Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/WWAxwrjQNnyuI0Xk0vwDaJRcK8k.roa
File: WWAxwrjQNnyuI0Xk0vwDaJRcK8k.roa (raw, json)
Hash identifier: oE3MOzEkpbtkz1iLRJ1zRCK0Yrj8orhtWDfIlKaZU/w=
Subject key identifier: 59:60:31:C2:B8:D0:36:7C:AE:23:45:E4:D2:FC:03:68:94:5C:2B:C9
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 018CC6B9419C42BE5379DBC86ECC868E3C6B
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/WWAxwrjQNnyuI0Xk0vwDaJRcK8k.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29655
IP address blocks: 185.32.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:41:9c:42:be:53:79:db:c8:6e:cc:86:8e:3c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596031c2b8d0367cae2345e4d2fc0368945c2bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:3b:40:32:44:69:d1:23:74:40:6e:f7:7d:
8b:69:be:5d:ed:85:92:18:a9:0c:08:1b:73:0f:10:
75:ff:fd:a3:03:35:3d:29:1e:13:24:6a:6a:d3:22:
7f:74:c4:5c:25:43:f2:a9:b0:23:ac:d2:78:a9:33:
c8:e2:89:9f:cc:49:93:cd:a0:7e:12:0f:6b:30:b0:
e7:52:d7:b5:f4:5d:d5:1b:4b:e4:cd:d4:78:01:35:
f9:cd:2f:c9:9a:ee:82:54:78:53:bd:2b:58:ed:e1:
02:06:5e:20:0f:9f:79:19:7f:d6:f5:50:c0:7e:ae:
d0:e6:fb:2a:c4:3a:f5:1f:48:7a:93:c4:5a:59:b9:
15:fe:b0:24:07:b7:a8:23:ee:7c:11:82:ec:9b:07:
ea:b9:63:69:c6:20:bc:8b:84:b7:64:a9:0f:0e:0a:
8e:f6:e6:d1:1a:cf:d6:01:5d:3f:88:ac:24:37:44:
69:20:b0:b3:4f:3b:4f:33:92:e3:03:fe:3f:5b:2d:
fd:c3:bc:09:f0:fc:0e:ff:67:b3:c2:cf:cd:9b:49:
c8:9e:d0:51:bb:0c:45:5d:47:ad:73:ff:2b:06:73:
47:25:c1:38:ea:d9:28:50:55:2c:29:4d:54:fd:22:
b3:ae:80:18:3e:6f:9f:1a:aa:fc:60:d3:20:fd:fa:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:60:31:C2:B8:D0:36:7C:AE:23:45:E4:D2:FC:03:68:94:5C:2B:C9
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/WWAxwrjQNnyuI0Xk0vwDaJRcK8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9f:e6:7b:b6:d6:08:e3:1c:9b:0b:46:16:dc:4f:c8:18:0c:
10:c1:90:89:bd:a7:67:71:b5:3d:29:81:6e:e0:34:71:70:53:
34:34:76:47:08:8c:36:20:b6:27:23:af:40:2a:2a:47:16:dd:
ae:9e:86:c3:e6:59:79:a9:b0:9c:ef:d6:da:43:65:a6:0f:43:
33:d3:83:d4:8e:80:86:06:66:1d:75:1a:cf:f5:0e:93:4b:a8:
67:1a:7b:53:b3:00:41:e4:11:7d:f1:39:dd:dc:d4:55:1b:58:
89:7d:2f:3b:f7:1a:88:64:37:d8:3e:e8:3a:09:6e:fd:90:45:
d3:8b:5e:d7:cf:08:1b:33:65:e1:d9:e0:06:6a:5c:02:a8:80:
32:06:74:73:0e:b3:eb:d6:3f:9b:ab:67:5a:3b:9c:7d:d3:b3:
bd:59:fc:49:2c:d1:7f:62:91:d3:29:38:6c:81:1c:fc:f4:2d:
e2:19:b7:6a:aa:64:21:55:c6:f0:81:56:6a:4f:da:d2:a4:37:
00:16:7e:42:a7:e6:12:23:60:29:36:dc:ef:23:68:d0:d3:0c:
41:a3:ce:96:d0:54:3f:ee:ae:2e:c0:fa:50:05:37:be:87:71:
0c:cd:a7:e4:94:47:91:0d:ae:a3:52:6f:72:d1:1d:6c:e7:bb:
da:af:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:26 2024 by rpki-client on console-fra.rpki-client.org