Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wa6FnuLL3UpFE-EUMy21bwkRKuU.roa
File: wa6FnuLL3UpFE-EUMy21bwkRKuU.roa (raw, json)
Hash identifier: vrNqPOx9dPZAYQv8BvKHwTAmXtI7YSJB91c8QL9a5wQ=
Subject key identifier: C1:AE:85:9E:E2:CB:DD:4A:45:13:E1:14:33:2D:B5:6F:09:11:2A:E5
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018E2479DD5CF73714670C2C4BF7146BA4CC
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wa6FnuLL3UpFE-EUMy21bwkRKuU.roa
Signing time: Sat 09 Mar 2024 18:29:10 +0000
ROA not before: Sat 09 Mar 2024 18:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.130.0/24 maxlen: 24
81.22.135.0/24 maxlen: 24
89.185.1.0/24 maxlen: 24
89.185.3.0/24 maxlen: 24
109.72.117.0/24 maxlen: 24
109.72.120.0/24 maxlen: 24
109.72.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:24:79:dd:5c:f7:37:14:67:0c:2c:4b:f7:14:6b:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 9 18:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ae859ee2cbdd4a4513e114332db56f09112ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:7c:b6:48:34:39:fc:06:d3:ee:b2:5e:e4:
92:5a:56:9e:00:4b:19:02:07:11:b8:3a:4d:c8:ce:
f6:8c:8a:85:0d:42:89:a8:2a:f3:21:67:55:13:68:
b0:a2:e5:c7:2c:b5:a1:bb:c1:31:0c:95:41:63:13:
06:26:48:14:cc:b3:c6:81:75:5e:33:61:7d:34:dc:
98:f0:cd:fb:a2:ba:a4:4f:ba:7c:e7:19:aa:da:ef:
fd:e5:50:39:cf:2a:e2:e5:39:09:1d:d7:f5:31:30:
31:7a:48:42:ca:19:26:58:cc:ab:55:14:19:05:9b:
bc:1b:de:fd:5f:54:04:3d:26:b7:27:28:69:23:d5:
8e:2d:a6:89:29:b4:37:69:96:bc:00:cb:64:e4:52:
f0:5a:67:a7:29:c0:45:7b:26:e1:9e:7a:54:8b:e3:
8a:3c:50:ec:76:28:ee:a3:7e:5c:42:27:16:05:29:
f4:5e:66:30:71:be:c4:ee:31:a8:96:0d:0d:ae:c1:
c4:8e:6e:b3:8a:f4:61:b3:9f:0c:ed:df:24:7f:6f:
2a:4d:e0:42:7a:5d:9e:93:ad:83:83:4f:d8:28:f3:
c9:45:98:1a:ac:58:d9:17:92:d4:c4:54:0b:1a:40:
08:00:cb:5e:35:2e:0c:43:32:6c:3f:f2:76:cb:0a:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:85:9E:E2:CB:DD:4A:45:13:E1:14:33:2D:B5:6F:09:11:2A:E5
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wa6FnuLL3UpFE-EUMy21bwkRKuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.130.0/24
81.22.135.0/24
89.185.1.0/24
89.185.3.0/24
109.72.117.0/24
109.72.120.0/24
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
87:52:77:7c:5d:a8:45:63:0d:6f:47:2f:d9:b9:bd:92:c2:f9:
f6:a2:9d:7d:0e:64:38:86:9a:85:a1:52:01:34:31:73:8c:57:
9f:37:a0:b2:44:e5:a9:2f:70:99:80:8e:95:d3:83:76:03:0f:
5a:4e:38:58:48:d1:b6:e2:8b:89:10:d9:35:19:39:e9:3f:b9:
cf:2e:ff:fc:59:bb:1c:93:56:96:ce:09:94:9a:86:15:de:48:
28:34:46:f3:b3:50:18:1a:9e:79:38:f7:83:ae:52:43:b2:dc:
33:a6:a1:72:ac:6b:7c:07:60:f0:a6:35:49:96:4b:ca:5d:46:
52:ef:38:9c:46:08:01:13:04:68:85:30:88:a7:88:0e:78:01:
ed:b2:c0:0e:cb:9c:51:2b:bc:b7:e5:8c:35:19:21:f9:fe:43:
0b:74:a4:35:1a:47:9c:69:eb:de:49:5e:40:1f:7f:9e:7f:a7:
0b:30:73:2e:36:0f:fb:4b:e2:24:86:18:1c:bc:a2:8a:c2:25:
0f:36:d5:41:1e:58:f2:c7:3d:b5:e7:39:92:4e:79:91:03:42:
5f:b4:41:7e:23:be:21:0c:09:80:6f:7c:64:f9:b4:f7:3f:f0:
77:1a:6c:7a:39:b1:4e:dd:42:24:36:fa:08:3d:6a:29:06:44:
18:e9:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:30 2024 by rpki-client on console-fra.rpki-client.org