Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wsXZMfdF2xmvjze4coOZdrWx0aQ.roa
File: wsXZMfdF2xmvjze4coOZdrWx0aQ.roa (raw, json)
Hash identifier: mUdfi33AU5BWYjgR3QDo+vrpG7ku+AwIjNGQydcw8sY=
Subject key identifier: C2:C5:D9:31:F7:45:DB:19:AF:8F:37:B8:72:83:99:76:B5:B1:D1:A4
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018EAB37F1FA9B6A10FB9FB81215088CFE67
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wsXZMfdF2xmvjze4coOZdrWx0aQ.roa
Signing time: Thu 04 Apr 2024 22:25:54 +0000
ROA not before: Thu 04 Apr 2024 22:25:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 83.171.244.0/22 maxlen: 22
85.8.160.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
193.32.186.0/23 maxlen: 23
194.93.60.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ab:37:f1:fa:9b:6a:10:fb:9f:b8:12:15:08:8c:fe:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 4 22:25:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c5d931f745db19af8f37b872839976b5b1d1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:cd:23:1f:6e:43:a1:73:40:ae:8f:f3:29:
64:27:87:0b:91:6f:6b:4f:e5:66:44:bb:c5:14:c3:
8e:af:ac:e1:c6:1a:7e:cc:f7:1d:75:e1:57:da:e8:
cd:cf:ef:25:56:84:a0:10:a8:71:29:b7:5f:7f:8a:
c5:9d:9d:2f:15:c8:86:c9:1d:3e:aa:f3:af:83:e5:
ef:3d:b9:48:85:0a:40:2d:c2:6b:0c:5f:ec:d0:7b:
c2:59:a4:41:b8:86:6f:68:f7:fb:f7:e4:20:8d:1a:
16:90:b2:8f:de:cb:d3:01:61:4f:85:85:fb:ff:81:
77:f5:82:60:c5:6b:70:37:9a:37:6f:9a:92:d9:86:
08:50:55:ea:47:d4:fd:30:9d:b8:b5:05:71:2f:c8:
9c:d3:40:f0:62:3a:18:c4:fc:20:fa:88:5c:45:41:
8b:0c:2b:64:47:ab:4b:e6:e1:1c:3b:49:9a:19:a1:
ab:2e:81:eb:b9:8d:cc:97:c4:29:48:69:c2:ce:3c:
4c:46:87:40:d4:ce:cb:01:2b:24:eb:77:e8:cb:5f:
46:72:0c:4d:e7:2a:0c:ee:3f:5f:07:d7:af:75:2b:
22:6b:44:e4:58:51:04:8e:b8:25:51:a8:4e:69:6c:
09:74:ad:42:30:96:0f:1a:8e:92:04:85:d1:4b:49:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:D9:31:F7:45:DB:19:AF:8F:37:B8:72:83:99:76:B5:B1:D1:A4
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wsXZMfdF2xmvjze4coOZdrWx0aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.160.0/22
92.249.60.0/22
188.119.68.0/22
193.32.186.0/23
194.93.60.0/22
212.87.196.0/22
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:2b:70:d0:b2:46:bb:ec:45:bd:b8:c1:73:e7:9a:a8:2a:38:
5b:c9:89:83:1a:5f:08:47:a2:64:1d:7f:27:1f:54:06:a2:6c:
94:7d:8e:4b:7e:48:72:7a:14:78:39:9c:7e:0a:29:e0:1b:7f:
cd:f3:42:a9:2e:38:23:95:e5:64:3d:4e:09:df:13:60:15:87:
44:3e:1b:a6:9b:b0:ed:67:49:dc:db:1c:a1:6c:38:fa:c7:13:
f0:49:2c:42:a1:a2:a3:be:83:aa:cc:89:46:1b:33:06:a2:62:
83:2a:80:1f:5e:e0:07:5a:6e:a6:58:3b:6a:3d:44:19:a7:29:
5e:72:84:d9:fd:cd:c3:13:ff:e3:c4:9d:b3:09:28:35:f2:b5:
98:4f:ad:8b:9a:5e:aa:54:c0:70:c5:13:73:e8:43:0e:44:eb:
06:40:df:ab:79:ed:63:24:88:28:e5:32:84:d7:97:53:10:e4:
e1:86:0d:89:95:f2:28:ce:65:48:fd:ff:52:8b:9a:9d:ff:0d:
a0:94:0c:e2:e4:4f:0f:a9:03:17:40:e5:36:5c:99:8b:9e:0b:
6a:e1:b5:a2:c2:c5:66:28:fb:d6:29:d7:45:52:26:56:34:0c:
75:7f:68:44:ed:73:b7:fc:8d:d3:c9:22:34:39:51:9b:28:63:
ca:e9:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:54:54 2024 by rpki-client on console-fra.rpki-client.org