Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/WFlDfDZRhOzLZVY7Dy6Bb4po6WQ.roa
File: WFlDfDZRhOzLZVY7Dy6Bb4po6WQ.roa (raw, json)
Hash identifier: OIvuaI8Sl9ejGKJepuJjP2n+VtNwdCnsMsdmJ+0i1ZM=
Subject key identifier: 58:59:43:7C:36:51:84:EC:CB:65:56:3B:0F:2E:81:6F:8A:68:E9:64
Certificate issuer: /CN=89a041670001660a3720b77d764d836852190138
Certificate serial: 0190886BDD2C65E75F08BE19752DA16951B3
Authority key identifier: 89:A0:41:67:00:01:66:0A:37:20:B7:7D:76:4D:83:68:52:19:01:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaBBZwABZgo3ILd9dk2DaFIZATg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/WFlDfDZRhOzLZVY7Dy6Bb4po6WQ.roa
Signing time: Sat 06 Jul 2024 14:21:28 +0000
ROA not before: Sat 06 Jul 2024 14:21:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209961
IP address blocks: 95.128.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaBBZwABZgo3ILd9dk2DaFIZATg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:6b:dd:2c:65:e7:5f:08:be:19:75:2d:a1:69:51:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a041670001660a3720b77d764d836852190138
Validity
Not Before: Jul 6 14:21:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5859437c365184eccb65563b0f2e816f8a68e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:66:08:ec:b7:a5:11:8d:84:25:44:a7:e2:
4f:2d:c9:99:aa:7e:34:5c:d5:05:2d:77:dd:eb:78:
98:04:5d:74:65:d5:4e:bb:54:9e:74:25:1b:37:df:
c6:49:de:bf:8d:26:1c:e5:50:86:be:58:e9:31:8f:
30:da:c0:ce:b6:cb:e2:df:01:2c:bc:2e:dc:9f:8a:
aa:d4:d9:27:ca:7f:48:ce:48:9d:1d:84:e8:a2:3a:
72:fd:bb:6a:c5:f9:74:d7:e8:61:d1:fd:79:9a:2c:
2b:4b:89:74:f8:8d:8a:bf:a4:04:4b:46:db:d8:93:
f5:d2:f5:88:85:a8:5e:18:04:db:9a:d6:be:fb:1a:
21:f8:bb:4d:5e:02:11:d0:71:9a:6f:e5:ed:56:16:
25:f1:c8:ac:0c:31:df:5d:c0:b3:3c:ff:09:a4:8c:
d5:4f:0c:62:6b:0e:10:ff:18:f2:d6:1e:72:47:fa:
30:49:2c:2b:c3:e9:ce:e8:fc:55:a3:25:be:56:2e:
7e:03:51:b8:bd:40:0c:a3:95:a3:66:45:c8:da:27:
df:53:15:29:8c:bb:9f:04:37:c7:19:42:26:97:09:
9e:97:80:39:ec:a1:dc:cd:06:57:99:f0:32:8f:54:
fb:fa:dd:79:ba:06:13:37:75:3b:c3:6a:b7:7b:e5:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:43:7C:36:51:84:EC:CB:65:56:3B:0F:2E:81:6F:8A:68:E9:64
X509v3 Authority Key Identifier:
keyid:89:A0:41:67:00:01:66:0A:37:20:B7:7D:76:4D:83:68:52:19:01:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaBBZwABZgo3ILd9dk2DaFIZATg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/WFlDfDZRhOzLZVY7Dy6Bb4po6WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.152.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2c:fa:d3:6a:e7:02:1c:51:4b:be:20:eb:a8:5c:c8:58:17:
dd:c0:d1:de:09:0d:1e:f2:d4:9d:36:2b:99:5c:2b:da:73:05:
c7:73:61:96:a8:ec:3a:a4:17:96:f4:29:71:3f:ae:c8:5f:e8:
cf:42:c3:e4:47:1b:fb:c9:90:88:3e:2b:ab:f1:9d:dd:3c:4d:
7d:20:3f:28:72:67:f5:41:10:51:63:65:d8:b7:78:3c:c4:fd:
d5:d3:16:df:59:7a:38:bb:bc:dd:0d:21:f9:26:7f:3b:34:9a:
35:6c:51:df:e4:98:67:4f:c0:d9:81:a2:f4:d2:2d:e1:e0:e8:
68:0d:69:fc:59:8d:06:ae:7b:da:bc:76:db:3a:89:b5:4b:f1:
7a:59:72:f5:f3:ce:de:9c:43:4f:43:7b:25:3a:10:46:54:66:
0b:f7:c6:9b:51:23:5a:22:f6:27:8e:66:ee:fc:9e:72:29:5c:
a3:96:32:53:23:9b:57:b2:a1:2c:78:27:99:b9:a6:35:a1:3f:
94:e4:94:c1:2d:f1:65:a2:fb:2e:39:a4:15:80:cc:37:6c:6e:
d8:3d:c2:8e:10:79:b4:65:41:18:ac:bd:e9:98:0e:a8:a2:e4:
b6:23:fe:1c:4a:44:0a:7c:02:4b:53:c9:b6:e0:28:b8:37:2f:
80:10:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:35:26 2024 by rpki-client on console-fra.rpki-client.org