Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/Wo2pidpt1F1BnZzTAH-vnRXPi_U.roa
File: Wo2pidpt1F1BnZzTAH-vnRXPi_U.roa (raw, json)
Hash identifier: F7dNQzPw0pZt0eBcJ+Em7GCG1v39jCHMM+xDF/09mhA=
Subject key identifier: 5A:8D:A9:89:DA:6D:D4:5D:41:9D:9C:D3:00:7F:AF:9D:15:CF:8B:F5
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 018F04973241AA9D953BC03E8F64F9D5E8C9
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/Wo2pidpt1F1BnZzTAH-vnRXPi_U.roa
Signing time: Mon 22 Apr 2024 06:56:08 +0000
ROA not before: Mon 22 Apr 2024 06:56:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 185.140.64.0/22 maxlen: 22
213.194.128.0/20 maxlen: 20
213.194.144.0/21 maxlen: 21
213.194.152.0/21 maxlen: 21
213.194.160.0/20 maxlen: 20
213.194.176.0/22 maxlen: 22
213.194.180.0/22 maxlen: 22
213.194.184.0/21 maxlen: 21
213.195.78.0/24 maxlen: 24
213.195.96.0/20 maxlen: 20
213.195.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:97:32:41:aa:9d:95:3b:c0:3e:8f:64:f9:d5:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Apr 22 06:56:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a8da989da6dd45d419d9cd3007faf9d15cf8bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:4a:19:47:6c:7d:06:36:e9:8b:8c:40:1b:
58:9d:d9:b0:1a:60:06:c5:a1:57:d1:e0:1d:1b:b1:
5c:3b:d3:89:88:42:0a:6f:d7:b0:7c:ef:47:5a:73:
84:ac:95:1b:bb:67:19:51:d0:8b:97:b4:5c:b5:68:
07:3b:02:dd:3f:00:ce:bd:ef:84:e9:46:49:ff:18:
1f:04:e6:d3:b8:be:8a:d2:f9:9d:f4:4a:8b:5a:05:
42:a5:5f:27:fd:3c:bd:24:46:99:71:1a:34:38:3d:
09:a9:92:aa:9b:89:46:ab:e9:eb:0a:56:ec:d8:d0:
94:21:19:84:60:34:ae:0c:f2:52:ad:8c:46:70:e2:
75:44:fc:6e:16:4e:0a:c4:02:a9:e6:04:2d:19:c6:
9e:63:f7:31:37:54:21:13:2b:ee:21:5a:e5:81:a7:
47:24:a5:d0:8a:dc:de:94:21:bc:f6:6b:6d:1d:3d:
ca:08:66:05:2e:5a:d8:01:61:4e:90:f5:80:6b:9d:
ef:c4:81:59:0c:e6:12:b6:d6:51:23:fc:c9:dd:a4:
09:11:69:e0:0c:b6:f7:5d:47:33:4a:ce:11:b3:a5:
3f:1e:03:43:d4:2a:c3:ba:cb:9e:7d:fb:bc:18:f2:
c3:00:e5:8a:38:ed:aa:b5:72:e4:54:70:37:3d:a6:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:A9:89:DA:6D:D4:5D:41:9D:9C:D3:00:7F:AF:9D:15:CF:8B:F5
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/Wo2pidpt1F1BnZzTAH-vnRXPi_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.64.0/22
213.194.128.0/18
213.195.78.0/24
213.195.96.0/19
Signature Algorithm: sha256WithRSAEncryption
59:69:50:83:37:82:01:3d:67:03:d1:da:fb:f4:a7:4f:4a:65:
3a:6f:5b:26:18:66:6d:07:81:ea:f1:03:5f:05:c8:9a:8f:14:
67:62:c4:40:3e:41:55:83:b7:31:07:c9:70:17:65:01:84:73:
61:9b:da:02:81:fd:5e:85:25:dc:fe:ed:02:69:a3:c6:8f:46:
8d:68:60:c0:28:30:32:4a:fd:fa:b7:af:f3:a8:57:21:a2:7f:
39:ee:3b:bc:b6:5e:27:27:ea:02:10:c8:d5:c5:be:ca:96:a4:
8d:b1:41:de:f4:b7:e4:17:2d:a7:7b:9e:d0:26:4b:7e:cb:61:
30:2e:b0:51:eb:7d:b2:d7:a2:ce:da:f3:31:7c:5f:15:f8:b8:
9e:50:0c:a4:b7:30:19:85:94:e4:31:ea:1f:00:19:0e:af:b2:
a6:32:23:82:4d:03:43:fb:22:68:82:5f:dd:1e:ac:99:f3:e9:
e2:d4:af:c4:e3:72:31:72:fc:a5:a5:4d:57:e4:21:ab:81:32:
51:67:5c:2f:db:98:b1:72:4f:f0:cf:64:2e:6b:1b:f1:d7:73:
32:81:a5:66:52:d8:84:34:92:d3:d2:db:8d:f1:50:8e:2c:36:
57:6b:12:c9:96:d7:9c:23:00:5c:a5:87:17:85:e5:75:5e:2e:
1d:ce:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:35:37 2024 by rpki-client on console-fra.rpki-client.org