Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa
File: WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa (raw, json)
Hash identifier: jdOJ6baUPje4Gr5Tcn3mxxHfT0Etu5YoePfzEZD5IrE=
Subject key identifier: 58:0D:81:CD:57:2E:EA:B6:68:5A:F8:C3:3C:4C:2A:19:F2:C5:D5:FC
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 018CC26D824765A4292C7BE346E48EA4B052
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47949
IP address blocks: 185.7.45.0/24 maxlen: 24
92.43.24.0/21 maxlen: 21
2a02:29c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:82:47:65:a4:29:2c:7b:e3:46:e4:8e:a4:b0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=580d81cd572eeab6685af8c33c4c2a19f2c5d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:65:d4:8a:e9:5e:f5:4d:39:f5:1e:e3:6d:
fa:72:8b:57:e6:e8:05:df:33:74:09:ef:1b:18:79:
da:3b:58:20:17:94:fb:14:58:02:08:7e:b7:f7:64:
f7:29:b9:62:e6:7e:38:ac:17:d5:36:08:e7:d7:69:
cf:be:8f:4e:82:85:4a:22:b3:34:54:8e:40:7c:cc:
28:03:ad:91:93:3c:8b:6f:b0:24:3f:0e:e3:97:87:
e5:66:14:38:2e:c2:37:de:1f:1f:b3:66:0e:b2:f8:
65:17:85:93:c1:44:6d:29:59:3b:f8:c8:0b:43:67:
b9:19:04:20:ae:c7:b2:aa:d0:f5:b6:b6:17:e9:a3:
1a:a7:47:7d:36:70:7a:4d:c3:9d:dd:39:6c:26:15:
2c:2c:8d:cf:22:d9:05:94:01:c5:24:e2:05:05:24:
b8:b5:8e:19:c9:72:bc:db:c6:e4:94:47:85:28:aa:
39:33:93:c7:d4:82:ac:14:0a:73:be:35:4f:29:4c:
c5:a4:32:79:94:20:dd:09:89:74:08:79:3a:ac:7b:
d4:df:b6:28:1e:d8:cc:bb:ee:97:33:a3:b1:52:d3:
32:47:3d:25:6e:8d:64:ed:98:01:d2:ad:51:d7:4f:
73:68:59:f9:ce:67:e1:c9:c8:18:15:5d:31:02:91:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0D:81:CD:57:2E:EA:B6:68:5A:F8:C3:3C:4C:2A:19:F2:C5:D5:FC
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/WA2BzVcu6rZoWvjDPEwqGfLF1fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.24.0/21
185.7.45.0/24
IPv6:
2a02:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:60:35:d9:44:01:88:8e:e5:d5:fd:44:17:ca:29:6d:e7:69:
b3:2d:7a:28:fb:d6:bc:c9:e7:e4:86:bb:6b:70:00:97:1a:ab:
47:28:be:a4:a5:e3:97:cc:72:a8:a5:ec:a5:d6:ba:66:85:15:
67:ce:27:ab:92:6f:b9:4d:ef:cb:8a:5d:ee:74:55:05:d4:01:
99:75:f4:96:9a:d8:64:49:31:00:ef:d0:c3:4d:27:76:33:a9:
54:a7:5b:c1:62:be:51:74:0b:f1:d5:ee:29:17:17:c3:76:89:
22:85:0a:f7:9b:61:0b:4e:76:9e:2a:88:d4:d0:d2:81:1b:f6:
00:c6:88:56:88:4f:8f:d1:9a:9e:78:59:82:a3:8d:05:83:32:
73:22:bd:5c:a0:4e:aa:10:9a:a0:11:1c:28:a9:52:62:91:7c:
57:bc:5f:ed:04:77:5e:63:31:63:1a:ca:b0:d1:a4:57:7f:5f:
08:d4:a8:61:b6:db:ee:f3:d2:77:6a:69:9b:00:57:5a:24:d5:
c7:bf:10:6e:a4:fa:51:a4:7c:04:09:00:38:ba:4f:50:01:a8:
23:9d:24:5f:f2:3d:12:c0:73:d2:04:d9:ba:10:82:0c:27:01:
9c:e6:19:ca:18:09:e4:cd:f7:ea:4c:e1:06:6c:68:fb:48:4a:
dc:fb:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:16:02 2024 by rpki-client on console-fra.rpki-client.org