Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa
File: w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa (raw, json)
Hash identifier: nDyGmJ5Dat2CTwaK83rfZdo2YbcFBKkmBUZqH/fb4yk=
Subject key identifier: C3:F6:57:D3:2B:89:77:3E:70:A7:01:8A:C0:2E:6B:C1:92:27:DC:F7
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 018CC72600FDA471FD0847D114AC6F545D40
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa
Signing time: Mon 01 Jan 2024 22:30:05 +0000
ROA not before: Mon 01 Jan 2024 22:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48233
IP address blocks: 151.237.84.0/22 maxlen: 24
194.69.201.0/24 maxlen: 24
85.187.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:00:fd:a4:71:fd:08:47:d1:14:ac:6f:54:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3f657d32b89773e70a7018ac02e6bc19227dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:72:cd:f9:fb:4b:77:fe:85:6e:a6:72:44:
16:9d:5e:7a:dc:46:28:cc:86:1e:06:0e:7f:7e:5d:
ba:4f:a1:ef:0e:2b:76:44:8b:a4:dd:15:ea:e9:a4:
be:ff:fa:69:22:92:9f:41:76:c8:53:4b:96:25:c2:
8a:75:09:60:1b:10:bb:bf:d7:36:1e:df:04:44:52:
52:56:e9:e3:9f:fd:c5:cd:35:b8:23:43:3b:88:75:
1b:c3:e5:ee:5c:64:0b:16:74:05:3f:65:6f:ad:1f:
24:89:8d:b4:9e:51:45:bc:06:5b:b1:86:3f:8f:e8:
e5:5a:17:d4:0e:6d:b7:aa:4a:15:a2:7d:b3:d3:f3:
de:da:05:43:8c:0f:46:54:a1:47:81:d1:84:b2:97:
aa:dc:1b:51:30:19:13:07:74:f2:57:6a:f1:c6:b0:
4b:ad:a5:8f:d4:ca:28:a0:d9:32:bb:4e:a9:92:8d:
13:1b:e8:c7:45:99:3d:42:e5:bc:4f:6f:d7:1b:da:
bc:6c:fb:ef:fd:54:8c:65:2d:1f:6a:f5:55:1a:df:
43:b8:28:e8:5b:7a:2e:6c:37:51:f4:33:85:de:2d:
bf:50:d2:f5:58:b9:46:51:10:e3:9c:bf:b1:eb:bd:
b4:86:7e:f7:97:4a:6e:27:62:47:33:1f:8e:94:7b:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:57:D3:2B:89:77:3E:70:A7:01:8A:C0:2E:6B:C1:92:27:DC:F7
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/w_ZX0yuJdz5wpwGKwC5rwZIn3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.192.0/21
151.237.84.0/22
194.69.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b1:2c:ce:2a:aa:e0:f2:1b:cd:81:bf:ad:06:b6:9b:85:ab:
df:5c:f8:4a:a0:d7:a7:f6:0f:2d:20:7b:e4:3c:05:df:d7:e2:
f1:38:ee:0d:3e:ce:5f:30:63:29:bc:f0:69:1e:b8:c6:32:4e:
64:8e:c7:b0:06:3d:d4:96:fd:d5:ca:2c:20:67:f8:ae:eb:b2:
87:9c:b7:bf:aa:80:7a:e7:c6:9b:d2:8a:de:12:dd:bb:36:56:
26:62:54:90:ef:c0:5f:83:8b:0c:ae:b0:89:ec:12:15:bd:97:
5d:dd:26:28:79:43:a9:39:0c:bc:98:91:aa:16:00:6f:a8:8f:
99:22:57:68:2b:d9:03:cd:6a:2a:20:46:60:33:d6:17:1a:0b:
c0:d0:9e:e9:f0:4c:36:51:5a:9b:89:5a:14:46:e1:1d:33:f8:
bc:f3:46:f6:31:da:23:d4:ac:f1:66:fc:a0:96:17:76:b9:ed:
99:9b:44:e1:47:e0:9d:73:d5:1d:bd:79:be:e1:4e:1c:43:81:
c4:70:84:f4:d9:05:2b:f9:b5:96:b3:a5:4a:75:9b:53:df:aa:
3b:92:43:26:59:cd:5b:94:21:ee:39:17:19:d4:ee:83:e0:c5:
d9:fe:94:df:80:a9:4d:c7:c8:79:f6:19:82:d3:9f:a9:ba:dc:
40:32:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:25:28 2024 by rpki-client on console-ams.rpki-client.org