02:86:c5:5d:dc:a0:
4b:69:58:8f:f9:2a:27:1c:3e:e0:6a:77:0f:a1:1d:
63:52:5a:ab:a2:be:1a:a3:65:99:eb:a9:93:f1:6d:
b2:f1:2b:94:5d:d2:5f:bf:2b:27:dd:21:2b:fe:80:
7a:49:d8:dd:9c:3a:d0:b8:39:71:5f:3e:0c:b5:d5:
75:54:f7:4e:bb:27:eb:f2:67:73:d0:e4:71:9d:3e:
55:45:1d:fd:03:c4:5b:b3:23:ec:c6:97:a1:92:85:
11:0f:e6:18:ce:a1:83:f0:92:3a:a9:0c:63:aa:67:
27:3e:5e:6a:9a:93:c8:93:3f:4d:14:84:10:fa:d8:
dd:cf:59:08:1c:49:3a:21:7b:69:75:59:d1:04:ff:
c1:50:58:0a:b7:45:86:d5:8e:4b:9b:92:f6:52:d4:
d1:49:fc:96:97:62:6f:33:62:d9:22:fa:3d:12:6a:
d8:32:9a:73:f5:68:22:45:2f:72:95:94:9b:76:b9:
a1:83:43:c9:8a:cf:e0:e8:2c:9e:62:12:c6:ca:2b:
59:d3:32:81:0f:c8:8f:78:c4:2b:7e:c1:a5:45:6b:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DF:DF:E6:B0:E2:E0:83:25:D2:82:C9:F1:72:D9:A8:E2:C1:30:DC
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/wt_f5rDi4IMl0oLJ8XLZqOLBMNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:75:fe:52:b8:5e:bc:56:29:68:68:4b:18:bb:a0:11:8b:5a:
3e:3a:11:34:cb:09:99:34:bd:ce:80:27:c8:2a:da:dc:18:ef:
f3:9f:b4:cf:1c:ab:39:28:98:60:25:f5:7d:e7:e8:e4:f9:1f:
73:b7:ff:f0:bc:37:2c:6a:b7:59:4e:53:e7:db:ab:e7:4b:1e:
30:94:2c:50:4c:42:53:48:3a:9c:ce:69:49:d2:0d:53:2f:04:
ed:f9:05:86:e6:20:a1:cc:b7:d0:84:be:09:6b:e0:5d:5a:94:
5b:c7:56:ec:14:33:88:34:82:76:f6:31:b6:1d:ae:73:95:4b:
8e:15:49:1a:9b:ca:92:b3:cb:6c:86:80:89:85:58:a7:ca:58:
64:fa:10:dc:a8:05:60:48:8d:90:da:88:68:ce:dc:e7:3e:cd:
41:4c:cc:6b:a6:17:13:8b:3b:d5:4a:6f:52:8f:87:92:27:a9:
0c:11:65:bb:37:06:b5:e7:f1:4d:4c:0b:e9:38:59:06:82:78:
66:9a:e3:db:97:4f:0a:5f:f8:55:4b:36:fc:d4:56:07:25:88:
81:9b:7c:e2:19:aa:99:fa:a6:98:e8:02:54:75:75:27:40:ce:
aa:6f:58:2c:a1:e3:a2:63:e0:e8:2f:a8:60:a5:f3:e9:a2:12:
72:c0:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:34 2024 by rpki-client on console-fra.rpki-client.org