Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WV58BxxDZSjQ0-rQ62_pXIIOka8.roa
File: WV58BxxDZSjQ0-rQ62_pXIIOka8.roa (raw, json)
Hash identifier: F/Td4POVwH5bjfQcM3UbKy920X+hImMlHKdskPisVxc=
Subject key identifier: 59:5E:7C:07:1C:43:65:28:D0:D3:EA:D0:EB:6F:E9:5C:82:0E:91:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1D038529FF20BF6509F477645182
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WV58BxxDZSjQ0-rQ62_pXIIOka8.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59679
IP address blocks: 31.148.223.0/24 maxlen: 24
146.120.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1d:03:85:29:ff:20:bf:65:09:f4:77:64:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=595e7c071c436528d0d3ead0eb6fe95c820e91af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:06:86:eb:c8:7b:2d:35:43:83:88:9f:2a:
5f:c5:d4:44:dc:4f:f2:ba:bd:64:48:2b:18:c3:9e:
d5:a0:ce:69:82:64:a3:ab:c0:ed:b1:f0:a7:c6:43:
9d:e9:4d:d3:9c:7b:90:67:2c:9f:b2:a1:e5:1f:71:
a9:c8:41:f5:4b:a2:87:a1:5a:0b:25:6d:53:2d:45:
05:42:fa:f4:83:d0:b8:44:3e:c9:05:7a:94:cb:15:
cf:6c:46:de:59:5f:24:8a:58:59:f1:67:f9:fa:e3:
bd:73:5c:ec:de:e5:89:74:4c:f9:e4:cf:5a:04:18:
e4:26:36:f5:64:3e:4c:dd:6c:d5:3c:c3:a3:85:b2:
ee:5a:f0:e0:a1:e2:84:11:6d:2b:b8:e3:1b:fb:b7:
09:34:7a:b4:75:cb:36:58:49:f9:05:1c:88:9d:31:
e3:24:d3:6e:78:15:75:8b:2f:c2:2e:75:7e:d1:2b:
27:5b:ac:38:f9:a0:13:8e:32:a9:b6:88:51:ff:a9:
9e:71:97:03:66:96:63:f1:fb:8a:60:f4:2f:18:11:
44:cc:2c:ee:19:bd:bc:c7:1a:92:6f:4c:4c:d2:17:
44:19:1e:a6:7e:30:68:5c:9d:bf:80:3a:2b:88:03:
ad:f6:d2:39:68:93:ad:fb:97:21:5f:d8:0a:cb:04:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:7C:07:1C:43:65:28:D0:D3:EA:D0:EB:6F:E9:5C:82:0E:91:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WV58BxxDZSjQ0-rQ62_pXIIOka8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.223.0/24
146.120.108.0/24
Signature Algorithm: sha256WithRSAEncryption
23:93:bd:38:b8:43:dc:70:cd:6e:ad:95:0f:fe:e7:2e:41:c1:
18:3f:c2:3a:39:3e:8c:d2:3e:da:4d:83:eb:be:f3:96:62:1b:
f4:0a:5f:40:42:2b:2f:fa:88:2d:83:40:da:a2:d0:24:69:ca:
51:60:a9:a1:b6:6c:39:23:69:f7:c1:37:29:c9:ce:71:06:29:
0a:5b:61:82:b7:bc:88:e9:0f:0f:65:df:d9:ec:11:c5:0d:9a:
f8:3e:be:38:72:c8:0c:e5:70:4c:ec:c2:b4:84:74:0f:9f:f2:
27:77:39:e5:2e:bd:f1:13:36:1b:6b:be:99:e8:6d:fb:7d:2f:
56:9e:16:b6:58:60:cd:4a:81:1b:1a:28:19:02:81:52:2f:4b:
bd:cb:01:b3:9b:c1:a1:86:ee:0d:45:d1:44:d2:66:ae:e7:13:
03:d9:8b:9b:8f:24:6f:f0:95:5d:b2:a8:03:ae:74:99:5d:20:
18:75:c6:20:92:eb:06:b0:fe:f1:da:f3:10:08:ac:0a:c7:bd:
51:4a:69:1b:ab:ac:8e:de:11:fe:a8:ff:f6:8c:8b:db:80:aa:
03:e8:f8:fb:ff:fc:11:68:cd:dd:3b:7f:21:a2:b6:99:62:37:
9e:a2:e3:65:b4:5f:19:d5:0c:05:02:30:48:c9:96:cf:11:e8:
c4:e8:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org