Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/W4PjWzdJ1yTsQU04Mf3bVVM8EQU.roa
File: W4PjWzdJ1yTsQU04Mf3bVVM8EQU.roa (raw, json)
Hash identifier: AHjQpFEhiCqLpTiIIrh887U+y6ULQC4Hl7OMByB3dcU=
Subject key identifier: 5B:83:E3:5B:37:49:D7:24:EC:41:4D:38:31:FD:DB:55:53:3C:11:05
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 018CC2DAC232C354B76197E3309F54CA01C7
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/W4PjWzdJ1yTsQU04Mf3bVVM8EQU.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199758
IP address blocks: 185.86.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c2:32:c3:54:b7:61:97:e3:30:9f:54:ca:01:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b83e35b3749d724ec414d3831fddb55533c1105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:b8:70:84:a8:77:4c:0c:89:6d:06:cc:d5:
f6:f9:e4:7c:cf:fe:88:c8:fb:70:78:ec:06:b4:d6:
ad:04:f0:7a:ca:8b:af:4c:f2:8e:f6:09:a6:f1:fc:
5c:19:c9:46:a4:5b:72:0e:ae:54:66:04:86:da:99:
7e:de:69:a2:c4:fa:a8:42:51:2c:26:71:e9:bc:1a:
c6:15:7a:87:3e:01:e2:90:44:bb:df:ee:5f:e8:e1:
28:46:99:2d:64:4d:20:68:e7:59:1b:95:1c:6c:33:
e6:c2:b1:31:9e:df:ff:61:c8:38:5f:ad:8e:04:84:
e3:e3:fb:29:f5:37:0f:2b:3c:2e:1e:50:a8:31:44:
75:50:12:28:fa:44:30:4b:35:b3:43:30:3a:55:77:
d9:7d:b3:cc:bb:ef:a3:3a:49:95:d4:c2:a4:5f:8c:
97:37:8c:e8:49:3d:99:0a:f9:fa:44:93:7b:06:16:
cd:9e:fc:66:73:a4:e4:89:4d:a5:d0:8f:d7:0b:4f:
b6:18:85:89:20:e5:94:c8:56:6c:ca:79:49:2a:e1:
f4:bc:f7:a8:56:88:93:2e:8d:04:eb:70:45:47:0d:
aa:26:8f:89:14:9d:ab:54:0f:21:b8:89:a1:93:29:
e9:37:10:a8:f2:40:dc:c1:03:ff:11:8d:a4:db:cc:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:E3:5B:37:49:D7:24:EC:41:4D:38:31:FD:DB:55:53:3C:11:05
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/W4PjWzdJ1yTsQU04Mf3bVVM8EQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.196.0/22
Signature Algorithm: sha256WithRSAEncryption
52:3c:45:e6:96:7b:b3:96:33:98:33:b4:eb:2a:16:8c:cc:8f:
31:4d:0c:06:88:80:f3:53:4d:3d:e8:d8:d5:91:86:3c:98:6e:
20:0a:af:38:2e:81:fd:f0:cb:dd:5d:31:f8:46:f3:e1:fa:ae:
f8:5e:1e:ce:ba:86:c8:29:47:6a:b2:9b:4e:43:5b:c6:7f:56:
7c:30:61:9b:2a:0b:b1:92:82:25:51:4e:cc:7a:3b:eb:97:a0:
1d:f3:39:0a:71:61:62:10:56:53:37:8a:d9:9a:31:ec:c6:36:
3c:9a:f2:a4:97:d3:8b:2f:fc:77:08:37:ce:c0:6c:30:4c:8d:
c7:43:1a:c3:dd:c9:7c:b9:92:40:1e:8e:ac:01:ba:48:b4:cc:
b8:5c:14:e7:01:84:09:21:bf:41:e5:dd:a3:41:8e:29:dc:cf:
ee:3f:4d:74:9d:82:1b:79:28:de:aa:1b:3e:1a:3e:7c:8d:6b:
0d:6c:4a:6f:33:df:28:d0:11:97:c3:61:c6:f7:cb:29:57:41:
8b:c8:be:6f:dd:51:7d:ac:54:cf:ce:e2:ce:48:3f:51:eb:a0:
39:a2:ca:95:a0:f5:f6:92:03:0c:44:0b:0e:07:70:d8:bf:9f:
b5:b1:6c:5f:70:07:60:73:d1:6a:e1:f0:38:6a:33:77:3b:97:
04:90:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:48:01 2024 by rpki-client on console-ams.rpki-client.org