Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/WK-dS27G35AxWVVIGLPvIIeDn60.roa
File: WK-dS27G35AxWVVIGLPvIIeDn60.roa (raw, json)
Hash identifier: p24lkRsNQKzxv9yCaRoJp+A/ByFmRZPUjz5eWqifHfY=
Subject key identifier: 58:AF:9D:4B:6E:C6:DF:90:31:59:55:48:18:B3:EF:20:87:83:9F:AD
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 018D3B95D4DD7752BC92EBB4649C2A87949A
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/WK-dS27G35AxWVVIGLPvIIeDn60.roa
Signing time: Wed 24 Jan 2024 13:08:11 +0000
ROA not before: Wed 24 Jan 2024 13:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 185.36.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:95:d4:dd:77:52:bc:92:eb:b4:64:9c:2a:87:94:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jan 24 13:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58af9d4b6ec6df903159554818b3ef2087839fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:d2:86:16:2b:fc:9d:2f:7c:96:77:3f:df:
2b:f8:2f:c0:78:89:a9:95:36:d4:4b:25:04:76:3d:
ae:0a:97:d4:50:10:e0:b2:99:0b:38:15:1f:e6:ed:
13:35:22:c5:2b:0a:88:3e:f0:42:aa:ab:20:9b:2b:
20:7a:77:19:10:f5:c1:ee:be:ac:8d:80:68:35:57:
13:5e:da:a4:4d:21:4e:76:03:bd:99:a5:ff:9b:6c:
e5:f7:01:ea:98:a8:d5:11:3d:46:ce:c4:47:43:80:
98:ab:7e:e8:98:37:57:4b:81:72:2e:97:63:02:60:
6e:ad:57:41:f9:c6:c7:07:db:ba:99:3d:e5:ad:fc:
3d:4d:11:04:d7:97:52:b1:22:98:ba:64:1e:52:f9:
e9:6f:d5:2c:44:1a:dd:36:ac:41:3a:cc:b7:ed:de:
29:29:59:8f:33:1d:04:94:08:60:c8:fe:71:45:14:
d9:e6:ac:e5:22:ac:45:65:39:43:db:a2:fe:bf:b8:
3d:85:7a:7b:aa:1b:d8:1d:34:8f:94:d9:71:e5:9c:
d4:ec:72:21:b6:48:09:80:59:9d:88:09:15:15:48:
26:64:43:89:5b:92:0e:af:20:91:55:d3:88:9e:2d:
1d:b1:b5:ae:76:63:54:47:56:b3:e0:a9:42:55:f4:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:9D:4B:6E:C6:DF:90:31:59:55:48:18:B3:EF:20:87:83:9F:AD
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/WK-dS27G35AxWVVIGLPvIIeDn60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.145.0/24
Signature Algorithm: sha256WithRSAEncryption
24:df:cd:42:4f:a1:2d:d9:47:f0:31:43:ce:53:f9:4a:69:a9:
7e:6c:1f:52:f7:cb:02:52:2f:85:17:a6:4c:40:56:4c:1e:87:
eb:f2:7e:19:9c:50:84:7f:13:f8:57:9a:05:e3:8b:55:e2:60:
b7:67:40:e5:08:00:90:e4:09:78:ed:ef:a3:75:91:28:49:e6:
b5:b3:3e:89:a7:9e:d3:46:64:92:6e:04:cc:04:51:6d:86:2d:
f0:4b:af:8d:5c:b9:e7:88:94:55:5a:fa:1b:35:fe:d8:7f:85:
53:59:47:4e:51:fb:52:0f:43:94:10:58:5d:da:f6:60:e6:3b:
ad:fe:33:65:0a:98:89:a4:8f:af:03:f7:0d:18:85:e0:57:fe:
15:ac:56:5c:02:e9:ab:bc:7d:99:72:f8:8f:91:1e:c1:75:7e:
a7:76:8e:bf:d4:3b:57:87:cf:58:1c:14:e3:7a:bd:cb:fc:7d:
e7:48:67:1a:81:17:77:48:09:91:63:6a:da:1b:5f:d9:ae:bc:
7a:6a:b3:16:02:9d:58:f8:b7:cd:e8:2d:83:11:02:85:e9:d3:
6f:aa:b3:a2:38:2c:9e:3d:ab:03:74:b4:a3:7d:bc:2a:9e:54:
5a:db:44:21:d5:bc:c4:41:73:8d:5c:9a:a0:26:64:15:aa:91:
65:ee:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:06:54 2024 by rpki-client on console-ams.rpki-client.org