Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWIxlGDkvvsXtQgwqCFw6ZB2bLA.roa
File: WWIxlGDkvvsXtQgwqCFw6ZB2bLA.roa (raw, json)
Hash identifier: kzaG3j7uXoGJLKwng1Gg6U8aOWDCFk2mhoIEw/7BC6o=
Subject key identifier: 59:62:31:94:60:E4:BE:FB:17:B5:08:30:A8:21:70:E9:90:76:6C:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FE301F8035996B988A6DDC0F475283A30
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWIxlGDkvvsXtQgwqCFw6ZB2bLA.roa
Signing time: Tue 04 Jun 2024 11:28:28 +0000
ROA not before: Tue 04 Jun 2024 11:28:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 45.149.241.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:01:f8:03:59:96:b9:88:a6:dd:c0:f4:75:28:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 11:28:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5962319460e4befb17b50830a82170e990766cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:8d:49:76:af:b3:a8:d2:04:ab:39:e6:25:
9b:64:3a:0e:20:10:5a:10:2e:59:56:07:d9:d9:f9:
4b:f1:f3:eb:ae:f1:8c:07:44:18:e0:d5:93:3d:7a:
c6:b6:cd:5b:6d:91:59:6b:a1:02:f0:b3:b5:da:87:
3b:57:5e:0b:d0:71:3f:ce:5f:ac:43:36:a5:c1:cd:
f3:df:b6:60:a2:17:77:a3:d9:47:17:ec:64:a2:87:
e4:d2:a7:6d:1a:95:69:18:f6:43:23:e1:10:e2:fb:
82:e5:92:67:00:24:1a:09:19:9a:54:68:88:53:20:
ce:d5:de:5c:5d:65:36:00:49:01:36:a6:e5:d9:3a:
c8:2e:f0:f3:91:5b:59:42:d9:5a:20:8f:e3:0c:7e:
92:a7:fa:74:95:49:6b:be:fa:21:e3:ef:66:bc:29:
22:b4:77:5c:4d:7a:39:12:f5:74:2b:24:c8:00:68:
0b:51:e8:52:b5:08:47:ea:39:b4:7b:fe:3e:bd:b1:
ba:24:20:6b:d0:65:79:55:13:e7:87:47:b9:61:a5:
f4:d6:f2:9f:2c:6f:12:83:a8:06:a4:b9:44:b6:fe:
34:43:fe:47:18:5f:40:8f:35:95:80:20:b8:78:bd:
41:1e:b7:8a:9f:85:f7:03:c6:0c:d6:4e:cb:47:22:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:31:94:60:E4:BE:FB:17:B5:08:30:A8:21:70:E9:90:76:6C:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWIxlGDkvvsXtQgwqCFw6ZB2bLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.241.0/24
85.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9a:6e:4d:6f:7c:a4:82:f7:b1:3a:29:dd:1a:02:13:7b:a2:
3c:c8:43:32:53:5e:65:44:45:14:b4:f1:dd:81:c2:b6:8f:65:
d9:ed:09:05:fc:1d:91:9c:80:ee:0c:16:7d:55:dc:bd:a8:f3:
c7:c9:3d:76:ba:17:39:e0:e9:e4:31:f8:90:70:b4:4f:67:2c:
d5:44:10:ed:48:94:31:0f:6f:a0:fd:26:73:8b:65:16:56:cf:
d8:d1:d2:5e:4f:f7:6a:9f:ce:22:70:73:f7:70:17:4d:9f:5f:
8a:97:97:3e:ff:65:f6:02:c5:5d:1e:8f:cc:0f:90:5e:36:a9:
5b:60:d1:d9:c8:8a:93:8c:ed:9e:e5:35:d2:f5:08:12:5d:34:
19:a5:19:22:87:d4:83:93:36:85:18:2b:a8:f8:c7:a4:91:e0:
b3:f4:6e:a1:19:d8:d8:b0:35:71:8f:8a:45:51:bd:1e:fd:bf:
0a:59:b2:c6:d6:df:f5:78:f2:36:33:85:e0:66:62:53:8c:99:
f4:68:a7:37:01:85:f8:42:29:57:a4:28:19:17:e4:3d:42:df:
2d:f5:cd:1a:03:bc:fe:2d:67:47:ee:0b:23:2b:14:be:db:47:
74:2a:62:d6:8d:63:c8:94:ab:3b:ae:f1:e6:d6:b9:3e:ac:c2:
00:51:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:18:51 2024 by rpki-client on console-ams.rpki-client.org