Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaNZIXAU210uA-2kSa3A_I2ns_g.roa
File: WaNZIXAU210uA-2kSa3A_I2ns_g.roa (raw, json)
Hash identifier: LKQI8SZcYtyipkKcZjPMuUOPob1Rw9+6IICJxMTKI9w=
Subject key identifier: 59:A3:59:21:70:14:DB:5D:2E:03:ED:A4:49:AD:C0:FC:8D:A7:B3:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A90B6070C8F9BC4B89E74D41B1663
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaNZIXAU210uA-2kSa3A_I2ns_g.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 195.133.193.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:90:b6:07:0c:8f:9b:c4:b8:9e:74:d4:1b:16:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a359217014db5d2e03eda449adc0fc8da7b3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7e:32:43:a0:b0:14:07:28:b7:c9:07:91:88:
a7:db:73:69:e3:e8:56:0b:52:32:91:07:df:68:1e:
72:d0:17:6d:92:66:30:cb:d6:1d:4f:f4:bc:e1:44:
6e:54:0a:48:ee:dd:5d:b6:aa:0b:74:6a:07:ab:c2:
9d:ae:96:34:eb:89:4e:b2:97:44:34:c2:37:05:92:
3b:06:18:2d:07:0c:10:08:54:2f:ab:54:4f:7a:ef:
bb:49:45:31:69:97:8f:ab:9d:79:5b:57:a1:6d:71:
13:2c:0c:1d:69:e3:00:c2:98:8f:ec:57:50:51:bb:
c3:7d:e9:17:60:49:29:5a:fe:1d:8d:6d:12:22:a5:
43:16:af:8e:58:17:bc:eb:6b:94:e4:53:ea:30:60:
e8:b7:dd:f9:95:46:de:b5:93:17:da:89:16:54:4f:
0e:a7:85:ba:2e:56:36:1c:13:57:f8:8e:62:36:80:
45:51:b3:64:d7:20:0b:94:c2:e5:13:ec:98:7d:a6:
c8:87:ae:1b:d0:2e:9d:da:f0:3a:7d:2c:73:b0:72:
1f:c4:5d:ad:c4:a0:6f:35:52:b2:02:c6:fb:c2:c4:
19:de:b2:dc:f7:33:8f:36:0c:61:02:94:2e:61:b0:
b8:43:d6:9c:35:db:b1:34:2b:39:1f:ae:0b:c3:b5:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:59:21:70:14:DB:5D:2E:03:ED:A4:49:AD:C0:FC:8D:A7:B3:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WaNZIXAU210uA-2kSa3A_I2ns_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.126.0/24
195.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d8:f0:17:46:7d:fa:e3:ae:ec:62:1a:89:95:7b:70:bb:a3:
1b:e2:75:64:6e:cb:ed:e1:a6:08:2e:4c:46:28:dc:d7:ed:b6:
39:11:4b:f7:16:d1:64:77:46:43:66:91:f1:e2:a5:cc:bd:ce:
63:81:15:87:f9:b7:d0:89:4b:39:84:4c:5d:48:de:06:0d:c6:
ca:4b:1a:a2:b9:46:b6:1c:db:5e:7d:cc:ac:70:1a:02:1b:3a:
0a:ce:b4:1a:bd:ec:52:e6:67:7c:fc:95:55:10:cb:e2:57:a5:
68:85:58:a7:43:68:2e:40:bd:16:d3:1a:35:cf:fd:7a:b5:71:
96:5a:6c:b4:a9:56:49:e7:61:ad:4a:62:61:30:35:b1:f5:92:
e6:00:ab:90:32:65:4c:93:93:04:d0:7b:bf:2d:5c:b8:a7:30:
99:63:44:2f:c9:e1:a4:26:ee:72:e1:22:6f:af:85:66:7a:1c:
46:f7:5e:2a:f8:0d:dd:21:85:eb:4a:f9:44:35:16:08:9d:4c:
e6:f0:d8:fd:11:a6:1f:2d:7d:1e:91:c5:df:c2:19:65:be:8d:
ac:fe:89:2a:ed:2a:63:f8:26:d0:35:22:b8:79:9f:5a:dc:76:
e4:ef:4c:dd:2c:61:c2:4a:8f:3d:54:2e:7d:d8:80:be:b1:6e:
fc:21:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:56 2024 by rpki-client on console-fra.rpki-client.org