Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/W58IIFHonBpnwcE3w7SDvW6YZ_E.roa
File: W58IIFHonBpnwcE3w7SDvW6YZ_E.roa (raw, json)
Hash identifier: EIJwalQdR/kAly4OkRyENjIsZzIoh6x2HuPlXO+x0m4=
Subject key identifier: 5B:9F:08:20:51:E8:9C:1A:67:C1:C1:37:C3:B4:83:BD:6E:98:67:F1
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 018CC8701932C7098CDDF263D302F49C129A
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/W58IIFHonBpnwcE3w7SDvW6YZ_E.roa
Signing time: Tue 02 Jan 2024 04:30:38 +0000
ROA not before: Tue 02 Jan 2024 04:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199508
IP address blocks: 185.195.149.0/24 maxlen: 24
185.195.150.0/23 maxlen: 23
89.41.48.0/24 maxlen: 24
85.194.236.0/23 maxlen: 23
185.11.208.0/22 maxlen: 22
89.42.43.0/24 maxlen: 24
45.8.128.0/22 maxlen: 22
195.192.250.0/23 maxlen: 23
2a03:6f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:19:32:c7:09:8c:dd:f2:63:d3:02:f4:9c:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Jan 2 04:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b9f082051e89c1a67c1c137c3b483bd6e9867f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:ed:a5:31:ee:a0:a5:d4:84:ec:a7:0d:4b:
d0:95:6c:2d:1d:88:3a:f4:21:e2:d5:a5:d5:60:1d:
f2:43:39:5f:14:bc:d3:bc:d8:c5:fd:af:f8:48:0b:
59:c8:11:48:cf:8b:9c:78:83:91:6d:8f:37:24:c1:
10:8a:e2:c4:aa:f0:de:85:21:29:81:39:cc:d6:a1:
66:b5:fa:4c:f8:86:6b:c8:d4:a2:e0:91:0a:f5:fb:
b3:e4:3e:ec:87:71:22:47:aa:49:9d:eb:7f:24:f7:
ef:53:89:eb:91:26:04:8c:7c:12:8c:6e:0c:c5:68:
a4:f7:87:69:f7:80:81:c5:be:2d:09:8d:5b:09:c9:
3c:22:da:7e:d5:fa:20:08:d3:88:0f:cf:7f:a5:57:
88:5c:91:9b:2f:37:3d:0e:23:39:9f:f5:87:07:71:
b9:e5:79:e3:bb:60:29:f6:6e:00:8c:62:6c:f8:c5:
01:3d:0e:f0:6c:db:93:f3:c7:ed:14:1c:6a:31:a4:
e8:a4:fd:df:fc:5c:96:3e:38:f0:d9:00:9a:38:dd:
18:92:89:85:53:d0:17:8a:c5:7d:4f:87:15:c0:2e:
04:89:92:b0:8c:25:f1:7b:9b:c3:a3:e1:91:56:0f:
3f:a5:01:3d:55:01:cb:a0:66:0e:d7:44:ec:99:01:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:08:20:51:E8:9C:1A:67:C1:C1:37:C3:B4:83:BD:6E:98:67:F1
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/W58IIFHonBpnwcE3w7SDvW6YZ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.128.0/22
85.194.236.0/23
89.41.48.0/24
89.42.43.0/24
185.11.208.0/22
185.195.149.0-185.195.151.255
195.192.250.0/23
IPv6:
2a03:6f40::/32
Signature Algorithm: sha256WithRSAEncryption
42:ee:de:82:a7:01:55:75:05:b8:83:f1:75:aa:e9:85:32:4b:
37:63:51:06:bd:2a:62:12:cf:ea:55:13:23:db:62:a8:5c:17:
f1:28:0f:3e:f1:d3:93:ad:33:e1:6d:27:d0:09:33:fd:06:f7:
f7:92:29:89:39:83:12:0f:eb:49:42:a3:51:23:53:99:dc:1c:
35:4a:d9:f5:45:dc:d7:41:e5:66:d3:81:21:a9:94:d5:09:ff:
27:83:8f:95:5d:a7:7f:40:32:b3:97:e4:26:15:5a:6f:90:91:
db:d4:25:f1:0e:3c:6a:c2:6f:68:fe:1a:df:ba:6f:b0:2c:c9:
d6:6b:2f:38:f9:67:30:41:db:0b:68:da:d9:c6:f1:07:c7:e3:
e4:46:52:3f:db:43:13:bf:dd:53:4f:c9:f3:20:70:a1:41:13:
00:83:6a:d0:89:ed:a0:aa:ac:86:7e:5f:ab:d8:57:a3:05:f5:
a7:b3:ea:03:83:a8:8f:a5:db:79:30:e5:49:56:6d:70:cb:7f:
75:69:6c:59:80:6b:94:90:5e:3e:bd:df:54:a8:d2:be:38:1f:
6e:84:d7:fb:55:2e:17:d4:bc:51:ba:37:f4:20:6a:c9:4f:bf:
e6:77:2e:08:5b:57:98:f7:c6:68:12:5e:03:31:ac:be:3c:b3:
4d:03:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:21:50 2024 by rpki-client on console-ams.rpki-client.org