Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/WvW-4d7HrlkC8llP_HQMaTVqahQ.roa
File: WvW-4d7HrlkC8llP_HQMaTVqahQ.roa (raw, json)
Hash identifier: ixTrIKMOfPQY3cmMHtjph1379QCRmxEz+fHoOXR6Mp4=
Subject key identifier: 5A:F5:BE:E1:DE:C7:AE:59:02:F2:59:4F:FC:74:0C:69:35:6A:6A:14
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 018CC4936C12394033034D506C1080C1AAB4
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/WvW-4d7HrlkC8llP_HQMaTVqahQ.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42306
IP address blocks: 185.137.144.0/22 maxlen: 22
176.123.12.0/22 maxlen: 22
2a07:4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6c:12:39:40:33:03:4d:50:6c:10:80:c1:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5af5bee1dec7ae5902f2594ffc740c69356a6a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:9a:2f:7f:e3:06:30:c4:90:a5:ca:8b:df:
23:64:a7:5e:d1:79:5a:9b:c2:cd:c3:46:2b:53:6b:
bc:e8:a1:0a:40:dc:54:6e:28:4f:47:fe:9a:e9:4d:
63:ac:9a:56:c9:cb:fb:c4:47:c8:e7:7f:4e:10:37:
96:b2:f0:30:01:a3:f5:52:75:ef:0f:2f:66:0b:16:
8a:32:ae:57:44:7f:48:61:32:f7:a4:d3:af:df:23:
69:7c:75:7e:a3:11:a8:29:7c:b3:24:39:a6:6b:61:
22:da:eb:83:1b:32:e7:e0:4a:7d:11:27:fc:3a:0c:
6b:48:fa:76:bb:e3:bf:81:8c:79:80:c6:d8:fa:57:
b3:34:f8:e1:45:cd:6a:e6:69:0e:b0:b3:63:85:84:
8b:b0:3b:87:14:15:04:3c:8a:a4:76:0a:5d:e1:d2:
7d:ba:b4:73:31:f4:a9:34:ae:14:4c:55:76:70:4d:
ec:11:55:89:f2:30:21:13:e9:7b:f5:60:a0:8f:0b:
db:94:dd:db:0f:b1:c3:03:a8:34:66:fa:8d:72:a6:
71:d7:ec:92:80:76:60:6e:4b:43:ec:a5:dd:bb:21:
31:57:08:3f:b3:85:3e:45:a0:59:13:e1:af:1e:37:
7e:11:5b:48:81:88:85:96:39:d7:6d:8d:66:84:8f:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:BE:E1:DE:C7:AE:59:02:F2:59:4F:FC:74:0C:69:35:6A:6A:14
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/WvW-4d7HrlkC8llP_HQMaTVqahQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.12.0/22
185.137.144.0/22
IPv6:
2a07:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:77:fb:da:f5:bb:8b:3a:e2:f2:c8:8b:bb:1a:fb:cc:d5:e6:
1a:33:e8:1f:1d:22:e5:70:cc:0f:ab:97:be:15:86:60:4e:a2:
32:a1:ec:9c:49:b0:65:fc:0c:14:10:b3:d0:c3:94:49:b2:86:
8e:b5:4c:93:49:6d:93:c9:e8:f3:87:e3:f7:a1:c5:64:3c:f9:
e5:c4:4f:56:7c:38:33:0b:f8:3b:cd:59:65:09:6f:c6:9e:4b:
22:7e:4d:bf:44:43:2d:41:3f:60:59:ef:86:69:9d:30:f6:55:
56:51:84:c0:76:e4:4c:6b:1f:f0:03:67:07:05:73:0e:e8:48:
cd:82:c9:e5:f9:d9:10:72:55:3f:f1:1b:55:ee:00:39:18:a1:
44:7b:41:1f:fe:c1:dc:c4:b5:3a:57:02:ad:6e:a3:76:81:2a:
54:8b:73:f4:fd:56:b3:d8:ee:e2:22:f5:e6:89:b6:22:1c:79:
c6:6e:b7:73:73:f3:e0:16:be:03:c1:39:ff:4c:ee:78:9d:f6:
5b:f4:e2:7b:9a:30:a4:91:33:25:c3:d3:88:41:67:cd:c7:d5:
a6:e6:2f:0b:49:b2:08:10:5e:2e:64:c2:60:20:e7:0e:a8:c9:
1f:57:3d:c8:67:50:49:96:c4:de:05:4d:fd:9b:99:b4:95:63:
bc:6d:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:44 2024 by rpki-client on console-ams.rpki-client.org