Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/WtbJ4PFDFjEXx7zTkkal8lc5LPk.roa
File: WtbJ4PFDFjEXx7zTkkal8lc5LPk.roa (raw, json)
Hash identifier: uLofIPwXfLWb/2egwNtpMdHgJ/1ojwvjQxsVObQ6f0U=
Subject key identifier: 5A:D6:C9:E0:F1:43:16:31:17:C7:BC:D3:92:46:A5:F2:57:39:2C:F9
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 018CC7940FEA78B81726F19684D8905E3034
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/WtbJ4PFDFjEXx7zTkkal8lc5LPk.roa
Signing time: Tue 02 Jan 2024 00:30:18 +0000
ROA not before: Tue 02 Jan 2024 00:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 185.180.147.0/24 maxlen: 24
45.133.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0f:ea:78:b8:17:26:f1:96:84:d8:90:5e:30:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 2 00:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad6c9e0f143163117c7bcd39246a5f257392cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:c2:66:3b:64:65:8c:00:21:90:46:97:f4:
a6:65:f4:0e:07:b1:74:b4:ad:06:dd:12:f4:a3:68:
e7:94:2d:62:94:e0:93:92:4c:af:46:fe:b1:f1:f0:
3d:8e:ee:24:a3:6d:e9:c2:e4:8f:b0:56:83:b5:4e:
60:10:d8:5d:4b:83:4d:cd:aa:94:aa:cf:5d:d2:6c:
c6:24:98:49:90:70:e5:c7:49:12:d8:5b:e7:6c:fa:
13:fe:cb:a2:47:17:63:c3:e8:ae:e2:2e:35:b0:83:
64:08:ac:8a:12:1c:d9:0f:9c:e7:d7:26:d8:e3:58:
19:c1:42:55:e8:dc:ca:e1:a6:e7:60:3a:68:41:a6:
c4:2c:1e:2e:73:76:07:b1:e2:9f:0d:d8:7e:3e:0f:
b6:36:dd:35:0d:cd:c5:07:7b:0f:8e:dc:d3:9e:c1:
82:bb:95:c4:89:63:f3:3c:41:cc:0d:cd:98:c6:dd:
19:bb:5b:6f:da:d5:04:6d:e7:c2:a2:60:a9:28:60:
c9:95:11:b8:19:66:20:1c:04:11:2a:54:e0:66:b8:
8d:66:f0:50:11:b1:39:b3:4a:e4:62:a5:dd:52:9f:
2e:0e:85:93:ae:35:b3:12:39:8c:47:c3:ac:49:2a:
e6:11:60:09:09:6a:bd:dc:87:e6:33:3a:45:ec:d7:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:C9:E0:F1:43:16:31:17:C7:BC:D3:92:46:A5:F2:57:39:2C:F9
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/WtbJ4PFDFjEXx7zTkkal8lc5LPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.56.0/22
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b9:ad:c2:ee:53:58:2d:ec:ff:9e:e6:f5:90:c2:34:41:75:
41:b4:81:7c:85:b8:05:dc:6e:ad:47:9e:b9:f2:f7:7a:44:96:
c5:89:5c:e3:74:0a:d2:ef:1c:56:69:b7:52:a1:3b:2f:0d:4d:
c8:74:07:68:5f:e7:ac:e4:ce:c8:b0:14:32:36:ee:6b:e7:ba:
dc:11:f6:a4:5f:ac:f4:fe:ad:db:ef:b7:22:84:ba:cc:6d:f0:
e4:09:4c:b8:98:86:54:c3:04:35:55:e7:34:ed:02:16:d4:0f:
aa:a5:2b:5d:20:d4:53:1c:c1:d3:3a:d1:6f:66:35:d7:6e:be:
0e:a5:c9:5c:5c:16:61:8e:41:88:ad:97:4d:b3:38:dc:da:39:
f4:4f:d7:d5:01:c4:75:95:f2:5b:0c:c4:69:3e:02:36:08:45:
e4:a5:3e:f1:ff:7f:54:2d:96:c0:5e:b8:94:6a:bd:99:84:69:
ea:00:1c:c2:6e:aa:e8:f4:e7:d0:69:e3:e2:3b:4a:37:bb:0e:
02:96:0a:e2:97:db:71:91:f3:ee:17:25:fe:a6:29:fc:c6:91:
62:24:fd:8c:74:de:eb:cd:a6:8d:33:99:48:9f:28:3a:32:24:
7e:c2:67:9e:e5:29:2c:ec:dd:31:65:92:10:16:6d:55:90:52:
66:ef:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:55:49 2024 by rpki-client on console-ams.rpki-client.org