Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WaljjXESqr9elEEWWqdDKf-3mP4.roa
File: WaljjXESqr9elEEWWqdDKf-3mP4.roa (raw, json)
Hash identifier: HbaudY6ymFbYfXd0ViBRJkAjxhhX3w9DZ6el2OVy+Yo=
Subject key identifier: 59:A9:63:8D:71:12:AA:BF:5E:94:41:16:5A:A7:43:29:FF:B7:98:FE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D4611B74BB1EBD9CBBDEBFEC8FAE1
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WaljjXESqr9elEEWWqdDKf-3mP4.roa
Signing time: Tue 02 Jan 2024 08:32:13 +0000
ROA not before: Tue 02 Jan 2024 08:32:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:46:11:b7:4b:b1:eb:d9:cb:bd:eb:fe:c8:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a9638d7112aabf5e9441165aa74329ffb798fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:91:4f:8a:00:01:05:40:42:5d:22:f5:37:
50:16:ba:51:bc:c6:af:69:f3:20:04:fa:15:c3:8f:
fc:d1:33:1e:e7:14:85:89:10:1f:0a:7e:ec:ce:dd:
a9:4e:55:f8:4b:42:5c:58:74:44:1e:58:14:2d:7e:
03:99:02:2e:9a:05:a9:dd:ab:c4:c0:d7:9e:82:71:
d9:d1:c8:df:19:98:e6:17:a3:91:95:51:1c:f9:25:
28:34:ee:bb:3f:28:90:df:a3:f2:eb:83:cb:1c:bb:
40:a7:13:d2:59:8f:2c:88:01:a7:a9:c6:e5:d9:7c:
f8:6f:61:20:34:4a:54:69:aa:01:c4:1e:eb:7d:23:
e6:c7:79:fa:3d:74:ac:36:55:5d:64:a9:a8:f4:da:
b8:70:d1:13:a4:e0:8c:c6:1b:46:82:35:92:2b:5f:
19:bd:60:e6:21:5a:96:08:8c:da:2c:0b:ad:28:e8:
30:fd:f3:c7:50:e3:07:36:8c:14:d8:43:da:e2:2e:
63:97:84:eb:08:81:82:6d:0d:08:68:36:b0:7a:20:
92:e2:7f:8d:3a:9d:34:d4:22:c4:f8:4e:52:37:23:
41:e6:9f:46:1f:d9:9e:f8:a7:26:b5:98:7e:d9:d5:
23:65:5f:45:8b:27:88:f8:c0:91:86:24:a4:ba:be:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:63:8D:71:12:AA:BF:5E:94:41:16:5A:A7:43:29:FF:B7:98:FE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WaljjXESqr9elEEWWqdDKf-3mP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:95:8d:ff:26:47:54:b7:bd:56:94:93:89:b7:1e:36:c0:50:
95:82:1e:31:b5:c4:13:8f:3c:23:ad:64:aa:1d:be:ec:ea:bd:
24:43:cf:c7:2e:fd:47:15:3c:06:81:9c:da:91:31:f3:f4:6c:
46:e0:0e:a9:f4:54:42:f2:fe:9d:c9:79:a9:7a:f3:5d:82:4e:
43:f5:65:53:c0:2d:54:89:f6:41:69:15:14:7a:52:b0:11:09:
0a:c5:5e:66:03:e5:71:fa:7c:62:06:f0:a6:0c:ad:09:1d:6c:
5b:5d:e6:46:d6:57:75:2e:d4:8a:54:45:ff:b7:2a:37:06:e8:
97:49:3b:95:81:93:24:1f:e5:2d:0d:76:65:bb:85:45:4f:1f:
91:94:88:86:b4:20:9a:7b:26:e0:5f:b7:3b:d5:b6:3c:12:b5:
82:16:93:67:5d:77:dd:c9:8a:20:c4:94:41:4b:ca:60:99:a5:
61:40:af:a8:5d:0f:0e:8e:36:08:f8:34:14:a7:32:50:82:09:
a2:52:9f:c8:32:ee:35:bd:e7:95:b5:27:de:f0:85:9d:67:1e:
cb:6d:08:16:78:e4:62:20:35:2b:c2:ff:4b:94:f8:2d:13:a8:
98:14:af:4c:2a:6a:3a:91:c1:e2:1e:0d:f1:cd:6b:4c:11:72:
11:ca:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:45:16 2024 by rpki-client on console-fra.rpki-client.org