Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/WaQFdkA98NwYW-rwUVChCOJdHcY.roa
File: WaQFdkA98NwYW-rwUVChCOJdHcY.roa (raw, json)
Hash identifier: NbEQrnuzbKu3MiLkrJTUKTf3DNqe8Vas9PwwiERasbg=
Subject key identifier: 59:A4:05:76:40:3D:F0:DC:18:5B:EA:F0:51:50:A1:08:E2:5D:1D:C6
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 018CC9BC8E47C533F3D83A91C42A6D630840
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/WaQFdkA98NwYW-rwUVChCOJdHcY.roa
Signing time: Tue 02 Jan 2024 10:33:46 +0000
ROA not before: Tue 02 Jan 2024 10:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50473
IP address blocks: 188.64.165.0/24 maxlen: 24
185.61.76.0/22 maxlen: 22
188.64.166.0/23 maxlen: 23
185.42.124.0/23 maxlen: 23
185.42.126.0/23 maxlen: 23
193.105.59.0/24 maxlen: 24
46.151.152.0/21 maxlen: 21
46.151.155.0/24 maxlen: 24
80.251.224.0/20 maxlen: 20
195.216.241.0/24 maxlen: 24
185.21.156.0/22 maxlen: 22
91.214.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8e:47:c5:33:f3:d8:3a:91:c4:2a:6d:63:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a40576403df0dc185beaf05150a108e25d1dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:eb:86:0d:62:ec:9f:43:ce:6f:e1:68:c2:
f0:18:02:6d:26:c9:92:c3:50:1f:fb:19:03:81:14:
d8:e6:3c:34:b2:6e:20:92:50:ec:d4:a8:38:c9:57:
e4:80:62:d2:b0:f8:ba:4a:b4:8b:8d:9c:7e:32:9d:
38:73:a0:50:8c:a6:8f:d4:83:a9:08:7f:73:6e:24:
ef:9b:c4:18:f6:49:27:e8:b6:77:fc:42:33:47:88:
46:7c:d9:34:77:f9:69:55:7e:0d:88:e8:04:2e:a9:
b0:8d:bb:32:be:12:c7:9e:0d:ec:2f:12:68:dc:34:
82:9d:7f:3e:a8:13:aa:fb:cf:f8:20:3b:15:1e:7a:
71:0c:b3:0f:11:2f:a2:fd:30:e7:57:4b:1b:7b:0f:
25:ab:05:43:ad:72:e4:a5:69:1c:92:8c:74:a3:7f:
11:5e:65:72:31:2d:d2:96:a6:96:c4:33:ea:27:13:
f1:5b:46:c3:8b:ae:1f:01:cc:fe:39:d4:57:1c:4d:
b3:54:7f:06:2e:d4:b8:64:bd:1f:5f:37:6e:94:b5:
69:8c:0f:29:a0:e1:3a:7a:74:79:99:d8:dd:d5:48:
97:46:fd:d6:ad:e4:48:67:b0:c8:e9:65:21:8a:17:
a6:e0:90:e5:83:cd:92:ec:fa:5d:32:22:0b:43:d8:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:05:76:40:3D:F0:DC:18:5B:EA:F0:51:50:A1:08:E2:5D:1D:C6
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/WaQFdkA98NwYW-rwUVChCOJdHcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.152.0/21
80.251.224.0/20
91.214.240.0/22
185.21.156.0/22
185.42.124.0/22
185.61.76.0/22
188.64.165.0-188.64.167.255
193.105.59.0/24
195.216.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:41:95:59:cd:11:17:66:35:b1:9c:b3:ae:0a:db:1f:9e:8d:
e2:b8:fa:a6:60:9f:a2:d9:db:b8:0a:16:51:2b:15:60:42:d3:
58:87:a0:ed:a2:fd:07:42:ee:c2:90:e8:99:ce:70:af:af:4f:
b1:2f:96:e2:4a:92:dd:fa:2a:ad:ae:a1:f5:ef:24:6f:19:7a:
48:88:47:5b:8a:23:86:c3:15:38:1b:e8:e1:44:37:d3:99:f7:
d2:13:91:3d:ed:14:aa:3c:88:cb:95:e5:ab:8d:c3:3f:a9:91:
ec:4e:b2:30:75:10:08:1f:83:a4:6d:45:a7:c0:b5:c5:77:fc:
cb:45:fc:04:2b:8e:69:d4:c0:bd:e8:ba:a2:8d:2f:ef:a9:02:
a9:a1:21:bf:cf:61:39:02:2d:b4:12:38:6f:9c:5a:0c:b9:b7:
74:85:26:64:f4:da:6a:cc:7d:98:fb:d1:92:8f:fd:04:44:c5:
2e:81:ea:b7:2f:6e:4e:77:0c:fc:4c:87:35:6c:d5:13:da:2c:
b6:22:cc:e3:bd:10:0a:20:73:87:c5:3c:1b:2c:e3:a3:05:b2:
b0:2b:9a:11:e2:0c:c2:a8:97:1b:98:b5:11:61:b2:6e:14:f2:
2b:a3:dd:38:42:88:59:68:35:3b:80:16:33:b4:1b:f6:4c:a5:
b0:fb:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:02 2024 by rpki-client on console-ams.rpki-client.org