Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/wFii1jfmUMdvpxY-CWUztGp1p94.roa
File: wFii1jfmUMdvpxY-CWUztGp1p94.roa (raw, json)
Hash identifier: viJZbmmrzW6Gf2QJ6u/10+RZWrbvE3ygezyFqQpp5SU=
Subject key identifier: C0:58:A2:D6:37:E6:50:C7:6F:A7:16:3E:09:65:33:B4:6A:75:A7:DE
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 018CC8713584BBD1FAFB7278852CAF8C6AEE
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/wFii1jfmUMdvpxY-CWUztGp1p94.roa
Signing time: Tue 02 Jan 2024 04:31:51 +0000
ROA not before: Tue 02 Jan 2024 04:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61157
IP address blocks: 185.5.24.0/24 maxlen: 24
185.5.25.0/24 maxlen: 24
185.5.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:35:84:bb:d1:fa:fb:72:78:85:2c:af:8c:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c058a2d637e650c76fa7163e096533b46a75a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:9c:47:cf:7a:a8:60:db:56:b6:ba:2e:4a:
3a:64:ad:e6:40:41:58:a8:ac:6d:8f:37:9f:9d:a3:
85:90:69:de:7c:0a:d6:07:6f:a4:aa:7f:6e:ad:73:
db:c1:48:60:df:2c:03:de:c0:60:00:69:6d:51:9e:
28:43:d2:95:74:b0:8e:11:4a:4a:97:85:d7:5e:7e:
52:ff:0e:7d:ae:26:f0:ae:87:e0:30:b8:ef:f5:e0:
49:fe:c3:65:fc:71:db:f1:ec:cc:b8:55:e2:d2:be:
be:75:80:6a:65:97:06:58:52:60:eb:54:27:83:92:
28:94:17:51:d1:5f:7d:bd:dc:a4:e3:8a:43:5a:a3:
23:21:de:b5:f7:5a:76:a6:bd:f0:e6:be:28:7c:f7:
3a:85:76:cd:fc:92:39:0f:7b:67:e8:3b:b9:d8:99:
89:6d:54:a6:a4:87:f1:a5:31:bc:9d:40:2f:5e:0b:
28:b0:97:e7:4c:ff:95:19:b1:ab:f5:cb:c1:df:f9:
c6:20:c7:4c:30:08:5f:7b:06:59:2a:b9:87:78:0d:
3d:1b:25:d8:6a:3c:de:f7:fc:39:5c:91:0f:4a:c8:
81:67:64:ff:f0:9d:27:b8:b9:1b:48:10:1d:25:eb:
e9:5b:51:db:95:ae:8f:b6:7c:5b:9b:2f:b7:ce:76:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:A2:D6:37:E6:50:C7:6F:A7:16:3E:09:65:33:B4:6A:75:A7:DE
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/wFii1jfmUMdvpxY-CWUztGp1p94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.24.0/23
185.5.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:da:06:ea:ea:02:46:bc:28:f8:8f:cb:a5:fd:00:5e:2f:fd:
e9:a7:79:70:4d:03:51:bf:c6:db:1e:44:b3:f0:e1:f5:5f:ca:
0d:2b:b4:ba:da:e9:48:2e:55:ce:54:f5:c8:13:fb:18:4b:b3:
06:e0:54:d3:b3:2a:4c:7d:6f:9d:f6:a9:0b:42:0d:ea:31:98:
f4:c8:03:d7:92:3a:a8:0a:9d:33:f2:20:17:16:be:f2:eb:4e:
74:c6:c8:b5:7b:a8:67:0f:6f:07:e0:9f:c9:33:a9:cc:9e:85:
c5:91:35:3a:9b:9b:f8:19:03:4a:ba:0c:e5:04:0b:03:d3:2a:
6f:43:b5:76:3a:a8:4d:90:e2:72:bf:70:b5:b4:e6:18:68:5c:
3a:da:71:74:03:d0:e1:14:5a:53:5e:91:77:f7:1b:69:3f:34:
d3:a3:61:c3:b0:6a:c7:65:ba:e9:c3:6e:ed:7e:8d:80:65:0f:
13:7f:44:5c:68:31:49:82:13:99:bc:9c:00:a8:59:b6:d4:28:
2b:e3:a9:c5:7f:a6:88:7c:20:b5:16:ba:f0:f7:20:95:fc:55:
de:66:ca:2d:31:0e:1d:23:d9:0a:49:fd:25:8d:78:58:54:20:
ba:ea:e0:b7:38:57:d2:ab:4b:2c:b3:23:54:4f:67:a4:4f:1d:
d6:38:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----