Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/wvNhInDDoFwNQ3eyCqK89cVvaKw.roa
File: wvNhInDDoFwNQ3eyCqK89cVvaKw.roa (raw, json)
Hash identifier: 4Zf74gc3wTEYC584RZrbwfO+kpeC4LSRjlIPUYxLFz0=
Subject key identifier: C2:F3:61:22:70:C3:A0:5C:0D:43:77:B2:0A:A2:BC:F5:C5:6F:68:AC
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01914A493EB019C059FD2262F3631C0E8ECC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/wvNhInDDoFwNQ3eyCqK89cVvaKw.roa
Signing time: Tue 13 Aug 2024 05:49:59 +0000
ROA not before: Tue 13 Aug 2024 05:49:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58345
IP address blocks: 5.134.32.0/20 maxlen: 20
185.102.204.0/22 maxlen: 22
193.108.206.0/23 maxlen: 23
193.108.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:49:3e:b0:19:c0:59:fd:22:62:f3:63:1c:0e:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 13 05:49:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f3612270c3a05c0d4377b20aa2bcf5c56f68ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:3c:a5:13:14:2e:36:6b:02:ef:03:2f:73:
31:55:d2:02:5e:94:53:2e:c6:48:7f:c5:20:8f:11:
7e:cd:98:4c:5b:44:07:35:6e:a9:e5:1b:31:1e:f5:
4c:56:98:e3:e9:f2:69:eb:47:50:1e:34:37:1e:c0:
c3:4f:17:61:b1:ec:be:50:50:17:55:c1:82:41:11:
59:f5:64:56:42:f1:1a:bc:d6:78:4c:57:d0:85:a6:
83:c3:0e:47:c2:e2:fa:1c:cd:46:a8:1e:0d:a4:5a:
c7:00:07:8c:d9:b1:3c:81:3d:37:04:ab:83:2e:ca:
f8:5e:6a:f2:fd:62:31:a9:d2:b1:cc:3c:d6:21:82:
91:0a:2e:5a:34:2a:f8:fb:57:c3:66:10:2e:e7:0f:
3c:4b:48:5c:a2:ba:d8:0e:59:5d:98:85:93:c0:33:
77:ba:56:19:0d:26:9f:5e:0d:ee:ea:0c:1c:04:37:
68:fe:c0:07:89:fd:66:6f:56:21:21:c3:f0:15:8b:
19:ae:e8:16:20:e8:0f:2c:1c:fb:e6:fb:1b:de:b8:
6b:6a:64:b1:ce:fe:63:87:db:72:5d:81:e9:67:22:
99:13:68:74:43:d2:e8:c1:03:c9:ad:26:a9:35:01:
20:88:7a:5b:fb:b4:a1:c4:64:57:b3:d0:c2:47:1c:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:61:22:70:C3:A0:5C:0D:43:77:B2:0A:A2:BC:F5:C5:6F:68:AC
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/wvNhInDDoFwNQ3eyCqK89cVvaKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.32.0/20
185.102.204.0/22
193.108.206.0/23
193.108.230.0/23
Signature Algorithm: sha256WithRSAEncryption
88:4e:61:3f:5f:19:ff:d3:bc:ac:b9:7a:6a:62:5e:b1:27:97:
be:c8:7f:6f:11:04:17:bc:53:71:70:6c:b8:2c:be:24:d7:2c:
64:2b:e5:44:48:d1:73:18:e5:b6:df:21:0d:3f:ec:7f:8a:74:
8a:8f:75:af:f7:06:23:25:83:e5:5c:f5:31:f5:62:9b:19:3c:
c1:26:c9:82:e0:c6:3e:8e:ab:d8:d8:15:0a:6a:31:7b:3b:32:
e8:21:40:b3:c5:79:a0:99:12:53:e8:4f:ef:37:a6:d1:5e:ea:
53:6c:5e:6e:55:84:b3:e0:05:55:38:14:ce:28:66:45:b7:5c:
36:33:09:aa:1e:ce:e9:a0:39:39:d4:e3:4e:1e:14:6d:e3:f1:
70:34:3e:3b:4e:9b:82:86:01:35:ee:da:c7:4d:f9:e6:87:12:
83:42:fd:23:b5:6a:82:1b:de:c8:01:ca:f3:d5:a9:c6:bf:ba:
d7:4d:a7:9d:a7:db:28:7d:41:8e:60:67:87:87:b6:73:6c:11:
15:aa:94:86:5d:03:c9:76:44:88:ac:d9:05:76:93:5e:e6:8e:
c1:b2:08:a2:4b:67:af:3d:b1:d1:8b:fb:2d:1c:d6:2f:6d:5f:
be:6d:e3:af:e9:a2:af:34:53:79:64:6a:a0:fd:ac:f8:e8:f3:
6a:ce:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:06:58 2024 by rpki-client on console-ams.rpki-client.org